Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/69e451d6-a10f-3c10-9fb8-e81eccf02a03.roa
File:                     69e451d6-a10f-3c10-9fb8-e81eccf02a03.roa (raw, json)
Hash identifier:          O/A+cdMYnkg26hXXX4lNMsSzhVePWTDNHnPOD5xOqHA=
Subject key identifier:   80:DD:9B:E8:DF:4B:64:24:3E:90:7D:E2:1A:D2:A9:ED:3C:7B:26:47
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584D8C2AA22E4C1E34986892A5C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/69e451d6-a10f-3c10-9fb8-e81eccf02a03.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     9009
IP address blocks:        172.94.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:a2:2e:4c:1e:34:98:68:92:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=9fb83bb8-1f6f-42b2-ae3b-6a67fe145886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:3a:0d:21:1e:bb:ae:b7:78:aa:c1:b5:eb:
                    83:8f:ce:ca:44:45:0c:6d:b1:56:c3:e9:4a:c8:00:
                    bb:bf:75:ee:16:87:16:4a:2b:62:6a:80:ac:d4:8a:
                    7d:46:b9:51:42:a4:f2:84:e4:b6:8d:2f:d6:2a:07:
                    a5:f7:a1:20:3c:9f:e3:01:2f:1c:57:17:bb:d0:5b:
                    ec:d5:be:ce:3e:c1:ba:48:7c:4c:27:2e:02:04:b9:
                    0b:75:bf:fd:8b:9e:4a:f8:4f:77:40:65:54:e1:ab:
                    17:34:b1:40:c6:b3:82:71:b9:3e:e5:25:06:c1:2c:
                    1d:33:f7:f5:d5:6e:35:8c:6b:1f:0e:62:05:25:05:
                    cb:69:66:75:de:6f:d2:0e:56:1a:f3:b0:6c:7c:82:
                    bc:0f:f6:69:59:41:f5:74:3c:77:65:fe:b2:ce:ac:
                    c9:38:3a:09:53:49:3a:6e:b7:e8:62:9f:07:a8:ec:
                    98:d7:10:ac:40:9c:a0:da:6f:64:94:a8:9b:a2:6d:
                    76:87:ad:f3:b8:84:50:d3:19:ec:8a:12:dc:ca:44:
                    b6:ba:21:21:39:a3:3a:70:11:9f:5c:dc:11:ac:d9:
                    17:fe:89:63:f0:43:e0:f9:d3:38:cf:65:2d:d9:15:
                    52:9e:f0:d2:e2:32:27:da:8a:29:1c:f3:e4:02:99:
                    9d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DD:9B:E8:DF:4B:64:24:3E:90:7D:E2:1A:D2:A9:ED:3C:7B:26:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/69e451d6-a10f-3c10-9fb8-e81eccf02a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:5b:80:68:c7:09:d8:97:1c:7d:32:9a:c3:51:53:0d:30:be:
         07:ba:c1:e6:83:b4:e6:a9:98:10:11:16:76:97:86:c2:17:49:
         e7:81:79:71:b8:21:7e:fc:58:2a:d3:1f:d6:2e:70:3a:f3:28:
         6b:1e:0f:09:08:df:09:21:bc:e5:79:0d:ec:03:1a:5d:04:5d:
         49:a7:c4:57:a9:3f:9f:95:6e:7f:f1:22:63:58:89:b3:82:07:
         c7:f7:f3:e7:88:10:99:55:e5:20:98:8a:63:15:3a:b1:8e:57:
         fd:3f:81:53:dc:ef:36:8e:44:82:47:b7:e1:f0:14:9d:3f:c9:
         c0:34:b8:60:8a:de:2b:d0:cb:30:49:db:29:56:3a:35:d7:d8:
         09:37:69:7b:16:44:d7:ab:b3:75:df:10:04:1c:87:d1:21:8c:
         0a:a8:56:f8:f9:71:fc:9d:a7:a2:c2:3c:b3:c2:e3:68:c7:c2:
         7a:b6:5c:28:22:c5:aa:c6:9b:66:9c:42:4a:78:5b:a6:57:31:
         72:dc:17:e0:e0:ca:59:de:ca:9f:43:0a:65:bd:b6:27:95:40:
         03:32:f7:7f:8d:6a:e0:d2:d1:43:c8:2b:12:e1:5e:8c:04:26:
         f2:86:ac:e5:f0:0b:a6:4e:97:fa:b9:b3:f5:93:3c:15:80:b3:
         d7:5f:f8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:25:00 2026 by rpki-client