Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/54bd93e4-37b5-30b1-9400-97c9f6177c01.roa
File:                     54bd93e4-37b5-30b1-9400-97c9f6177c01.roa (raw, json)
Hash identifier:          1gPNLijE1Ek8hvQiDBLRRFRuJnkLI6Bu2arINZREKQk=
Subject key identifier:   EA:C3:39:7D:A2:33:3A:EC:1D:18:EB:9D:32:87:AD:6D:75:C8:7A:9D
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A5FC5EBAFD6E60CCB09156000
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/54bd93e4-37b5-30b1-9400-97c9f6177c01.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     9009
IP address blocks:        172.94.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:eb:af:d6:e6:0c:cb:09:15:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=0a521bd5-86dd-4a37-bbcd-b114ffa8e91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2a:bd:78:06:d7:11:63:56:a5:e1:fb:70:17:
                    1e:fc:f8:3b:e7:3c:d3:ff:c5:0a:b9:54:28:40:e6:
                    f6:2f:c2:86:ff:52:96:7c:53:6e:0e:16:c3:95:4f:
                    03:a8:d8:35:3c:4f:bc:23:1d:98:84:1d:70:20:32:
                    11:1e:09:63:bd:60:3f:1f:fc:5e:77:b3:96:bb:ac:
                    52:4a:02:e9:92:c7:04:1b:bd:dc:1f:31:75:65:e7:
                    6d:78:74:83:bf:bb:e6:3a:83:ec:50:52:8f:ed:6a:
                    49:7b:65:06:07:23:c5:a2:cc:60:e9:9f:a8:8a:0a:
                    92:6d:e5:62:e1:a1:ea:c4:1e:f5:07:22:ac:eb:bb:
                    ff:7e:5e:68:2e:2f:e5:e6:e2:8b:7f:6f:63:09:a3:
                    a9:2b:ed:d3:76:07:8d:11:f7:40:3b:c5:bf:9e:62:
                    21:31:c0:d8:4c:e4:23:34:f7:79:ab:67:d0:ad:26:
                    6f:8d:82:d8:28:ef:63:ee:1e:55:0c:c3:b4:9f:d6:
                    07:c9:f6:4e:cf:b8:0b:b3:b5:3f:3b:a0:6b:7f:6c:
                    df:65:16:72:78:d0:72:21:aa:10:7f:9b:a0:10:de:
                    98:67:77:7d:c7:51:a1:0e:e6:94:3b:bf:fc:0a:d4:
                    9c:b9:9a:fc:b9:b0:03:4f:44:14:8f:ed:b8:bb:9c:
                    6d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C3:39:7D:A2:33:3A:EC:1D:18:EB:9D:32:87:AD:6D:75:C8:7A:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/54bd93e4-37b5-30b1-9400-97c9f6177c01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:90:bf:43:ea:19:cd:28:9b:b8:55:46:8c:dd:e6:60:10:41:
         41:d2:aa:6b:56:7c:54:76:97:a0:ae:94:06:c0:42:90:59:38:
         01:a9:2c:5f:ca:8f:26:1c:e5:1f:a1:d7:22:a0:7e:db:0d:5e:
         ca:d2:58:89:50:e7:38:f0:ea:1b:e5:b3:0f:d8:70:2e:e1:71:
         19:7f:2b:dc:25:db:c8:bc:63:dd:6f:f7:4e:61:a6:bf:2b:5d:
         1c:74:b9:8a:f1:7c:78:38:19:a5:fd:a3:96:22:27:5a:82:ff:
         58:53:d0:f1:94:44:6e:d8:56:88:b6:b6:d5:f2:d8:52:66:08:
         b5:d7:58:2e:77:3a:57:ca:72:5f:62:1a:0a:f6:af:90:96:44:
         4a:a0:6c:a2:d1:31:05:47:16:9f:cd:e4:f3:ab:fd:3e:b9:52:
         64:0e:a3:cb:b3:8e:fa:e7:6d:58:c6:31:a1:f6:f2:5a:fb:ba:
         e7:66:fa:78:dd:1a:31:9f:8f:4d:5d:8b:21:1a:7e:0b:a0:83:
         67:1c:e9:6b:1a:96:d5:a8:84:80:17:3a:21:e2:6c:3f:2a:c3:
         0b:8c:28:7a:19:a5:2e:76:74:0e:7a:43:5a:0d:6b:1b:71:37:
         d4:a8:3e:f2:06:f6:14:6b:6c:76:82:cb:8c:ec:9f:29:fd:ee:
         21:65:10:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:15:38 2025 by rpki-client