Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bd0d438a-73fb-383e-b0e9-2825b99d031c.roa
File:                     bd0d438a-73fb-383e-b0e9-2825b99d031c.roa (raw, json)
Hash identifier:          NYBAUc6HGg8kKl4iyyyoLhd7znT5n2Niie/qXo/fbog=
Subject key identifier:   AB:3D:73:2A:33:6F:AF:31:3F:FA:B4:90:FA:9D:80:3C:E3:B1:B1:DD
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD40783477725F3C52CC2F900
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bd0d438a-73fb-383e-b0e9-2825b99d031c.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        172.111.117.32/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:83:47:77:25:f3:c5:2c:c2:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=15ce07ef-d426-4ba4-a2fa-1fad8a8fbe76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:99:9f:5e:fd:1d:c0:15:d6:18:6d:a6:55:05:
                    3a:a3:33:7b:e3:60:10:d4:88:e7:fa:0d:18:a5:f3:
                    e1:ae:1e:0f:47:68:4c:00:d4:06:4f:d9:6d:11:0f:
                    0f:1d:5d:b8:ac:41:ce:68:7e:57:e7:00:09:02:f2:
                    c4:57:72:40:c8:65:81:d5:41:bc:8d:ee:57:c9:5a:
                    f2:17:9e:f1:08:39:0f:eb:b4:0b:fa:eb:fb:a5:0b:
                    fd:02:b9:08:46:9c:68:a7:d9:d7:ec:a5:9d:22:d9:
                    d6:63:4d:09:45:67:ec:0e:9b:23:a4:46:ce:b1:75:
                    69:cc:f2:ce:d3:43:4e:28:85:2c:26:90:88:28:73:
                    2c:3b:39:59:ac:aa:f1:e0:2d:f9:c5:e9:33:0a:ff:
                    a6:3a:56:36:00:8e:9c:07:50:49:f9:3d:dc:36:28:
                    49:6b:b6:19:2b:c9:1d:a8:fb:f3:fb:a2:8b:5d:52:
                    b3:7b:6a:ca:e6:50:10:ce:f5:8c:f9:0c:f8:dd:a9:
                    0b:2b:cc:6e:9d:96:8f:5a:8e:c2:b0:72:d7:98:79:
                    90:1c:d4:5d:08:a1:66:7a:57:39:e8:0f:dd:80:b9:
                    01:f5:34:80:c8:4a:15:da:dc:98:20:35:ea:3c:eb:
                    83:a7:98:f2:35:1b:35:82:8e:09:61:27:1d:d6:79:
                    4f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3D:73:2A:33:6F:AF:31:3F:FA:B4:90:FA:9D:80:3C:E3:B1:B1:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/bd0d438a-73fb-383e-b0e9-2825b99d031c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.117.32/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:04:35:0b:cb:f0:28:50:39:89:b2:cd:bf:b4:eb:a1:b1:c6:
         5c:3f:03:51:74:70:4f:fc:1e:12:77:5e:04:bc:0a:c1:78:76:
         0d:c8:7d:4a:7e:bc:b0:44:64:38:20:7f:04:a1:43:6e:0c:b7:
         20:38:df:d3:d8:5f:8b:3b:0f:e8:f1:93:ab:fe:21:7a:99:5e:
         22:29:97:bc:4b:02:c5:4c:93:2d:1c:7c:61:a7:f1:82:97:5c:
         ea:ba:6f:07:0b:19:1d:96:05:c9:09:97:27:a7:b3:8d:22:94:
         21:25:84:ac:86:5c:4a:ff:ca:76:5d:3c:cb:0b:60:8b:f3:83:
         38:21:43:7c:e8:86:35:b3:15:34:43:6f:28:1c:f1:e6:0e:ea:
         e2:d9:06:56:11:30:7f:c4:e1:73:60:25:1f:12:21:a9:82:20:
         2a:f2:97:8b:af:62:33:5b:69:be:20:c7:d4:1e:74:ed:4a:30:
         b7:02:ee:75:42:45:42:a2:c4:0c:d9:33:d6:0f:df:d8:a2:b4:
         88:08:c9:7e:8e:55:e4:8b:c2:af:62:70:af:2a:bd:08:38:ac:
         77:1b:c5:6f:9c:3e:69:65:26:db:55:77:9b:9b:4e:ee:ce:2f:
         68:d4:4b:cd:6c:1f:a9:c8:58:71:d9:70:2e:c9:f5:38:8e:aa:
         43:50:d5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:57 2026 by rpki-client