Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa
File:                     127335ac-7835-339e-98cf-19520d8ce2e9.roa (raw, json)
Hash identifier:          sSowFlNv9oPSigBJ6g7NE0+kwUru0EsLRMql2vMxlKE=
Subject key identifier:   F4:B3:65:6F:BC:E6:EA:F4:A8:B0:C2:C7:DE:04:92:A0:E5:E3:2E:74
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584F89A873B764F6466379CFB380
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     3223
IP address blocks:        172.94.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:73:b7:64:f6:46:63:79:cf:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=0016010c-0860-423b-bf30-d565655ae9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:78:5c:59:6c:38:7e:b9:fb:3b:01:a6:70:5d:
                    84:35:b5:54:f0:d8:e8:8f:9c:dc:91:8b:80:70:60:
                    aa:e8:9a:3f:86:6f:17:b5:0a:d2:bc:2d:54:69:3e:
                    e4:d3:4e:a4:e0:9c:88:4e:d0:6c:e8:eb:78:a7:bf:
                    13:31:5b:f7:1b:96:c9:fd:bb:8c:5d:16:f2:df:ce:
                    f6:e7:d6:52:05:c7:7c:4d:ac:51:96:a3:3a:83:82:
                    0e:f6:4e:b9:d2:ed:8b:69:59:a7:f2:71:8a:b8:4b:
                    e5:2f:fc:42:fd:9c:7b:7a:a8:bd:33:82:03:25:98:
                    f9:e0:49:00:d7:1a:09:3e:bc:72:01:6a:37:fc:6d:
                    03:69:0b:c7:54:2f:ff:15:d2:78:66:36:87:2c:02:
                    f3:36:b9:85:27:61:1c:43:eb:4c:82:56:5f:3c:fc:
                    e1:7e:96:4a:eb:71:42:16:50:2e:1d:1f:40:46:97:
                    94:72:01:48:1d:1a:6f:7e:d1:21:0a:35:49:3b:ed:
                    9b:9f:3d:6a:46:1e:98:f6:3b:8c:5d:eb:c8:dd:39:
                    f8:79:ba:27:09:61:1a:37:3a:ca:f7:e2:c0:11:18:
                    b2:a5:70:32:c4:78:07:38:57:bd:d2:f6:0f:2f:5b:
                    5b:5a:75:92:16:af:61:fe:b7:4c:f4:34:28:3d:60:
                    37:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B3:65:6F:BC:E6:EA:F4:A8:B0:C2:C7:DE:04:92:A0:E5:E3:2E:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/127335ac-7835-339e-98cf-19520d8ce2e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:cb:82:07:36:a9:65:7c:81:3f:10:dd:b2:2c:c1:89:da:85:
         33:31:b4:44:b4:0d:42:8b:0d:b7:9b:98:43:81:0b:6b:35:d6:
         5d:4d:d1:d1:52:3c:da:db:0f:3d:a4:79:45:d1:df:cf:73:89:
         5a:89:e0:ce:ef:f0:61:e2:39:04:3d:cd:be:2b:c4:d4:d6:de:
         ee:bd:79:5e:f7:12:95:5a:70:9a:4b:34:c7:da:21:61:b4:4f:
         e7:32:84:8f:4b:b5:9e:5c:ee:ba:34:33:85:fd:7e:e3:7b:a0:
         e7:5d:8c:6f:78:90:f9:6f:84:28:13:1f:24:97:cd:df:bd:42:
         1c:e9:e6:ab:1d:49:ad:34:1d:a5:50:d8:57:ba:46:1b:a4:0d:
         f3:86:3d:29:a1:78:92:13:96:b9:78:c1:54:74:c3:b5:13:00:
         5b:97:f3:aa:43:f5:12:ba:40:32:be:dc:a0:9c:6b:18:6a:52:
         71:d3:e2:30:4d:17:60:cb:91:24:69:73:cc:f8:4c:d5:9e:68:
         44:24:35:20:d3:b4:0f:86:36:73:57:c6:c3:9f:c4:c3:68:39:
         77:b7:55:2b:49:2e:b7:b9:f5:66:60:67:56:4e:47:3a:47:c3:
         57:85:ee:ac:81:b3:35:12:a0:08:55:69:c0:01:6c:e8:89:f9:
         51:96:c3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:30:16 2026 by rpki-client