Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8711934b-8783-3631-a9b5-5ebc72de9628.roa
File:                     8711934b-8783-3631-a9b5-5ebc72de9628.roa (raw, json)
Hash identifier:          PlBbYx6gyGRnEPPLto9+QFOxW5TE5rwfAw09ouh/ZnM=
Subject key identifier:   8C:C5:C6:7E:28:A1:C8:04:1B:58:A1:CC:95:4E:65:B1:44:22:F6:3D
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B133F3ACA181DA5FA9D80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8711934b-8783-3631-a9b5-5ebc72de9628.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        172.111.67.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:13:3f:3a:ca:18:1d:a5:fa:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=02394d5b-3ead-4c76-b1dd-24fdfd35b48a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:65:c9:be:29:f8:a9:f5:01:8f:16:2f:83:47:
                    e8:79:f8:54:2f:47:76:c2:10:60:44:88:4e:6b:f8:
                    85:07:8f:35:02:57:11:e3:d0:0c:bb:f5:f2:c8:19:
                    79:d1:98:a4:19:6d:1b:eb:c6:e6:67:66:48:95:99:
                    01:8f:24:16:2b:a5:ec:1f:86:93:c3:5c:8c:ea:1a:
                    f9:8c:bf:cf:00:20:be:5c:97:c5:29:3a:0f:23:b6:
                    d4:00:ba:19:e9:57:f7:0f:2e:43:86:ea:bd:ff:78:
                    bd:3f:d0:9b:44:8b:a2:ec:0b:88:aa:eb:74:b0:ab:
                    ba:13:85:4e:f5:82:f8:84:a3:06:7d:f4:fa:01:16:
                    2d:01:35:64:41:29:24:ff:be:2d:90:60:a3:c9:e7:
                    3d:cd:7e:91:30:37:23:71:8f:8f:6c:a8:1b:e2:08:
                    8d:54:26:1a:72:b6:07:5f:6e:a4:c2:2e:1b:5d:05:
                    66:56:dc:0a:2a:6a:8b:13:a4:f2:78:62:d3:6f:0c:
                    66:66:fd:98:b9:ed:14:45:5c:9a:c4:f7:34:7d:e3:
                    f6:a4:12:92:23:75:90:dc:9a:ab:0f:8d:84:09:3f:
                    78:85:e0:f2:cd:5d:6a:a8:90:fd:57:3d:4f:62:56:
                    40:c7:f2:b4:2c:97:1d:09:23:c9:25:7c:d1:1b:76:
                    dc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C5:C6:7E:28:A1:C8:04:1B:58:A1:CC:95:4E:65:B1:44:22:F6:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8711934b-8783-3631-a9b5-5ebc72de9628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.67.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:4c:b6:e1:57:aa:0b:78:a4:a6:48:4c:d4:5c:2e:b9:36:30:
         c9:19:10:9a:2b:f7:7b:75:49:ec:da:42:cd:4a:cd:3a:64:f7:
         f2:22:6c:25:f5:30:68:0f:49:38:26:05:82:df:ec:f4:c8:0f:
         97:d0:29:f6:48:6b:d0:ad:bd:a4:40:99:c9:8d:74:2b:db:a2:
         0e:8a:81:f2:ea:5b:e3:24:81:36:a0:a6:1c:16:82:e8:4e:a6:
         72:09:f3:9d:2f:a5:01:17:b5:9a:02:94:23:2e:0e:1d:51:57:
         08:e2:75:9e:13:8c:3e:79:09:ac:bc:b7:cf:26:e7:f2:51:a7:
         df:c2:3b:2f:02:07:8a:00:7d:18:bb:57:05:50:3b:70:76:03:
         83:10:1f:cf:79:83:b7:b3:85:59:97:a8:ec:9b:b2:c6:e1:55:
         45:23:5f:de:f3:f6:cb:d0:43:02:7c:88:21:8c:44:cd:f9:9e:
         d9:f1:1f:57:03:46:b4:11:3e:dc:3f:02:fc:18:dd:49:69:80:
         ca:28:f0:f2:69:2d:a0:44:6d:6a:ab:f7:ef:f4:7c:76:bc:17:
         39:62:8e:66:d6:c9:28:ae:fd:8d:9f:b8:9b:50:d1:22:a5:c9:
         24:dc:d0:2d:4b:97:f0:3d:02:d3:01:d8:6a:8b:51:7b:e8:c4:
         1d:07:80:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:17:59 2025 by rpki-client