Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/224ffc7c-fc28-304b-ac10-659b5e3f6aca.roa
File:                     224ffc7c-fc28-304b-ac10-659b5e3f6aca.roa (raw, json)
Hash identifier:          p+xX85bDdlruXf/swLuOaitLIanblvE8+IjWfUPMdHs=
Subject key identifier:   5E:46:AC:7F:7B:C2:D4:5D:73:E3:16:37:F3:BD:D0:A4:B6:5D:6D:21
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584EDC92107C5F6E1F834AE1D080
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/224ffc7c-fc28-304b-ac10-659b5e3f6aca.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     212238
IP address blocks:        172.94.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:10:7c:5f:6e:1f:83:4a:e1:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=c9b216c1-460e-4861-a3c2-e2e2f0596328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d1:72:7c:7d:fd:2d:1d:2d:85:1c:66:bb:61:
                    a9:53:ec:2c:b4:0c:f1:3e:1c:50:70:b7:e7:ef:06:
                    7c:3a:6c:f0:11:ff:7f:e1:52:1d:f2:52:ff:fe:55:
                    25:fe:22:97:64:05:67:1f:b0:4a:9e:91:13:fd:41:
                    84:4a:09:86:be:3e:a5:f1:b4:6a:35:16:e1:dc:94:
                    a7:df:54:ad:ad:bd:f5:e6:87:ef:42:82:45:f8:ee:
                    12:98:a8:ec:ae:1e:86:a4:06:33:7a:d4:2a:67:37:
                    a0:2c:3e:c6:d7:75:67:e3:18:f7:04:86:35:a7:1f:
                    5e:3c:2f:40:89:24:3d:26:de:ff:24:7b:c7:e4:a2:
                    d0:88:a2:74:2c:d0:08:b0:9d:22:cd:df:87:bb:a4:
                    ca:52:8a:ea:eb:d8:d6:ad:23:df:64:cc:27:9a:21:
                    60:33:65:cd:14:af:c6:61:8a:b1:0a:a5:8e:fe:e7:
                    59:bf:99:ab:73:49:b1:e3:fb:dc:3c:5e:66:b7:81:
                    ca:06:e1:17:8b:97:42:ee:94:8c:8e:c0:a2:c0:d1:
                    c2:73:d2:d7:ae:da:b0:21:5e:49:f3:66:2b:dc:ec:
                    84:f0:2c:84:13:89:a6:91:7f:82:0b:ba:20:52:d8:
                    0f:1a:af:06:08:8f:ec:15:76:54:ee:3e:13:1d:c8:
                    e6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:46:AC:7F:7B:C2:D4:5D:73:E3:16:37:F3:BD:D0:A4:B6:5D:6D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/224ffc7c-fc28-304b-ac10-659b5e3f6aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:fa:12:5f:80:95:04:28:e3:6d:dd:fa:f9:45:1f:7d:1a:d7:
         a3:42:c0:a4:55:20:4e:da:4b:20:b6:55:b7:cf:49:2e:56:60:
         42:05:98:e8:38:00:54:52:2a:3b:17:62:fa:40:27:93:c4:a1:
         fa:24:b4:b0:db:0e:04:68:3a:e6:68:bb:be:ab:8c:7f:3b:23:
         43:89:0f:41:f8:eb:8d:be:ad:4b:ea:a5:91:da:8a:d4:c4:cb:
         5d:b1:55:5a:12:10:c2:48:e2:c3:f7:4e:2a:38:2e:4d:95:71:
         b8:a0:1f:25:81:10:0a:d4:f4:fe:5e:7f:ca:de:73:78:4e:ac:
         56:c7:06:92:83:ab:02:24:83:a2:bc:70:7f:2f:24:32:46:1b:
         75:4a:88:ab:d3:79:d1:47:fa:91:73:07:87:80:07:5f:0b:4c:
         06:42:2e:eb:d2:e6:fb:b6:9e:71:b4:f8:28:79:82:43:a3:12:
         03:34:60:7a:43:35:6f:12:0e:cb:49:34:08:58:51:2f:9d:c6:
         8f:92:59:87:d0:fb:6a:6c:47:58:42:4c:de:a5:a4:0d:7d:86:
         13:8d:9a:c5:60:84:42:4a:ea:da:f9:1d:48:50:01:fc:bd:3b:
         d2:cd:0f:97:30:c1:4b:06:03:7f:5a:f6:aa:c0:59:bd:04:02:
         85:d2:55:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:25:29 2026 by rpki-client