Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa
File:                     7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa (raw, json)
Hash identifier:          084VOOnXa9aaNh2cXGIr397Y7zlkDVDbXuVPvKL7Fz4=
Subject key identifier:   B8:76:3B:29:5A:08:09:69:5F:F2:E8:E7:79:3B:DF:B7:FB:AF:BF:5E
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584EDC91FC023B4844DA06C39E40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     3223
IP address blocks:        172.111.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:fc:02:3b:48:44:da:06:c3:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=1ba4ad14-c5e7-4379-ab86-01640eac3dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8d:dc:ca:50:21:c9:5a:8a:b4:5f:64:8a:cc:
                    47:36:56:ee:5c:fd:bd:a2:a0:7f:16:ec:71:d8:27:
                    2f:6c:40:07:8a:62:7b:47:e4:d2:e9:5b:76:54:12:
                    85:2b:74:7f:40:6b:a0:0e:fb:73:d1:df:8d:cb:39:
                    f9:0a:81:ba:7f:93:dd:4c:a8:2d:5a:4c:88:7a:e7:
                    7c:ab:67:a8:9a:aa:80:60:32:42:2f:e1:9d:8c:b4:
                    7c:46:50:53:8e:b0:4e:f7:a1:1c:7a:d9:df:77:d6:
                    eb:bc:8a:96:a0:4a:56:99:f9:e8:01:10:21:cd:9e:
                    d7:c5:f8:73:e0:6e:d2:7a:ef:fe:f1:cc:3b:45:ca:
                    bb:85:ef:e4:4c:f9:50:55:c5:4b:ae:ad:cc:c2:e5:
                    f3:5f:07:1f:aa:16:bb:30:18:04:6b:d4:b1:f5:c0:
                    e1:cb:5f:5d:a8:8c:1c:c9:8b:69:02:e3:e9:33:bf:
                    6e:c7:ac:2d:e5:ce:8f:7e:7a:ed:16:ed:61:72:87:
                    92:98:b9:79:e8:9f:98:6e:67:13:09:4f:3c:67:8f:
                    e9:53:97:68:ff:5d:11:3c:43:78:c1:16:f4:d0:31:
                    6c:c9:67:4f:ed:56:d9:a6:b9:a7:01:c1:e1:0d:95:
                    0c:c6:d3:ae:b2:e8:1e:7f:27:72:af:20:6f:48:37:
                    3b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:76:3B:29:5A:08:09:69:5F:F2:E8:E7:79:3B:DF:B7:FB:AF:BF:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7af1a353-fbf1-38cc-bb5d-9e83ce23ac7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:62:3b:4a:cf:7b:d6:62:52:48:a6:62:43:08:74:89:f8:a6:
         3d:d8:1e:ee:d4:0f:32:9a:80:cb:71:41:8b:6a:9a:a9:18:46:
         9b:d9:c3:87:34:00:18:47:4a:3b:38:9e:4c:90:96:8d:a2:fb:
         8e:1f:43:95:3f:47:ef:c7:c5:8c:f9:f6:13:51:80:c3:cb:65:
         f3:c7:ed:08:f0:f4:5a:f6:b1:b9:a9:d3:62:98:e6:68:d7:f6:
         28:f5:55:38:73:cb:a1:f3:9d:17:ca:be:b4:7a:3d:d0:be:f1:
         8a:cc:b3:86:e7:4b:57:91:80:f6:68:07:92:fe:aa:20:9f:fe:
         3b:32:6d:13:1c:2a:92:ef:a1:7b:1f:a0:fe:9e:83:b9:d1:07:
         53:bf:2c:5a:c4:d5:ac:08:88:47:36:3e:6f:45:95:72:10:0d:
         0b:fc:d0:c7:e8:3f:b6:47:7d:8c:f8:19:17:e9:dc:24:50:83:
         ee:e4:a3:90:56:28:1d:d7:61:be:3e:8f:62:63:82:b6:75:c8:
         1d:53:37:f5:18:6f:cc:af:e2:a3:9c:54:71:48:eb:48:1f:eb:
         e7:7b:ac:91:1a:76:fe:f0:a9:b3:1d:2d:7d:29:4d:70:d2:1c:
         bf:5c:f9:69:72:06:69:61:87:a4:43:6c:a1:36:21:ed:cd:41:
         a7:9c:36:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:40:32 2026 by rpki-client