Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0c3b1fbb-16eb-38f0-b91e-b9583bb60638.roa
File:                     0c3b1fbb-16eb-38f0-b91e-b9583bb60638.roa (raw, json)
Hash identifier:          AtQGrg3oMukiUFeu+OZOvS+ZHkqBlgHZmM7EB1sjCQc=
Subject key identifier:   61:4B:CD:B5:A7:A7:18:49:ED:85:5A:3F:2B:5C:C0:C2:3C:BF:60:CC
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584E62A9FB013BF0776C1FCF7A00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0c3b1fbb-16eb-38f0-b91e-b9583bb60638.roa
Signing time:             Sat 04 Jul 2026 09:00:11 +0000
ROA not before:           Sat 04 Jul 2026 09:00:11 +0000
ROA not after:            Fri 02 Oct 2026 09:00:11 +0000
asID:                     212238
IP address blocks:        172.111.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:62:a9:fb:01:3b:f0:77:6c:1f:cf:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul  4 09:00:11 2026 GMT
            Not After : Oct  2 09:00:11 2026 GMT
        Subject: CN=937c6194-c9c8-4111-90bd-f7efa81408e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f3:ee:11:f8:c3:5c:bb:da:95:bb:a4:64:15:
                    ec:37:c0:04:e7:86:e1:ce:54:3a:c7:a5:96:d7:c0:
                    21:c8:9d:d7:91:ae:19:21:1d:9f:6b:6f:89:c5:fd:
                    36:7b:7d:ec:66:84:47:ad:53:95:1a:36:21:92:0d:
                    6b:e1:9b:f0:4b:af:5c:5a:d8:49:e9:4c:57:bd:0b:
                    26:a8:81:c9:cb:7b:64:30:5e:06:6f:e0:ef:2d:95:
                    29:cd:08:b4:e1:1d:e2:3b:f2:36:96:5e:a0:20:f0:
                    2e:d0:cb:bb:90:4a:69:22:33:4a:87:7a:23:9a:91:
                    0f:38:4d:6f:9f:b2:19:59:16:b1:dd:4a:90:7a:7f:
                    40:61:bc:c1:10:15:be:b2:b8:b5:0d:da:25:ed:60:
                    08:ac:5a:36:2e:4b:ad:e1:7c:e9:7b:96:94:ad:15:
                    fe:7a:7e:a9:74:f2:a6:d6:d8:5e:b1:cc:f4:35:b4:
                    3a:11:0b:a9:34:00:b5:83:c8:27:bb:f9:4f:57:aa:
                    29:45:7e:58:bf:79:6d:64:bd:a1:c8:6f:13:eb:de:
                    fc:ef:2c:59:91:36:80:7d:dd:67:84:bd:47:5a:7c:
                    62:b2:4d:34:55:69:d9:76:5d:7e:d5:e0:06:8d:26:
                    07:05:c2:86:28:8f:ad:50:e2:d1:41:e3:52:fe:a7:
                    c6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4B:CD:B5:A7:A7:18:49:ED:85:5A:3F:2B:5C:C0:C2:3C:BF:60:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0c3b1fbb-16eb-38f0-b91e-b9583bb60638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:66:86:06:c7:04:c1:aa:27:a2:5b:d8:c1:0c:95:2b:24:23:
         3b:60:93:b9:a2:d7:40:86:f0:a1:69:11:46:13:68:75:19:72:
         af:29:ba:2b:80:22:0e:91:ed:e2:a4:c8:bf:9f:f9:7a:4a:90:
         04:82:36:4e:24:ad:a1:f7:63:88:7e:62:13:48:aa:a4:bd:56:
         85:c0:54:24:5b:a4:80:15:7d:3b:12:dc:1c:ff:3c:45:27:4a:
         e1:2a:e2:18:7d:9f:af:de:ef:a8:28:21:c7:4b:dd:81:e5:3c:
         bb:3b:a0:7d:2c:31:54:4a:d4:50:d5:41:a4:eb:5b:c0:12:47:
         4a:5a:00:81:32:b3:9d:7b:50:0d:cc:40:c0:f3:98:03:8e:b3:
         c1:be:85:c1:da:ee:c3:b9:01:68:89:ae:68:53:61:98:2e:fb:
         36:95:38:93:c4:cd:57:0a:df:23:c0:3b:c0:e5:70:b9:71:8e:
         3a:9c:c8:8d:b7:2f:7a:d0:3c:06:c3:e0:46:9a:f4:ca:c2:90:
         8e:8f:4a:36:a5:10:70:5f:79:60:f9:99:4d:33:30:79:b9:46:
         4f:30:4d:09:68:0f:42:75:5d:42:fc:68:4e:c1:34:62:d0:a9:
         c9:29:e0:41:05:12:9f:6e:ee:33:97:eb:6e:bb:a5:b7:83:2d:
         f4:a4:d2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:57:02 2026 by rpki-client