Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a1ee935e-6932-3275-81cd-fc2b90b451de.roa
File:                     a1ee935e-6932-3275-81cd-fc2b90b451de.roa (raw, json)
Hash identifier:          J6Cx8KrvWtO22aUUDkrISDjgiuJkf82baRUm28D9w/k=
Subject key identifier:   05:8D:5F:4A:3D:9A:2D:83:33:A7:3A:B4:1C:08:A1:2C:85:0E:1A:06
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B0BCA81C74FD3A0BEC880
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a1ee935e-6932-3275-81cd-fc2b90b451de.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        172.111.124.32/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:0b:ca:81:c7:4f:d3:a0:be:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=1d7b2008-95fb-4f9d-93f0-72da2d627fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:82:cc:62:5a:7d:cf:6c:eb:0e:f1:b9:91:ce:
                    5a:bf:2b:a3:77:f7:6f:dd:e6:54:98:54:cd:3f:29:
                    5f:b8:0c:ae:5e:1c:ef:99:69:d1:d7:77:c3:6a:0d:
                    ed:0b:d5:39:a8:df:41:1f:4e:b6:61:1f:ff:30:4c:
                    6f:2e:2e:32:28:6e:46:5e:b9:7d:a7:fb:41:02:d2:
                    e8:be:32:c2:bd:7e:0d:ed:05:ee:7e:c5:11:f9:3a:
                    40:ac:57:ca:17:5f:a4:d8:68:06:18:80:af:f6:c2:
                    6b:c9:db:a0:cc:64:57:9b:ca:d1:5c:72:ca:c4:fe:
                    d2:69:e7:30:53:da:2d:a4:0d:0e:ec:95:0c:d8:61:
                    c6:c0:c3:48:f0:f3:9b:2a:5a:83:a3:b7:eb:71:2b:
                    c3:4a:c3:4d:2d:4a:9a:68:4c:a9:59:fc:62:16:99:
                    6f:89:42:00:96:a8:03:08:0f:fa:71:86:e4:ca:73:
                    84:5c:20:28:3b:16:83:b9:9b:1c:a8:7c:de:30:b0:
                    0e:02:5b:f3:f6:ee:fc:80:25:88:ac:22:18:1b:50:
                    96:bc:a7:16:82:f9:2b:a3:16:87:f8:56:34:95:95:
                    2c:5b:3f:b4:e2:91:91:53:38:20:74:bf:3a:ed:d3:
                    98:8d:b0:c5:ad:bf:55:19:86:fb:ec:ec:36:04:14:
                    cc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8D:5F:4A:3D:9A:2D:83:33:A7:3A:B4:1C:08:A1:2C:85:0E:1A:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a1ee935e-6932-3275-81cd-fc2b90b451de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.124.32/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1c:e8:7f:54:67:f3:a6:5f:79:ed:da:2a:b9:a8:39:cd:40:
         eb:75:94:34:66:d4:4c:1c:55:50:a0:98:3f:5c:da:74:13:5d:
         71:70:62:db:a7:69:08:ea:5a:d0:62:44:34:89:15:95:1e:57:
         5e:44:f3:fc:a5:dc:b0:10:89:2c:50:b1:57:3f:3f:ea:c0:9b:
         51:cf:72:8c:2c:55:ef:0b:58:e3:8f:25:84:ee:b7:90:1b:e1:
         d8:c2:68:c2:bb:89:62:0e:6b:0e:17:ab:89:4f:05:3e:80:92:
         83:37:e5:64:31:52:c8:b8:14:4c:6c:60:77:59:0d:bb:08:66:
         9d:5a:4e:65:49:16:0b:78:de:ad:cd:9b:a1:bb:4c:78:a1:a2:
         29:d5:d3:ca:54:12:7f:10:aa:ac:2c:94:6c:4e:7a:db:0c:88:
         73:ba:98:29:cc:98:7f:5c:77:56:a7:ec:d2:51:ab:3f:14:48:
         32:73:a4:91:2a:62:3f:93:c6:d7:5e:49:8f:60:c2:df:59:f1:
         42:1c:84:a2:4e:81:81:2d:06:23:5a:20:3d:f9:2f:e5:b6:fc:
         bc:86:83:33:0c:99:6c:74:6f:53:44:0f:63:37:2f:14:81:59:
         ed:6c:b0:02:cb:b5:02:d2:25:46:6a:b1:ad:28:a4:d6:29:1f:
         11:cf:25:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:42:22 2025 by rpki-client