Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/829668cc-e0bc-391b-b45c-510857bc5d6d.roa
File:                     829668cc-e0bc-391b-b45c-510857bc5d6d.roa (raw, json)
Hash identifier:          kSYprhpgaWGJdiKj3oFgCc0xY8hi+nJWYSJRSmlrB9M=
Subject key identifier:   AA:E2:0B:B5:3C:96:06:45:2C:D8:C1:57:FE:A4:55:6A:99:3E:1A:2C
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584ED167245703D8FCAD340D0700
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/829668cc-e0bc-391b-b45c-510857bc5d6d.roa
Signing time:             Thu 13 Aug 2026 01:00:11 +0000
ROA not before:           Thu 13 Aug 2026 01:00:11 +0000
ROA not after:            Wed 11 Nov 2026 02:00:11 +0000
asID:                     132372
IP address blocks:        172.94.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d1:67:24:57:03:d8:fc:ad:34:0d:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 13 01:00:11 2026 GMT
            Not After : Nov 11 02:00:11 2026 GMT
        Subject: CN=f6569aca-2739-409d-acf1-63b99ab4c697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:05:3a:a8:ee:d3:7a:78:59:91:9b:f6:a7:f1:
                    54:95:5a:4f:ba:60:30:60:29:f8:72:b8:ba:98:3f:
                    07:2a:ff:2e:a8:fc:43:77:48:f1:9e:6b:97:4b:88:
                    8c:9c:bd:0b:9a:bb:85:bc:a5:77:f4:e5:8a:af:25:
                    df:89:37:4e:6a:05:0d:cc:2a:5e:2c:25:67:01:0a:
                    05:d4:71:a4:ad:af:dc:34:56:03:f1:c4:c0:9b:41:
                    6b:52:cd:f6:32:cb:f8:00:69:b1:c8:1c:73:22:83:
                    03:ea:2a:20:7b:56:8c:ac:99:81:ba:33:f5:12:c3:
                    ac:d4:fc:5a:34:26:86:58:83:f1:74:c8:60:b5:13:
                    9d:f3:e4:3b:7a:2e:98:66:19:51:1b:32:6c:be:6a:
                    4f:a3:07:fe:d6:5c:09:7f:32:05:9b:0d:26:f6:65:
                    13:8e:d1:7f:91:d3:fb:fb:5d:9d:9a:75:e6:91:a3:
                    3a:4e:0e:7e:b6:1d:b3:bf:a8:71:b9:8e:81:3f:1a:
                    1f:d4:ab:c6:a5:c5:ae:cc:50:ab:5b:22:70:0e:16:
                    7b:29:03:38:7a:93:7a:3c:e4:d0:9a:83:28:4c:d2:
                    ce:85:5b:b7:48:b0:c1:7d:f4:fe:1a:23:33:8e:24:
                    0b:3e:d0:18:04:03:bd:40:89:89:4f:9f:22:42:d3:
                    a6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E2:0B:B5:3C:96:06:45:2C:D8:C1:57:FE:A4:55:6A:99:3E:1A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/829668cc-e0bc-391b-b45c-510857bc5d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a3:8c:2f:43:04:d6:a8:4d:81:2a:7d:67:ca:17:fe:85:21:
         f8:da:aa:c9:e5:25:8b:28:9d:c3:e9:28:69:c6:25:f0:86:f6:
         6a:e1:d0:88:26:e4:16:a6:0a:7c:33:68:f3:dc:03:cd:39:77:
         be:2e:a8:61:b0:ed:db:f7:d1:a8:d9:3f:06:e2:79:81:0f:4e:
         fd:af:05:7d:f4:72:75:38:e6:61:ac:02:67:fa:dc:83:ab:a6:
         81:ad:1f:7a:c6:18:c6:6d:aa:bd:03:a5:76:d2:eb:ae:db:83:
         cc:ef:db:40:6d:33:23:65:c6:ac:19:15:60:73:30:06:50:9f:
         bc:81:59:95:32:26:fa:4e:6b:34:b0:cf:da:da:fb:9a:5d:e5:
         19:d1:89:1d:4e:2b:a8:c3:f7:45:7d:f5:bc:ff:6a:76:bb:bc:
         1a:d0:81:03:a0:08:4c:8b:16:08:bd:11:5b:e5:e3:4a:db:23:
         17:86:f2:15:97:94:36:94:1c:57:08:67:6b:fc:c7:35:c9:5e:
         35:aa:06:f3:be:ab:c1:62:13:d4:f0:4a:f7:c7:b1:ec:49:87:
         ed:13:43:33:94:53:2c:15:71:f2:9b:4b:d3:0d:dc:0b:fa:93:
         4f:e4:bc:4b:82:17:82:83:18:3e:e2:1d:63:da:69:b8:13:c6:
         8f:db:52:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7RZyRXA9j8rTQNBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI2MDgxMzAxMDAxMVoXDTI2MTExMTAyMDAxMVowLzEtMCsGA1UEAxMk
ZjY1NjlhY2EtMjczOS00MDlkLWFjZjEtNjNiOTlhYjRjNjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywU6qO7TenhZkZv2p/FUlVpPumAwYCn4cri6
mD8HKv8uqPxDd0jxnmuXS4iMnL0LmruFvKV39OWKryXfiTdOagUNzCpeLCVnAQoF
1HGkra/cNFYD8cTAm0FrUs32Msv4AGmxyBxzIoMD6ioge1aMrJmBujP1EsOs1Pxa
NCaGWIPxdMhgtROd8+Q7ei6YZhlRGzJsvmpPowf+1lwJfzIFmw0m9mUTjtF/kdP7
+12dmnXmkaM6Tg5+th2zv6hxuY6BPxof1KvGpcWuzFCrWyJwDhZ7KQM4epN6POTQ
moMoTNLOhVu3SLDBffT+GiMzjiQLPtAYBAO9QImJT58iQtOmDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKriC7U8lgZFLNjBV/6kVWqZPhosMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvODI5NjY4Y2MtZTBiYy0z
OTFiLWI0NWMtNTEwODU3YmM1ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArF44MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADejjC9DBNaoTYEqfWfKF/6FIfjaqsnlJYsoncPpKGnGJfCG9mrh0Igm
5BamCnwzaPPcA805d74uqGGw7dv30ajZPwbieYEPTv2vBX30cnU45mGsAmf63IOr
poGtH3rGGMZtqr0DpXbS667bg8zv20BtMyNlxqwZFWBzMAZQn7yBWZUyJvpOazSw
z9ra+5pd5RnRiR1OK6jD90V99bz/ana7vBrQgQOgCEyLFgi9EVvl40rbIxeG8hWX
lDaUHFcIZ2v8xzXJXjWqBvO+q8FiE9TwSvfHsexJh+0TQzOUUywVcfKbS9MN3Av6
k0/kvEuCF4KDGD7iHWPaabgTxo/bUpQ=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:53:41 2026 by rpki-client