Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa
File:                     70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa (raw, json)
Hash identifier:          P+f6pOpiOQ1eT7TY1x3cps1cfwL7nqw2dX4EUcS0UJw=
Subject key identifier:   68:08:40:B8:80:7E:06:55:31:BF:09:29:70:83:B0:88:DD:59:E5:8D
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584F0ED236D488CCF1DE18351E40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        172.94.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:36:d4:88:cc:f1:de:18:35:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=44b6afae-e76d-457a-a06b-7607c773a8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:73:68:7c:e2:e0:61:da:3f:63:a0:c0:69:
                    3e:07:03:ff:95:bd:61:79:15:15:ab:7f:b2:08:a0:
                    fd:7c:9a:f0:a3:92:da:1a:6c:55:2f:e3:a4:3f:32:
                    05:05:c5:9c:21:d7:6f:fe:b0:64:96:9a:81:cb:76:
                    91:f4:ff:6d:14:c2:35:7e:ed:d5:ad:d8:dd:15:bf:
                    12:32:16:fc:15:8f:f7:7e:0f:3a:94:2e:ef:e1:c2:
                    74:7d:64:16:49:5e:15:d4:b0:47:94:9a:d1:29:21:
                    65:cc:2f:ea:29:41:49:43:a2:0e:43:dc:a7:4f:f3:
                    e2:6b:aa:13:fb:2d:81:c7:49:3c:71:b3:7e:7f:cf:
                    82:d1:8c:28:54:05:78:f3:ab:83:d2:6f:a2:ee:db:
                    a3:b9:20:6c:ad:65:16:2b:0b:a9:f8:e6:6f:cb:58:
                    3b:45:01:97:05:c9:ee:47:a3:75:35:59:84:c5:e7:
                    54:c7:48:49:11:d6:4b:44:16:51:19:6f:72:c6:56:
                    d9:79:0d:66:a8:c8:ae:b7:8a:45:0f:17:ad:d1:c8:
                    6a:08:35:94:f5:ab:fa:dd:20:b1:7a:2b:94:08:c4:
                    33:61:e9:7c:00:ca:19:3d:17:ad:2b:8d:95:25:bb:
                    ea:18:b6:36:eb:8b:34:4c:c3:c2:8c:4c:93:5b:4b:
                    1c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:08:40:B8:80:7E:06:55:31:BF:09:29:70:83:B0:88:DD:59:E5:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/70c1d4ee-db09-3f94-b0f8-866dd2bdcbf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:0b:e9:11:19:77:8f:43:95:bf:43:76:65:30:3c:4c:69:52:
         60:5f:1b:03:7c:0f:70:9f:79:f0:58:7b:60:2e:ff:b1:97:f0:
         04:c8:91:97:5d:43:50:e1:c2:f4:5c:f2:21:64:bd:1c:3b:22:
         5b:b0:8b:9e:ea:a6:1e:2a:0f:a6:bf:98:c3:31:70:7a:a1:47:
         8a:bd:b2:5a:da:50:fb:7d:3f:50:19:0f:43:c8:0e:04:13:5f:
         38:45:b8:80:6b:51:94:4d:d3:23:5e:b5:42:71:99:1c:64:f7:
         2e:b3:ac:d1:e8:d4:f0:59:61:bf:9f:91:c5:9d:cf:2b:18:20:
         4c:2f:da:e4:d6:db:ce:6f:41:fa:5e:5f:63:e2:b8:a3:28:5c:
         9b:99:e5:9c:65:ab:a9:49:09:22:a3:a2:e7:d7:02:40:d3:1e:
         d4:bd:ec:f0:67:b1:24:d4:e1:a8:dc:39:c8:ee:4b:e1:a5:ad:
         8e:10:37:c5:a6:39:bb:b2:60:f3:b6:b3:26:16:c0:8e:01:19:
         76:7a:b7:f4:5b:7f:f0:e0:dc:a6:d8:c9:7f:c2:7f:9d:68:51:
         1a:37:58:3d:55:9e:f9:c0:a3:16:2e:a9:c7:26:b7:ee:ab:d7:
         25:c0:cb:49:a9:88:fd:02:8b:16:4b:d2:59:19:ad:da:40:75:
         bc:48:84:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:13:14 2026 by rpki-client