Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/00d47dca-3350-3620-ab6b-afd0fd098c6e.roa
File:                     00d47dca-3350-3620-ab6b-afd0fd098c6e.roa (raw, json)
Hash identifier:          bqzu1bscBVuWrEnZjz7q1cB0Hdu87/kXQq8bkNVD7bo=
Subject key identifier:   57:82:B5:32:BE:39:8B:73:61:D9:58:A5:8F:AB:97:CE:18:F3:8E:DA
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584D0EA7A8A8084752D4B1C96880
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/00d47dca-3350-3620-ab6b-afd0fd098c6e.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     212238
IP address blocks:        172.111.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:a8:a8:08:47:52:d4:b1:c9:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=ccb0eb5d-6e72-475f-95f4-0dca9253d10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4e:27:12:19:93:af:6d:5d:80:f8:d4:04:1c:
                    f6:7d:05:9b:09:7b:82:00:2a:36:01:33:e8:a3:93:
                    5a:30:74:0c:8c:54:2e:c3:7e:5f:12:d5:42:42:77:
                    b3:62:79:45:db:41:c0:de:51:99:03:aa:1e:c1:10:
                    fe:5d:ec:9a:24:10:de:46:70:0b:93:37:24:f7:af:
                    fb:44:be:2f:0e:4b:89:03:a3:a5:67:df:77:df:da:
                    15:5a:37:a5:ad:30:83:cc:d0:97:eb:d2:0c:76:13:
                    01:3c:b9:c3:3e:18:0c:30:05:c8:7c:bc:3e:01:82:
                    e4:36:e1:fb:29:37:ec:89:49:01:e7:49:a7:e1:f1:
                    90:44:62:11:7f:79:10:3e:8f:da:d4:1b:4b:39:33:
                    44:c2:c9:6b:1d:57:2c:7d:64:89:e3:25:66:86:a2:
                    a6:41:2e:a2:85:73:18:f3:08:6d:e1:06:73:7c:02:
                    2f:bc:1b:3f:87:90:5e:ae:5c:15:6a:30:cd:a3:04:
                    0b:19:fc:ca:4c:b7:51:c2:7d:5b:68:b4:f9:ac:dc:
                    f0:92:71:00:fe:ba:f5:bf:c6:15:44:c7:94:46:dc:
                    1d:ee:44:6a:ef:72:97:44:81:8a:4f:f3:0f:0f:4a:
                    86:5d:89:3d:da:3f:c3:08:a7:b2:26:e5:4b:fb:4b:
                    56:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:82:B5:32:BE:39:8B:73:61:D9:58:A5:8F:AB:97:CE:18:F3:8E:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/00d47dca-3350-3620-ab6b-afd0fd098c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ae:0d:f1:5f:8b:21:18:8f:d0:63:96:c1:8c:17:7b:50:fb:
         d2:29:1f:64:dd:04:d5:7f:75:78:d9:6e:79:bc:b5:15:26:1f:
         7c:50:00:33:b7:81:bc:27:c0:b5:d9:7a:9a:6a:7a:64:86:59:
         60:18:88:f8:29:8d:51:db:84:77:e6:2a:92:36:08:fe:73:e4:
         8e:1a:01:3c:e4:ab:06:3a:34:50:45:70:06:5d:04:17:bd:44:
         b2:54:37:41:f2:6e:e3:f6:4d:7b:1f:47:eb:cb:bb:55:2b:88:
         1d:d1:cb:40:84:54:c6:73:63:7e:d6:3b:f3:f0:b7:c9:76:6d:
         b5:3c:f5:cb:7e:96:dc:c2:eb:ed:81:a0:a8:48:e7:e1:9c:c7:
         e5:f6:23:17:ee:e8:73:4a:46:9f:77:3e:71:34:a3:8a:65:c1:
         f1:3e:4a:4a:d5:1d:f5:e5:ed:24:82:71:1c:0b:f2:0a:f0:4f:
         3b:57:d6:40:c0:eb:6b:bb:6d:dc:a4:fa:70:10:9e:6f:cf:8b:
         09:65:0b:a1:ac:fe:15:e2:36:39:ae:6d:05:84:a2:31:96:ad:
         0b:18:00:75:e3:41:15:ee:f3:73:fd:d5:0b:4c:2a:9b:1d:2a:
         90:64:2c:ef:3a:fb:7c:6d:f5:d6:a5:60:53:3c:b9:75:7e:6a:
         1b:ef:14:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:45:29 2026 by rpki-client