Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a6850040-56d1-3e81-afa3-abda2afd2118.roa
File:                     a6850040-56d1-3e81-afa3-abda2afd2118.roa (raw, json)
Hash identifier:          Syj4fQDcQNv6yFnCDWJQUxAPYGbJbAtkz/38L2kvFCE=
Subject key identifier:   37:B2:12:76:CD:03:74:8B:0E:C7:CC:C5:DA:22:4A:D3:66:4D:24:AD
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD40782B14FA243BB2522BC00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a6850040-56d1-3e81-afa3-abda2afd2118.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        172.111.70.64/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:82:b1:4f:a2:43:bb:25:22:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=6be1a413-f996-41d7-b0ea-a438288ad933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e4:95:ce:61:fd:bd:76:25:5f:89:a0:9f:4a:
                    e9:86:3e:f1:4d:36:ca:13:56:92:2d:77:05:48:e3:
                    62:0e:6b:d3:ff:34:aa:b5:b9:39:71:45:03:b1:9f:
                    e0:f5:d2:48:1d:b2:32:fe:9d:06:56:3d:1d:cb:e3:
                    66:3f:6d:e7:b9:9b:be:de:e9:95:de:76:d9:71:b9:
                    af:a5:19:9d:4a:e8:66:fd:51:6f:26:c4:fa:5f:43:
                    a3:aa:59:8a:4f:05:f2:b3:b8:7f:a4:ee:f2:fc:ac:
                    4f:db:d5:8b:cd:07:05:c2:a5:40:eb:2b:99:ab:9c:
                    77:e6:68:0b:57:6c:9c:a7:fc:e0:14:0d:db:46:d0:
                    ed:42:20:ee:9f:0d:e6:d9:77:be:6d:52:43:d6:a6:
                    79:ff:82:af:1e:9b:6f:1e:52:bc:07:3a:f0:18:97:
                    c7:05:48:0c:60:5d:d9:d9:c3:0a:29:7a:20:d4:28:
                    de:ac:55:aa:28:80:c5:1b:96:47:65:af:66:e7:c1:
                    06:f2:9b:2d:39:f5:e5:7a:ec:92:7a:19:33:e3:15:
                    61:85:53:63:8d:07:a6:7a:9c:df:f6:eb:1d:ee:0a:
                    cd:48:fa:b2:d1:2c:aa:eb:20:4a:8f:c8:c7:07:5f:
                    58:37:10:db:a2:44:c7:6a:0f:85:6a:f1:af:2a:69:
                    64:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B2:12:76:CD:03:74:8B:0E:C7:CC:C5:DA:22:4A:D3:66:4D:24:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a6850040-56d1-3e81-afa3-abda2afd2118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.70.64/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:40:20:1b:cb:d3:e5:2a:f2:8c:c8:49:f0:55:8a:47:75:59:
         44:99:45:52:1c:73:c7:14:e1:c0:7f:f8:46:12:07:6c:76:b4:
         e8:9a:2d:03:84:6b:0e:a8:ae:6f:5c:7c:a4:86:be:cf:b4:b7:
         22:5e:8d:13:94:3d:00:eb:ac:dd:ec:55:43:ff:c0:18:44:a5:
         9f:3f:5e:06:dc:98:af:e1:a1:88:1a:d2:29:cf:73:85:1e:be:
         c7:55:f1:27:bf:9a:38:aa:40:76:83:ed:b9:74:46:2e:e8:1f:
         10:8e:0f:03:ef:44:9b:a2:4a:94:78:cd:6b:0e:ba:e8:32:26:
         d7:c7:be:c8:f9:85:85:93:c8:92:06:cd:39:99:e4:f0:20:c3:
         d2:3b:cb:a7:18:e7:55:39:9e:01:c5:bc:37:76:22:16:6a:be:
         62:4e:2b:c7:cb:dc:86:38:22:62:4b:3d:26:7c:c1:ee:2b:a5:
         66:26:ba:d4:9c:59:8c:05:f2:58:28:bb:62:db:6e:01:ae:ae:
         c1:15:bb:d6:3e:aa:04:41:9b:b3:65:0e:e4:19:44:59:45:4f:
         63:2c:c7:48:09:6a:c1:79:ab:0c:22:aa:38:5b:0e:fb:a8:5b:
         2d:71:8c:50:e1:82:61:99:5c:1d:f2:f8:90:a9:ee:1d:35:d0:
         f1:71:48:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:44 2026 by rpki-client