Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c5968279-9770-34e3-9871-db4912d08cbb.roa
File:                     c5968279-9770-34e3-9871-db4912d08cbb.roa (raw, json)
Hash identifier:          6BIdgro0Mw1jxywxLUsSv6bXxrCVtCekTeV4b2bOL6c=
Subject key identifier:   D6:89:94:35:40:90:80:7E:DB:F7:47:4A:E2:48:A4:66:B4:1F:11:B5
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584E6144B9B0832A8E609B3BF7C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c5968279-9770-34e3-9871-db4912d08cbb.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     9009
IP address blocks:        172.94.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:b9:b0:83:2a:8e:60:9b:3b:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=3f1ef875-7827-4425-8f51-e1115ae50f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:ae:df:f2:df:80:b3:d6:67:ff:1e:17:98:
                    14:46:ef:6e:f0:8e:99:08:1e:0e:fb:2c:df:c3:89:
                    a1:f6:f1:ca:e9:21:e0:79:04:33:ac:da:67:2c:b9:
                    2b:a1:99:2c:a2:f4:79:5f:40:8a:c7:75:80:c6:08:
                    a7:7e:ba:f7:8d:86:02:56:3a:32:ae:ea:27:10:7f:
                    c2:1b:79:54:40:33:ff:f3:ab:b9:ec:c8:e8:94:fe:
                    b6:44:90:35:4e:c8:30:c7:26:a8:7f:d6:88:43:9b:
                    8a:0f:69:a2:9b:d8:a0:61:bf:5a:1b:84:3e:34:88:
                    08:65:05:a5:8b:02:6c:d6:e6:43:cf:e3:2c:b4:31:
                    ba:50:e9:10:8c:13:e3:3c:3c:1b:eb:60:e2:1f:eb:
                    d8:2b:18:2e:27:85:76:eb:54:da:03:84:da:d7:41:
                    9f:6a:54:16:b1:30:72:e2:e3:f2:dd:fd:30:6d:c8:
                    9e:87:e6:5b:bf:f4:f5:b2:06:ef:41:ab:fe:58:76:
                    93:31:6f:2e:30:8d:9a:ac:ca:b2:fc:c6:78:88:dc:
                    37:01:bf:b4:9f:75:46:a5:a6:d6:db:32:eb:d3:6b:
                    f2:e7:ca:14:de:3c:a3:df:38:bb:49:fb:e9:b7:10:
                    ac:e7:06:f8:49:79:28:a2:bf:ce:5a:b3:5a:bb:68:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:89:94:35:40:90:80:7E:DB:F7:47:4A:E2:48:A4:66:B4:1F:11:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c5968279-9770-34e3-9871-db4912d08cbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:8c:2d:ad:dc:6f:c9:45:6f:bd:bf:52:a1:83:cc:9a:4a:e7:
         61:35:7c:cd:0e:c7:a0:f6:30:64:91:ee:01:07:2b:fe:db:90:
         15:56:6a:73:04:de:79:3e:f9:93:5e:47:f2:04:80:a5:39:60:
         49:99:0d:a9:db:0d:19:96:04:28:d2:37:64:c5:4c:a3:0e:e7:
         65:4c:97:b5:9a:fd:db:ec:b3:52:83:42:30:a4:ce:d9:48:29:
         59:68:39:c8:39:e8:98:04:76:03:75:2b:ae:11:c3:cd:e4:61:
         26:48:a0:dc:ee:a0:c8:01:b2:78:e8:b9:32:cd:b1:05:c7:8d:
         30:7b:23:95:c9:22:ab:60:29:25:cb:7d:ae:a1:86:dd:aa:03:
         6d:9f:f7:3f:d5:f3:f8:61:a1:82:c7:e4:99:04:0a:53:94:8b:
         0b:71:06:3b:1e:8b:fa:23:de:88:e6:54:97:70:c4:f9:e8:10:
         7e:53:80:89:95:c7:67:ba:94:55:38:c3:68:42:e0:81:9b:34:
         87:9c:27:71:d9:a9:68:bb:4d:66:bb:22:72:70:e5:38:07:f4:
         2f:79:b9:91:f6:a6:e5:02:50:28:93:45:96:05:41:05:b7:6b:
         36:7f:6e:51:54:21:0f:f3:38:f0:30:f1:5d:76:92:4b:c3:7f:
         6d:a9:72:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:58:15 2026 by rpki-client