Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad58e6d6-0359-3a1e-9a26-dec1e027ed51.roa
File:                     ad58e6d6-0359-3a1e-9a26-dec1e027ed51.roa (raw, json)
Hash identifier:          AaI7mgKxmo5SUa2vLPg8p/wQ11VY8OfiRahLhZC92zE=
Subject key identifier:   1B:88:10:E6:4A:D9:A5:44:CE:D9:CA:7E:35:8E:77:46:E1:8F:15:C6
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584F6F22E354BF6246E36C779780
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad58e6d6-0359-3a1e-9a26-dec1e027ed51.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     9009
IP address blocks:        172.94.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:e3:54:bf:62:46:e3:6c:77:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=49ea09a0-03c9-4720-beef-2aa732db3fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:60:46:19:36:f4:e4:11:e9:3a:7a:b6:49:
                    8c:4e:73:af:81:07:ed:3b:94:00:70:c3:eb:58:40:
                    1f:60:46:a5:90:32:4f:7f:b1:9a:49:77:8e:5f:2f:
                    35:0e:ef:49:18:88:49:e1:44:f9:d4:a2:9b:60:d4:
                    b9:13:0a:07:1b:5a:e2:b8:19:cc:f7:93:d5:5f:16:
                    ee:39:ec:92:fd:f8:13:01:7e:41:09:b4:c9:fd:ea:
                    66:02:3b:75:28:be:07:13:b6:ac:f8:f5:25:f2:ca:
                    e4:39:8a:32:44:63:c8:b7:52:e9:27:33:21:31:c6:
                    a5:18:0e:44:91:a4:11:6f:74:e3:c8:55:09:8c:ab:
                    9e:2c:cd:63:61:16:1d:26:98:72:3a:f2:34:f5:00:
                    af:73:b4:64:83:d9:36:20:dd:0b:d2:6d:b2:dc:18:
                    62:f2:f3:ec:c1:1c:0c:0f:ca:8d:71:82:36:71:47:
                    f9:43:61:46:d4:96:45:29:6b:b8:fb:d8:4d:6e:0b:
                    36:11:13:aa:32:96:b5:6a:fe:f7:d8:50:b6:80:ff:
                    c7:68:7a:73:e1:35:8c:57:a6:7b:4f:3a:08:92:90:
                    7d:0d:43:3d:f7:15:77:da:2f:f6:e9:0b:6a:af:63:
                    c2:6f:6f:ba:26:64:59:16:35:c4:b1:c7:78:36:5b:
                    1a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:88:10:E6:4A:D9:A5:44:CE:D9:CA:7E:35:8E:77:46:E1:8F:15:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ad58e6d6-0359-3a1e-9a26-dec1e027ed51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:85:ba:4d:46:24:47:80:06:49:d4:66:4e:87:33:7b:ca:a0:
         93:bc:b9:17:69:39:f3:f5:69:7f:7c:03:51:89:b9:01:cb:ce:
         16:a3:6b:2e:5e:37:79:80:58:53:a4:33:55:6d:0c:ee:af:23:
         26:d5:9c:90:e8:d9:62:b2:bf:d5:25:c4:8a:fc:5e:d1:e8:84:
         c9:f2:81:7e:8a:d4:e7:6e:b7:19:14:ff:67:e1:aa:e9:77:d1:
         2a:24:31:58:d9:04:f6:14:ce:a7:69:bb:91:2a:27:76:e2:66:
         8d:a6:c0:91:90:d2:6b:12:14:6d:02:25:34:99:5c:69:b0:60:
         29:f2:27:a1:71:21:5a:ee:4b:33:be:d0:15:f8:b8:7f:9d:00:
         db:53:69:d2:33:b9:49:54:73:71:42:1d:0a:bc:80:5d:92:5d:
         98:92:ef:9f:3a:16:fc:55:ab:c5:c0:46:45:df:1a:0e:e7:40:
         d0:0d:e9:61:c4:ba:a7:1e:b4:e5:7d:78:61:f2:a8:41:9f:af:
         19:e5:9d:f6:53:ef:b1:3b:3f:a1:b7:7b:09:80:62:8f:a0:22:
         86:7f:0a:6f:fb:0f:d5:d7:15:0d:9c:42:3d:5c:c7:59:c1:33:
         14:a9:72:05:5c:44:53:d8:83:a3:1f:54:15:84:01:5c:de:32:
         d8:ca:22:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:17:01 2026 by rpki-client