Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a1d2f579-2288-3829-9ebf-2135c335bb81.roa
File:                     a1d2f579-2288-3829-9ebf-2135c335bb81.roa (raw, json)
Hash identifier:          YZSNyIkVcvgoxLi5uNNhPfh5ISyZHNF8Gwyn79wxaoU=
Subject key identifier:   63:96:9D:D0:FE:9C:93:B1:1B:8E:62:4F:4A:89:A4:63:20:B8:87:DF
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B0B2FFE917405B6320140
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a1d2f579-2288-3829-9ebf-2135c335bb81.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        172.111.116.32/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:0b:2f:fe:91:74:05:b6:32:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=72891ce8-cfd3-4296-84ea-528c7d7c7cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:4e:f8:df:22:4c:6c:f1:68:85:03:2c:7d:
                    e4:95:90:2a:2d:ab:77:f7:43:bb:cd:f4:a0:e0:4a:
                    d2:38:7e:ff:83:d5:79:bc:34:a7:61:0e:5e:78:80:
                    b1:1e:3e:0f:c2:61:db:ad:c1:bf:be:90:62:3b:7a:
                    b0:5a:22:2a:90:56:46:ae:d2:e8:f1:c2:7b:1a:fd:
                    05:b3:ac:6e:99:3d:8f:5a:f1:01:c1:2d:f0:62:27:
                    59:f9:cf:04:5c:ef:26:e0:f9:5f:64:68:f0:7f:76:
                    db:d6:56:49:a2:b0:9f:de:50:2d:3e:8f:c4:60:e0:
                    58:17:da:94:9d:3c:85:56:20:6b:c4:da:df:19:73:
                    43:1c:e4:57:8e:91:bd:e9:30:a6:14:fb:6e:bc:65:
                    3f:5b:24:35:71:8f:58:f5:a3:ec:db:54:ff:0e:9e:
                    49:d9:d0:af:f7:7f:aa:f3:04:33:d6:26:5e:7b:88:
                    01:34:a1:53:8b:ee:50:8f:bc:ed:da:35:1b:30:5e:
                    51:ee:7e:ea:fd:4a:a9:4b:35:47:f7:83:28:46:24:
                    65:6c:22:f2:81:2f:b6:45:16:6b:2b:49:62:49:49:
                    66:45:91:3b:3d:8d:f9:74:aa:34:17:42:44:dc:c4:
                    6b:71:6f:04:14:7a:bc:f2:38:00:9e:e5:ad:18:3b:
                    5f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:96:9D:D0:FE:9C:93:B1:1B:8E:62:4F:4A:89:A4:63:20:B8:87:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a1d2f579-2288-3829-9ebf-2135c335bb81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.116.32/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:04:a8:78:2a:0c:8a:4e:99:2c:bb:31:71:ea:bb:1c:61:9b:
         b9:ba:55:8a:16:3b:b3:c2:8b:90:b0:8a:96:87:8c:81:a1:d0:
         66:eb:5c:e2:df:0e:60:ff:e5:10:65:81:b7:91:8a:d9:42:04:
         bb:32:b9:21:5e:54:1c:29:47:2a:c9:51:ee:0e:6d:15:40:40:
         76:a6:ef:44:90:7d:3b:54:0c:f9:83:e1:ec:1a:20:6c:9f:06:
         38:ff:46:5c:ba:a4:d6:3b:5d:8d:e2:b5:d7:e0:51:cf:97:7b:
         f5:83:1f:38:5c:d8:e7:71:b9:47:89:bc:28:24:a4:6b:59:e2:
         d2:a7:00:8b:26:ff:1b:ed:83:03:40:a6:0b:d4:5d:9f:bd:a1:
         f3:1b:30:9a:a7:76:cc:a5:ac:51:a9:a9:a2:9f:8e:05:3d:aa:
         54:60:c9:31:08:74:37:74:27:7c:18:3d:6d:49:e7:de:20:f9:
         1c:40:cb:03:d7:31:63:24:dd:75:cd:19:64:25:77:a9:e6:e2:
         a3:89:fd:1f:27:55:c6:13:bb:55:3a:f2:c1:66:55:57:23:e9:
         c6:4c:87:39:de:70:4f:4f:76:8f:d0:bb:4b:15:77:c9:da:06:
         ec:4f:02:e5:ae:f0:b4:6d:c4:af:f0:09:8d:c7:73:89:40:e6:
         36:63:92:ad
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEozGwsv/pF0BbYyAUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk
NzI4OTFjZTgtY2ZkMy00Mjk2LTg0ZWEtNTI4YzdkN2M3Y2IyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaxO+N8iTGzxaIUDLH3klZAqLat390O7zfSg
4ErSOH7/g9V5vDSnYQ5eeICxHj4PwmHbrcG/vpBiO3qwWiIqkFZGrtLo8cJ7Gv0F
s6xumT2PWvEBwS3wYidZ+c8EXO8m4PlfZGjwf3bb1lZJorCf3lAtPo/EYOBYF9qU
nTyFViBrxNrfGXNDHORXjpG96TCmFPtuvGU/WyQ1cY9Y9aPs21T/Dp5J2dCv93+q
8wQz1iZee4gBNKFTi+5Qj7zt2jUbMF5R7n7q/UqpSzVH94MoRiRlbCLygS+2RRZr
K0liSUlmRZE7PY35dKo0F0JE3MRrcW8EFHq88jgAnuWtGDtfcwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGOWndD+nJOxG45iT0qJpGMguIffMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYTFkMmY1NzktMjI4OC0z
ODI5LTllYmYtMjEzNWMzMzViYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUErG90IDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA9BKh4KgyKTpksuzFx6rscYZu5ulWKFjuzwouQsIqWh4yBodBm61zi
3w5g/+UQZYG3kYrZQgS7MrkhXlQcKUcqyVHuDm0VQEB2pu9EkH07VAz5g+HsGiBs
nwY4/0ZcuqTWO12N4rXX4FHPl3v1gx84XNjncblHibwoJKRrWeLSpwCLJv8b7YMD
QKYL1F2fvaHzGzCap3bMpaxRqamin44FPapUYMkxCHQ3dCd8GD1tSefeIPkcQMsD
1zFjJN11zRlkJXep5uKjif0fJ1XGE7tVOvLBZlVXI+nGTIc53nBPT3aP0LtLFXfJ
2gbsTwLlrvC0bcSv8AmNx3OJQOY2Y5Kt
-----END CERTIFICATE-----
Generated at Wed Jun 18 22:28:38 2025 by rpki-client