Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c8362392-b206-3b86-9e4c-bebbbe1b649b.roa
File:                     c8362392-b206-3b86-9e4c-bebbbe1b649b.roa (raw, json)
Hash identifier:          MzY2M2a6ZfnRz7LNhRM97yOtYVqmPp/5OIcj4KCJtZI=
Subject key identifier:   3A:4F:20:06:21:79:B0:F1:92:51:66:C9:DC:14:43:ED:66:31:5E:13
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584CD40782C32EEFDE9F28DEE480
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c8362392-b206-3b86-9e4c-bebbbe1b649b.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        172.111.72.32/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:82:c3:2e:ef:de:9f:28:de:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=32a496d9-78ca-4fec-a8e6-23d6ee2bca30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a2:8d:e7:ba:b0:41:81:ec:7c:b2:b3:7b:ed:
                    c6:38:d3:1c:7e:40:a3:b1:a2:7d:1f:c8:d4:3f:8e:
                    41:3c:e0:b9:7c:d5:b8:97:9c:af:94:24:0e:34:17:
                    77:91:8b:57:89:91:9e:cb:75:15:8e:fc:73:22:bf:
                    6a:bc:db:17:a5:2f:a3:18:80:29:3a:1f:02:c3:e1:
                    38:dc:f6:a5:ad:76:ac:f0:b6:a8:5e:2d:cd:67:cc:
                    27:24:35:39:b7:40:cb:5d:6e:86:ae:f7:97:3a:39:
                    94:f6:93:08:03:c2:ac:a8:45:f5:b1:12:85:44:85:
                    28:a6:fe:11:ca:eb:56:c6:57:07:13:7b:ab:75:0e:
                    ca:50:75:f2:7f:e7:d1:ec:4f:ff:0a:00:7e:51:dc:
                    f4:05:92:35:ca:e8:a4:e0:09:94:72:58:79:93:3e:
                    94:ef:ab:5e:0b:44:f0:57:01:b5:5e:cb:ef:91:11:
                    6e:a4:5d:b8:ab:b1:63:1b:f1:17:33:07:44:75:2b:
                    da:3d:33:6d:0f:5f:99:d5:de:6b:8c:b2:75:33:f9:
                    0c:c9:0d:f6:07:13:68:96:5d:f1:ee:64:12:67:c3:
                    90:2f:02:cb:89:b9:de:3b:4a:a3:ae:b3:71:24:3c:
                    0a:14:91:4c:5a:d3:0b:57:81:2d:ea:d7:6c:42:e8:
                    c6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4F:20:06:21:79:B0:F1:92:51:66:C9:DC:14:43:ED:66:31:5E:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c8362392-b206-3b86-9e4c-bebbbe1b649b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.72.32/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:85:31:8b:5c:56:68:3a:83:03:d9:15:71:1a:2f:75:9c:3c:
         1b:f0:22:15:b4:7a:58:56:49:47:65:27:68:72:ff:95:db:2b:
         c6:5f:31:9a:b9:90:7a:00:0a:69:8b:c8:e2:4b:a4:bc:a7:f3:
         4e:31:b7:a1:76:d4:fc:05:59:5b:2e:14:97:a7:07:c9:e1:03:
         2e:b4:09:67:0b:9c:1a:23:1d:6a:24:e9:bf:e6:d5:72:d1:2d:
         2d:97:f5:3d:f5:86:13:48:ad:cd:87:4a:03:30:9f:a2:9f:a6:
         af:56:83:8e:58:9b:a6:02:ee:6b:2c:ca:17:e7:59:dc:de:9f:
         49:99:48:09:a9:86:33:b0:72:2a:68:68:df:72:ba:9c:3f:1e:
         ba:e6:7b:34:e0:5d:43:27:c9:c7:d7:5b:9d:8e:28:c7:03:27:
         1d:4d:91:b4:35:c7:3e:ce:1e:b5:84:65:00:6a:bf:7c:c3:7f:
         fc:5a:89:d2:ad:af:c7:eb:d5:33:a0:65:19:37:c1:f7:f6:9d:
         fc:b6:a1:e9:ed:cc:13:38:a7:f6:16:2b:f6:49:9b:45:40:ef:
         fa:01:b9:fc:4f:ac:6a:66:0f:6d:ea:16:54:5e:32:9e:ee:af:
         d1:57:e6:35:7c:1c:8f:ff:31:eb:2c:8c:9d:74:20:8a:19:79:
         c9:04:cc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:25 2026 by rpki-client