Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba814287-b53d-31fc-b52d-a3923ba8d46c.roa
File:                     ba814287-b53d-31fc-b52d-a3923ba8d46c.roa (raw, json)
Hash identifier:          UhFonITb7ls3hNNuqwfoDwhnMQ3hKzorZAxYeZVk110=
Subject key identifier:   64:A7:D5:92:E8:D1:F1:2E:3F:29:9B:D0:0E:BA:2A:9E:1D:A6:F0:E7
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584E0A6FF8A820996DAD75B57600
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba814287-b53d-31fc-b52d-a3923ba8d46c.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     14618
IP address blocks:        172.111.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:f8:a8:20:99:6d:ad:75:b5:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=caf954d9-2274-467a-a184-ce9b3438d9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ea:b4:1e:22:cc:62:95:59:d2:65:3e:21:f1:
                    f0:ee:9a:1c:f7:ec:ca:04:ee:e1:71:4e:7f:69:31:
                    3b:8c:a0:8d:e3:e2:87:1f:a0:40:e2:db:91:1e:b6:
                    83:c3:7a:97:a5:34:82:ce:3f:3f:66:c7:5f:cc:f8:
                    75:e4:e7:b4:14:05:d6:fd:7f:16:3a:55:09:7e:24:
                    ad:bb:2d:96:b7:8e:e9:93:ef:cc:af:6a:00:d1:a1:
                    9c:8b:8c:44:9f:84:e3:b8:9e:d2:50:8a:d2:ba:7c:
                    08:81:92:3b:c6:6f:5d:4e:6a:10:2f:f5:51:d7:bb:
                    4f:d8:22:ff:e8:ec:89:5d:b1:8f:53:b3:1b:a0:73:
                    3e:51:b8:91:f1:0e:1e:c0:98:e0:34:6c:0c:c9:50:
                    4e:24:53:7c:02:4a:36:c5:73:3c:ec:4d:fd:f5:24:
                    be:7a:b0:5c:b9:97:6e:29:b4:bc:20:08:e0:09:63:
                    9d:a8:f2:f6:82:4e:22:c8:25:3c:7e:c1:93:3c:49:
                    b5:4c:85:bb:32:c7:9c:71:48:dd:da:52:61:82:0b:
                    ed:f3:cc:9a:10:91:20:80:84:78:eb:5e:98:91:d2:
                    0b:4c:8d:c9:dd:1f:97:9f:d3:62:b9:e9:f6:5f:eb:
                    9a:39:22:2f:a7:51:41:75:7e:27:69:23:2a:83:27:
                    3c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A7:D5:92:E8:D1:F1:2E:3F:29:9B:D0:0E:BA:2A:9E:1D:A6:F0:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ba814287-b53d-31fc-b52d-a3923ba8d46c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:71:66:8f:09:62:73:f1:1c:46:c2:a6:9f:55:bd:2f:ca:6b:
         2f:62:dd:98:73:6d:b9:5e:eb:f2:be:bd:50:19:1a:c5:99:6f:
         c0:86:56:63:74:52:d5:24:4b:75:15:b6:6b:de:19:02:76:fa:
         61:1a:b0:ed:33:2f:67:6a:03:0c:f4:e6:62:76:04:71:64:ca:
         aa:67:92:9f:a0:8c:ce:5d:0e:3b:1a:b0:5d:b8:5e:63:93:b0:
         5f:5b:c5:4c:a1:e6:5c:0c:4d:bc:9a:f7:34:0b:d7:31:9d:57:
         14:ff:bb:b6:07:bb:27:e1:61:42:20:a5:55:8a:ce:98:c6:59:
         9c:87:1f:75:dd:e3:82:af:dc:74:b0:ad:ab:d0:1d:71:16:96:
         d9:6e:a8:01:4a:4a:a8:41:3d:f1:ff:98:61:f6:d2:7c:7b:ac:
         3d:5e:09:c9:56:95:c1:21:9d:65:df:0f:3c:9c:31:ce:ea:bd:
         b3:d1:b9:48:1d:9c:b5:8e:20:14:ab:90:e0:f8:6a:92:0e:ba:
         a9:1b:70:f9:d3:b0:1e:1d:27:62:a1:b1:56:14:88:57:a6:97:
         68:34:b4:62:c0:46:dd:d0:6b:74:f5:98:12:37:92:9a:8e:b8:
         92:ee:00:0b:35:7f:40:34:72:40:e5:a1:b2:4c:cd:bc:ca:77:
         76:8a:82:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:31 2026 by rpki-client