Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/73faae56-2923-3cd2-a8b2-fc8601bed72e.roa
File:                     73faae56-2923-3cd2-a8b2-fc8601bed72e.roa (raw, json)
Hash identifier:          rtwMKyjFzO57me9CtYOxMIwkjDdzTZ6ndJutiEny+x0=
Subject key identifier:   68:A4:65:AA:D8:B7:5C:0E:5F:A1:66:BB:4B:0F:DA:84:88:13:39:9F
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E9D4A57602F1DE0BBD5574400
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/73faae56-2923-3cd2-a8b2-fc8601bed72e.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     54113
IP address blocks:        172.111.99.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:57:60:2f:1d:e0:bb:d5:57:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=c8023eb5-f35a-499e-812b-7822d153513b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ca:26:77:f4:76:73:53:f3:c4:2d:45:c6:82:
                    2c:b4:45:89:1b:ba:79:35:6b:f6:b9:fc:90:b7:fd:
                    f0:ea:57:b8:97:81:43:0e:48:30:d6:5e:9b:fe:c4:
                    0a:44:89:a8:9f:40:33:aa:1e:59:64:51:9d:6a:ce:
                    30:48:a5:95:dc:4a:56:2f:3c:32:aa:a0:01:a6:ed:
                    6b:47:e5:68:10:19:04:f8:82:f9:16:22:9d:64:d4:
                    be:a3:76:68:61:ef:c7:6a:eb:28:12:8c:72:8e:3d:
                    3f:72:e8:d7:17:f4:3c:d4:ab:6a:7f:c4:f8:d1:86:
                    17:bf:8d:ff:56:41:50:51:fe:16:93:7f:e4:ce:07:
                    bb:41:f1:ff:0e:4e:df:da:8c:f6:7e:d2:c6:f4:8b:
                    5d:90:fb:66:f1:be:83:0c:fc:42:df:42:9b:46:90:
                    ff:bc:8c:10:64:35:f5:c2:66:77:df:42:0e:ac:ac:
                    df:36:0f:22:b4:f9:5f:34:4b:78:dd:22:46:0d:3e:
                    79:38:2c:d2:16:48:98:9e:75:0d:a9:25:26:a6:fe:
                    33:f8:a1:99:fb:a9:75:88:7f:2f:01:2e:90:b0:8a:
                    92:e5:6d:48:a5:9e:2f:ac:c0:6a:dc:59:38:06:23:
                    5a:d5:42:07:05:e2:12:1e:f7:84:51:93:cc:18:b5:
                    5d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A4:65:AA:D8:B7:5C:0E:5F:A1:66:BB:4B:0F:DA:84:88:13:39:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/73faae56-2923-3cd2-a8b2-fc8601bed72e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.99.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:47:e4:9f:fa:c4:17:b3:87:af:a7:e0:b2:d4:ae:39:bf:fd:
         82:f0:dd:3a:f0:b3:98:c7:bd:d3:54:35:1b:40:ad:62:99:e3:
         f3:10:77:70:58:8b:bc:ce:64:81:b3:80:32:a8:45:a0:d9:7a:
         5b:9b:46:4f:61:c2:14:24:60:aa:15:6b:6e:32:c1:09:88:3e:
         a4:fe:aa:93:aa:cc:77:e3:f5:c9:55:95:ac:b9:69:91:f5:8f:
         f2:c6:a1:19:0a:35:29:ca:e2:d0:e4:11:ce:b8:6a:4d:80:ff:
         db:df:fd:f6:ea:78:77:1d:45:dc:1d:4c:58:28:1b:3b:0c:8b:
         35:88:20:72:14:37:23:ac:63:fc:57:5a:ca:2b:86:57:95:d7:
         25:1d:9c:a1:90:94:5d:f2:23:03:07:38:6f:9a:bc:0c:cd:e4:
         41:fc:7b:5a:e4:f0:5b:6d:8e:d9:59:85:38:13:a7:88:a3:9d:
         72:b6:2f:77:02:22:eb:19:5b:db:a9:60:48:1a:ba:5e:17:88:
         53:71:a1:01:43:a2:bf:b3:ed:c9:ba:df:e8:49:93:54:c1:b0:
         3e:9a:4c:4b:6c:19:3b:ce:7d:a6:d2:92:99:ba:69:05:00:4b:
         00:46:b6:98:a3:eb:3b:3e:6f:b5:2a:7a:b7:72:34:7f:1d:24:
         7b:61:12:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:18:30 2026 by rpki-client