Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c3ada758-be41-3fc4-b13c-2d1df4788bd3.roa
File:                     c3ada758-be41-3fc4-b13c-2d1df4788bd3.roa (raw, json)
Hash identifier:          iVuI1VHjj4YzvUultrM+lq/PIS/rQ0QaDUqBIPfgTSE=
Subject key identifier:   5D:6A:EF:F1:87:FE:5F:4A:1C:AB:68:06:88:F3:CA:6E:1A:14:3C:C9
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD407882D55686E7BEE425140
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c3ada758-be41-3fc4-b13c-2d1df4788bd3.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        172.111.77.128/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:88:2d:55:68:6e:7b:ee:42:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=d936332b-c68b-45f2-9348-7dbe9c146844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c3:01:9f:4c:36:dc:2e:0c:6a:45:f7:97:01:
                    21:93:b1:b7:e1:c8:8c:d9:06:70:27:60:31:18:28:
                    fe:11:3d:ff:e2:d0:a5:19:eb:00:36:bf:e6:f4:95:
                    3e:9b:8f:ae:26:43:54:84:85:b6:d5:2d:81:7d:7c:
                    f2:73:6d:41:60:08:53:b5:00:79:e6:1b:97:aa:7b:
                    5a:d9:b3:72:2f:7a:38:84:6d:bf:3c:80:f5:0a:10:
                    7b:0b:46:2b:66:eb:6c:19:64:92:19:5a:01:75:06:
                    55:64:10:49:e5:9a:24:bd:e1:e2:b8:8c:76:b2:de:
                    3b:f8:75:79:b9:05:dd:94:90:45:be:3e:bd:ea:2d:
                    90:29:32:ed:1f:cb:f0:eb:2e:86:a2:e1:76:48:43:
                    d8:70:e2:60:1b:25:c7:1b:c5:65:ce:b3:1a:4b:d3:
                    ca:b2:3e:f6:d0:d6:19:c0:45:6a:f9:ec:9c:23:5b:
                    68:bb:74:39:55:ba:b6:d1:65:14:5a:7f:92:4c:97:
                    ef:5c:09:18:b2:44:6d:cb:c9:4d:f3:a8:48:f4:d3:
                    e8:ca:98:ef:04:bc:d0:07:65:1a:15:0a:33:0a:55:
                    54:59:fc:00:45:6b:80:d3:08:89:42:95:88:81:2d:
                    51:f4:b2:0b:9c:55:92:ff:7e:b2:9c:69:43:c5:de:
                    1d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6A:EF:F1:87:FE:5F:4A:1C:AB:68:06:88:F3:CA:6E:1A:14:3C:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c3ada758-be41-3fc4-b13c-2d1df4788bd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.77.128/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:7d:06:d2:fe:89:fb:f8:ba:5d:60:0c:63:b8:3c:bf:4f:90:
         41:60:e6:ab:2d:06:36:88:e4:0c:44:38:21:5e:82:db:a1:e0:
         90:02:a4:2c:ca:36:24:35:04:5d:14:df:89:03:75:9e:11:43:
         96:b9:48:6b:0d:b5:6d:70:44:5b:03:ec:77:30:74:76:91:0a:
         80:83:77:6b:40:8b:de:a5:ab:21:d9:c7:1a:7d:c6:07:1b:f1:
         e6:ee:d7:57:ef:47:6e:f3:61:6e:1e:68:73:ae:6b:b2:fc:5e:
         0e:b3:bc:9a:3e:7e:a8:2b:b4:3c:b2:a8:06:a2:06:da:24:81:
         95:c0:0c:68:1c:07:55:ce:cd:ff:8f:d8:d3:4f:fd:bf:a0:9d:
         37:ab:5b:6f:4a:ed:9a:71:ba:36:27:9e:58:3d:5d:8b:72:9c:
         a5:79:94:26:d6:2e:c0:83:02:15:9d:51:d7:88:fd:c5:2a:66:
         3b:c3:76:0e:09:6e:56:22:5d:1a:ce:ff:5c:4a:9b:99:92:8f:
         1b:32:29:9f:1f:31:96:4f:d4:0e:83:55:9e:00:17:c4:88:d1:
         7e:b8:51:aa:e7:a3:2e:75:c5:77:82:05:e0:51:fe:76:8d:c4:
         b2:6c:7f:5b:a6:58:c3:43:17:48:ed:f4:43:bf:7d:6e:d0:aa:
         d8:d5:bc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:46 2026 by rpki-client