Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1f9ffec1-2b55-3237-80da-0c5eabe68647.roa
File:                     1f9ffec1-2b55-3237-80da-0c5eabe68647.roa (raw, json)
Hash identifier:          ex/Z8QUckVHABU815ZRkHKMH3wgUgwhj+WbhSTLOLBs=
Subject key identifier:   DB:D4:E0:BA:03:BA:35:71:1E:9C:DD:1B:0B:00:2E:20:31:9B:B3:4C
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584E2F045B0D1BCC25D74C7009F8
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1f9ffec1-2b55-3237-80da-0c5eabe68647.roa
Signing time:             Mon 15 Jun 2026 21:00:12 +0000
ROA not before:           Mon 15 Jun 2026 21:00:12 +0000
ROA not after:            Sun 13 Sep 2026 21:00:12 +0000
asID:                     132372
IP address blocks:        172.94.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2f:04:5b:0d:1b:cc:25:d7:4c:70:09:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun 15 21:00:12 2026 GMT
            Not After : Sep 13 21:00:12 2026 GMT
        Subject: CN=d23ff27d-f78d-424a-82e9-b4190ffa93ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:30:ec:21:9e:d3:6c:fe:4c:e9:a0:9c:e3:9c:
                    14:05:6e:29:a0:0b:6a:31:a7:97:80:ea:07:e9:0e:
                    1c:cb:08:6d:9e:37:9a:f7:4b:77:72:03:6b:e3:c3:
                    f2:49:4a:79:78:4d:54:50:c8:8e:ef:99:ab:c6:8b:
                    3b:6a:84:62:9f:b6:59:a1:8b:f5:20:b9:67:62:db:
                    fb:b4:54:ed:10:50:6d:41:4c:93:3a:bb:af:2e:78:
                    8c:7b:79:b0:85:67:ca:e5:a9:9e:32:c3:7e:5e:94:
                    55:c0:9f:23:fe:11:03:f7:39:46:be:44:e0:a1:2d:
                    a7:7c:3a:c9:8f:1d:e6:80:31:bd:4e:a9:7f:2f:e5:
                    5d:6b:f4:ae:39:27:3e:67:0b:16:32:a0:c3:c8:3a:
                    9d:bc:c9:f7:b3:2e:c4:6b:c6:52:17:ac:2e:36:e5:
                    45:3d:cd:62:63:48:a2:91:d2:72:1b:2c:5b:90:05:
                    99:5d:90:bb:a4:33:e4:2e:4e:b1:63:36:ab:3b:c6:
                    34:3a:d2:a9:cb:9e:07:1d:4e:48:f1:c6:71:c3:c4:
                    67:17:92:9d:ca:89:f1:06:ba:41:de:08:ec:4e:0d:
                    4c:47:f9:46:5e:5b:0b:c1:46:87:5b:83:24:4e:6d:
                    05:f2:e4:26:69:d0:04:2f:d3:8e:ba:ca:43:7f:b6:
                    00:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D4:E0:BA:03:BA:35:71:1E:9C:DD:1B:0B:00:2E:20:31:9B:B3:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1f9ffec1-2b55-3237-80da-0c5eabe68647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:db:bb:22:4a:c1:93:e5:55:62:02:ea:47:d3:cb:56:c5:d9:
         83:be:c9:7e:ec:76:a0:14:b0:28:8b:ca:78:f1:ea:41:32:34:
         fe:bb:c4:15:8e:6c:b4:4d:c8:4f:60:30:a0:06:8e:52:9c:99:
         bd:e8:88:25:e1:81:f2:a4:56:04:b5:2f:30:da:d8:10:1c:95:
         5c:63:68:71:de:8e:6b:53:88:94:50:ec:c0:9a:60:3e:bc:53:
         af:a4:27:e0:4b:cd:a9:b5:12:d7:bb:67:96:f6:e1:39:c4:f0:
         e4:54:61:3c:ae:6f:c3:98:f5:78:3c:a8:3a:0b:20:b9:c9:2a:
         e1:0e:c8:1c:14:0c:0b:de:fa:3c:40:3a:cd:aa:89:f2:f2:12:
         51:4e:53:5d:02:ed:2b:f7:a3:b7:70:a6:c3:98:cb:4c:f7:01:
         d7:77:85:8c:80:ef:14:ba:2e:a6:3f:fd:f9:33:6a:bf:d6:73:
         cd:3e:58:d0:b9:c3:15:cd:ff:a2:6b:79:94:08:d2:3a:51:87:
         a6:54:13:be:f1:fc:7b:a5:77:d2:83:b6:34:f3:f9:a8:9c:87:
         00:92:f5:6c:cb:35:07:e7:d9:0c:6a:0e:27:7d:36:4a:b8:c8:
         24:57:d4:1b:a1:87:6a:ce:9e:0a:f7:e1:ee:a9:92:04:e1:50:
         80:23:9f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:56:27 2026 by rpki-client