Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/eef7c31a-87b2-3d58-93c6-c57ee5a0ff37.roa
File:                     eef7c31a-87b2-3d58-93c6-c57ee5a0ff37.roa (raw, json)
Hash identifier:          k88IL3NsebS52FWjy6beuGj2c4yG4WzwVl/RfQdvMMk=
Subject key identifier:   35:DC:CA:BE:A6:26:BA:43:09:3F:12:02:2D:0C:A5:19:96:50:3F:10
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584F576800ED57442590071608A0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/eef7c31a-87b2-3d58-93c6-c57ee5a0ff37.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        172.94.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:00:ed:57:44:25:90:07:16:08:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=751f2cdc-ac16-41b1-9b72-2e11b37080ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a5:fc:d9:36:32:64:07:f5:55:05:20:2d:f1:
                    e9:7d:53:37:8f:0e:3f:97:c9:5f:b4:25:bc:51:cd:
                    c6:09:42:f0:b7:43:74:92:9a:66:69:a8:31:17:23:
                    b1:1b:37:a7:93:e0:d1:86:31:de:87:b7:94:df:2c:
                    02:da:4e:4b:77:78:c2:14:80:ab:dc:7f:6f:bc:4f:
                    ac:17:87:a2:07:0a:67:97:35:a2:da:9a:c9:fa:0b:
                    24:c3:ca:52:1c:8c:10:da:51:5d:d5:4a:ec:91:86:
                    d5:62:6a:7f:e5:b4:89:86:6e:4c:30:4c:2a:a0:0b:
                    4c:2c:20:50:02:97:7a:dc:a4:79:e4:07:77:59:8e:
                    af:4b:1b:bf:3b:2f:c3:e3:66:10:68:c9:8e:0e:a4:
                    c0:8f:fb:2c:5c:7f:5d:a5:35:46:2e:7e:8a:0a:11:
                    22:fd:80:f1:f0:43:79:60:ac:2b:54:df:bf:66:c4:
                    ca:06:dd:c1:46:b7:6b:c5:6f:df:ae:7e:2b:4a:44:
                    a5:c2:c5:70:f9:b3:f2:55:7b:85:c0:ca:10:33:83:
                    7a:1a:34:2c:a2:17:39:59:62:1a:6a:6d:6c:88:2c:
                    ea:73:a1:85:20:6e:39:02:60:3e:e9:5b:21:5b:36:
                    55:ac:2c:56:d3:e6:14:19:79:c7:9e:ba:f5:0a:bc:
                    2e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DC:CA:BE:A6:26:BA:43:09:3F:12:02:2D:0C:A5:19:96:50:3F:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/eef7c31a-87b2-3d58-93c6-c57ee5a0ff37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:45:49:69:07:e7:ec:79:75:fe:01:1a:85:20:f6:05:4e:45:
         d3:7b:9a:45:9c:e7:0b:0c:94:b1:b6:2d:57:57:9f:40:84:52:
         a4:c9:0d:68:00:df:db:20:fc:f1:b8:5a:db:d6:61:df:56:d4:
         8f:e5:e5:02:b6:b4:68:ee:70:f6:74:fe:b2:53:33:da:af:75:
         aa:40:8c:bd:59:e7:4e:6a:93:34:4e:44:fc:2b:d0:b8:98:f0:
         b4:76:c6:aa:bb:8d:3e:65:f2:96:87:b2:43:26:a5:c4:27:a3:
         c1:60:47:b8:43:3e:ce:fe:b6:61:f4:cf:15:36:9a:09:a5:f7:
         55:bf:68:1e:cb:31:71:c9:3d:d4:b8:df:cc:e0:0a:81:cb:3c:
         6c:f9:85:2c:1a:b6:de:b3:1a:ea:03:03:23:9a:16:0d:6d:5b:
         36:c3:ba:d8:62:da:94:85:5b:7d:ed:16:08:cc:83:92:a9:a2:
         0a:71:2b:75:fe:7f:fd:5a:ae:f2:fe:d6:a9:cf:f3:b5:f6:ed:
         c7:b0:ec:15:99:e4:b8:60:d3:10:d0:9b:43:60:c8:ac:68:f0:
         f5:9d:73:69:1f:f7:14:70:8f:fd:7a:a2:e5:c3:a7:3e:8d:81:
         a8:5e:9a:6d:8f:50:8b:0f:ba:62:90:24:12:71:c8:90:14:82:
         97:8e:26:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:30:49 2026 by rpki-client