Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1043ec17-c314-38f1-a981-75d7cdb43eba.roa
File:                     1043ec17-c314-38f1-a981-75d7cdb43eba.roa (raw, json)
Hash identifier:          PMMhkahsrAM9tpRCBcVhMKNoKGBx43yfm3TUwL40RqM=
Subject key identifier:   6A:63:81:52:8B:96:4B:68:B5:23:32:3D:13:AE:A5:FD:E7:D9:59:E4
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584F7352D1FB623049E87221EC00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1043ec17-c314-38f1-a981-75d7cdb43eba.roa
Signing time:             Sat 10 Oct 2026 01:00:13 +0000
ROA not before:           Sat 10 Oct 2026 01:00:13 +0000
ROA not after:            Fri 08 Jan 2027 02:00:13 +0000
asID:                     132372
IP address blocks:        172.94.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:73:52:d1:fb:62:30:49:e8:72:21:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 10 01:00:13 2026 GMT
            Not After : Jan  8 02:00:13 2027 GMT
        Subject: CN=286ef375-b89d-47e4-8258-c518d7ab8998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:7e:af:01:7e:8a:ea:e6:63:de:f7:35:ce:
                    82:4b:70:4c:ee:f8:93:a6:e2:f5:6f:d0:50:c6:42:
                    be:e4:54:c7:1f:59:d4:0d:f6:1c:e4:29:6a:3a:31:
                    45:b2:b8:4d:3d:53:94:d9:20:ed:a9:60:ee:a2:6e:
                    33:98:80:a4:7d:df:a6:fc:a9:51:c4:92:1e:39:e7:
                    ed:1f:76:00:26:cc:7f:a3:c1:07:65:40:30:39:fb:
                    79:e3:10:d0:f5:a3:f1:ba:0d:ad:cf:a0:0a:f6:4c:
                    fe:ae:3d:8f:91:76:60:2d:1e:40:cc:c4:36:7b:82:
                    93:d8:4b:2a:34:26:ed:a7:a8:66:af:46:dd:9a:dd:
                    c5:4f:0e:43:a7:79:3f:3d:50:51:14:af:d6:c7:48:
                    0c:39:05:50:1c:82:f9:8a:70:96:f7:7e:b9:4b:81:
                    a0:dc:65:95:85:97:1d:fe:25:1a:f9:07:b1:71:55:
                    fa:7c:99:5f:26:27:90:d6:6b:e9:2e:27:5b:06:08:
                    2d:54:3b:82:dd:10:12:cb:b4:ee:d6:af:2c:5d:48:
                    51:6a:e8:58:a1:be:a7:7b:e1:b0:ef:ee:11:3c:ae:
                    7c:5c:71:f4:a7:73:bc:bd:9b:64:41:8d:32:7d:73:
                    4d:0e:15:fb:34:57:5c:7e:b3:c7:bc:62:42:22:30:
                    6f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:63:81:52:8B:96:4B:68:B5:23:32:3D:13:AE:A5:FD:E7:D9:59:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1043ec17-c314-38f1-a981-75d7cdb43eba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:08:64:4e:ec:6c:f7:aa:f3:8d:a9:82:93:da:9a:c6:82:d6:
         19:81:54:ba:22:52:c3:85:45:9f:c5:43:75:ad:2e:fe:db:df:
         83:ee:ef:b9:ee:0d:88:f5:a8:5a:23:5b:b3:55:e9:b5:95:19:
         03:d7:f8:a1:65:85:b4:c1:23:ac:9a:06:6f:cd:b5:1b:de:a5:
         e1:a0:cb:0e:f2:10:29:a1:a3:22:73:4f:0a:7d:6d:77:43:da:
         8c:19:f9:d8:86:aa:7d:e6:cb:ad:2b:ef:83:3c:16:80:46:73:
         18:df:45:0a:1e:c7:96:ef:82:c1:a2:a6:ea:4a:4f:01:76:11:
         96:25:a2:6c:a9:65:c2:ba:0c:a3:86:61:5c:8a:d4:bf:11:a0:
         15:03:65:8a:18:89:2a:4b:77:fa:50:2c:c3:b5:67:87:4b:cb:
         26:67:ba:cc:3d:2f:b5:4a:d8:ff:09:b7:93:8f:02:58:9d:d7:
         1a:a4:98:83:ad:b6:a1:1e:8f:95:9b:06:3d:6f:0a:f7:fb:92:
         f3:2b:9f:f2:60:c2:cc:3b:91:97:f2:1c:fb:5b:aa:40:64:52:
         39:80:42:c2:bd:26:25:bc:c8:c4:bb:bb:dd:1d:94:a4:ac:b4:
         33:36:4c:eb:e8:69:cd:c4:e3:1e:9e:dc:86:ca:a9:bc:8b:2b:
         18:cf:18:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:36:12 2026 by rpki-client