Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ac899459-f0f1-3fb9-8e1d-b4e1b4a1749a.roa
File:                     ac899459-f0f1-3fb9-8e1d-b4e1b4a1749a.roa (raw, json)
Hash identifier:          8Vs3Sd/UAmM/qTFlL5OlEaIDPVj/clS/w4/fkIi1ZOc=
Subject key identifier:   30:A8:FD:D9:1F:FC:19:27:26:E9:F7:E6:65:C8:94:F0:A8:25:A7:36
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584DDE86DEDCB0915E3C66B87A00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ac899459-f0f1-3fb9-8e1d-b4e1b4a1749a.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     54113
IP address blocks:        172.111.124.0/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:86:de:dc:b0:91:5e:3c:66:b8:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=706571dc-270e-4315-b940-621b4469ada4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:11:28:e0:f8:52:c7:4a:61:a0:31:61:9c:
                    11:9e:02:74:2e:4a:47:d5:f4:49:f7:4a:30:f8:91:
                    25:19:33:f1:2e:7f:c8:d9:cb:0f:48:0a:87:5d:1d:
                    ce:dd:68:02:5a:c3:95:b0:81:91:a7:4d:af:ab:51:
                    d3:d3:a3:72:d8:9e:d5:6f:03:fd:9a:32:bf:b8:a7:
                    ed:05:d4:7b:7d:0d:c5:4a:b6:eb:8c:c1:6a:f6:46:
                    3d:81:a8:29:78:28:74:61:97:82:b7:d6:c9:a9:46:
                    fd:d9:f0:97:c5:12:d9:d3:5d:c6:b9:8b:8a:8c:1e:
                    28:ff:84:70:6c:a5:2a:74:67:e6:6b:e3:bd:a8:c0:
                    a1:76:96:5c:a2:40:1b:19:47:af:4d:25:ed:5f:01:
                    77:b2:86:f2:7c:4f:50:32:ec:a6:09:77:1a:97:6c:
                    df:cb:12:52:50:48:ab:47:e3:f4:8c:48:12:c4:7f:
                    38:da:e6:0b:3d:df:a1:5f:d4:0a:78:1e:b9:17:86:
                    56:0b:bd:a9:0e:b1:71:92:5d:2b:28:60:48:42:5b:
                    93:46:f1:76:e6:dd:57:9f:5c:54:4d:de:1b:2e:98:
                    aa:0a:5d:f0:c7:92:99:60:68:b6:f6:3b:77:e3:cd:
                    fd:1d:40:a3:72:52:3c:0a:03:3a:0c:ed:0b:f8:5d:
                    d1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A8:FD:D9:1F:FC:19:27:26:E9:F7:E6:65:C8:94:F0:A8:25:A7:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ac899459-f0f1-3fb9-8e1d-b4e1b4a1749a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.124.0/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ef:d6:af:dd:97:a4:6b:9b:44:fa:c7:7c:33:85:36:60:4d:
         0f:d9:c8:00:73:f4:7a:82:5c:e3:21:4f:8e:f8:fa:d7:de:44:
         56:bf:c8:89:64:fb:9e:0d:8a:2a:4b:55:bd:2f:e7:f4:87:84:
         6a:9f:91:14:00:ec:17:d2:64:69:ad:56:76:c8:fb:a8:a0:a6:
         fa:87:63:ba:63:9c:b7:38:93:58:8f:63:4e:70:f6:0c:d1:a7:
         96:ce:a9:20:00:a4:ee:11:60:94:9a:be:ac:68:1d:4f:ed:c4:
         8d:8c:5e:b0:a2:58:6a:8f:c4:4a:06:76:07:3b:4b:7e:66:88:
         68:4c:3c:bc:ac:d6:b5:e8:34:eb:5a:79:29:44:23:72:20:fd:
         8c:52:04:d2:27:13:d5:d8:d4:9a:3a:40:71:a6:dc:86:0c:9c:
         bb:df:83:6b:0e:85:59:f9:18:b0:10:8d:ab:da:6e:e0:02:9f:
         e4:98:82:8c:3e:24:b8:78:82:20:45:b3:0c:ad:24:f0:69:f1:
         0f:1b:ed:b7:96:40:74:6b:6b:4e:0a:f1:5d:82:dc:88:a1:f0:
         b9:b7:14:00:bb:f2:fe:45:80:65:2e:f7:af:28:28:ad:18:85:
         c7:48:08:9f:ef:61:9f:41:57:23:20:25:a4:07:3c:ff:aa:c1:
         5f:3a:da:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:25:13 2026 by rpki-client