Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa
File:                     c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa (raw, json)
Hash identifier:          1/Me9V5CLc4TBoI2/Nv1m+W4DpSF42IgZHY3thTSMd4=
Subject key identifier:   34:66:03:6B:7C:34:8E:C3:2C:9F:7D:EA:7A:F6:DE:C7:20:EC:91:CE
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584F093CEF7109859ADF9C7CC100
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     206264
IP address blocks:        172.94.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:ef:71:09:85:9a:df:9c:7c:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=8cf82ed8-7fbd-401a-af91-852e10df1f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:9f:56:be:de:35:59:b6:17:03:2f:c3:a6:
                    5d:a2:a3:7e:3d:ff:a7:63:23:2e:2e:2f:78:a0:55:
                    82:71:91:bd:1a:b4:00:b3:53:06:5a:d2:0b:be:43:
                    0e:7c:f2:00:c8:96:3f:ed:d6:c9:86:90:d0:e2:e1:
                    a3:ec:19:7a:12:58:61:da:c6:42:98:e2:28:b0:9e:
                    58:f3:f6:e8:43:c1:00:59:aa:e9:a5:62:c4:37:0a:
                    0e:75:26:61:7a:4d:3f:20:e2:b7:9e:23:e2:2f:76:
                    90:1a:89:fe:b4:41:11:8e:59:39:ea:a3:41:ed:13:
                    59:e3:23:bc:90:4a:72:0a:6e:2e:7f:d4:dd:19:5b:
                    a7:80:c0:66:1e:c9:83:fc:41:96:29:23:ab:83:68:
                    77:9d:d8:6b:29:8b:35:3c:1f:a8:56:0b:fd:77:31:
                    85:a6:ce:c2:a2:c7:46:9f:a5:49:ee:7d:cc:42:b3:
                    e8:7b:fe:d4:87:fc:06:fb:44:ed:0d:36:b6:02:ce:
                    02:be:7a:57:80:94:f6:09:48:d2:84:70:02:4a:c9:
                    2d:50:73:c3:38:e9:1b:21:4a:d6:58:50:61:04:dc:
                    ca:28:40:50:da:c6:de:71:0b:e2:f1:40:8c:56:00:
                    69:3e:cf:bf:c7:5f:31:38:2f:06:fc:cf:36:9e:b0:
                    14:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:66:03:6B:7C:34:8E:C3:2C:9F:7D:EA:7A:F6:DE:C7:20:EC:91:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c8f5c5e1-1730-3ac6-8d95-4e9474f73899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:43:23:c6:59:a5:67:b8:15:ec:43:9f:16:84:e0:10:34:59:
         29:b4:d5:76:30:01:89:75:a3:ec:0f:3c:40:41:4f:2a:a1:ce:
         14:9e:d8:b3:10:8d:a0:5d:40:17:48:47:8d:55:09:62:d8:51:
         97:ff:e6:33:cd:fc:ed:fd:b6:d1:ad:e0:b3:b2:ba:49:14:ea:
         30:6a:74:c1:bb:08:58:f6:16:1c:fa:3f:06:aa:94:86:8c:75:
         8f:52:3c:44:46:32:87:da:e7:19:45:3e:f8:c2:e6:41:64:8c:
         d5:64:01:95:f6:2d:a5:c8:a7:37:38:fc:2e:74:1f:53:86:bc:
         30:1c:d3:2d:b5:90:79:13:18:96:60:77:5d:e0:cc:2d:be:11:
         46:bd:b1:0f:ff:de:88:1e:07:85:b8:ba:19:62:6f:eb:60:c2:
         ee:b8:37:4e:8a:36:c4:1b:a5:c1:5b:58:cb:b7:dc:7e:cc:72:
         3e:e6:70:67:4b:87:35:d0:54:31:7d:8d:dc:aa:1b:77:2d:d7:
         30:ac:a5:b9:e7:6b:7e:4d:db:8f:95:fd:dc:47:3d:3f:d6:6a:
         32:24:b1:b0:ba:08:d4:bf:9b:cc:50:6b:e5:44:f6:47:6e:26:
         5d:71:a0:d4:de:5e:60:7e:85:28:4e:70:21:c4:4f:f9:a3:83:
         96:d2:5d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:18:40 2026 by rpki-client