Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f755dc1c-a66b-36de-bf56-3f875810fc58.roa
File:                     f755dc1c-a66b-36de-bf56-3f875810fc58.roa (raw, json)
Hash identifier:          LZWfjUzr7opaX3Fzms1udsmInvEYyrhFWOV4mmjHQyI=
Subject key identifier:   C5:06:A7:FD:92:84:1A:55:B3:73:69:85:4A:31:52:E1:35:F1:60:55
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584F4DA28E321228CA6A30F58C00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f755dc1c-a66b-36de-bf56-3f875810fc58.roa
Signing time:             Sat 26 Sep 2026 13:00:12 +0000
ROA not before:           Sat 26 Sep 2026 13:00:12 +0000
ROA not after:            Fri 25 Dec 2026 14:00:12 +0000
asID:                     132372
IP address blocks:        172.94.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4d:a2:8e:32:12:28:ca:6a:30:f5:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep 26 13:00:12 2026 GMT
            Not After : Dec 25 14:00:12 2026 GMT
        Subject: CN=36172250-df1d-4cd7-88b5-6977cf91b470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:22:a1:9f:2c:21:1f:90:3e:f0:73:e3:a8:1e:
                    08:77:35:41:e1:bb:de:03:3a:be:62:b9:c3:25:ca:
                    b2:3d:19:ff:60:93:5f:e6:a4:7e:7f:61:3a:55:bd:
                    7a:1d:4c:ec:13:85:e0:9d:4a:87:b8:d6:5f:d9:9b:
                    9f:50:6d:e4:66:7c:98:1c:4b:ff:2b:1a:d1:7b:a3:
                    d1:c5:e5:f0:5a:84:dd:f1:f0:19:f6:1d:ef:fd:6f:
                    5a:d6:0c:d5:8d:0e:26:3c:f6:4e:2e:c4:00:2a:89:
                    1b:0a:6c:e4:76:31:ba:cd:28:fb:9b:f0:8e:e3:90:
                    63:0a:e3:62:a7:26:c8:5c:3c:7a:fa:57:b2:fb:16:
                    07:4e:ab:0f:c8:6a:ac:ac:fc:d5:0e:4e:1c:94:aa:
                    78:af:45:77:54:58:13:f2:37:81:25:de:88:7c:66:
                    36:90:99:93:43:40:e0:20:81:29:5f:f5:34:9c:24:
                    b6:7b:9a:37:b5:aa:bf:c4:4e:fd:4b:b0:2b:97:f8:
                    cd:fe:90:e5:74:4e:9b:1c:2c:c6:d5:a7:39:bc:97:
                    89:10:ff:a0:dc:01:82:3d:41:c4:21:90:00:3e:c2:
                    21:f3:24:56:f7:12:ae:91:aa:41:13:a3:1d:92:c5:
                    40:b8:d6:21:a0:c2:35:0c:aa:23:78:cf:7a:c4:ca:
                    e3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:06:A7:FD:92:84:1A:55:B3:73:69:85:4A:31:52:E1:35:F1:60:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f755dc1c-a66b-36de-bf56-3f875810fc58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c2:07:65:df:74:be:c4:89:30:7e:72:0b:bb:1b:bd:6c:fc:
         5a:0c:ae:06:77:e0:eb:fa:97:6a:53:5b:58:3e:8a:f0:76:24:
         20:49:d2:de:7b:58:46:00:6e:12:10:cb:21:f0:b5:74:3e:99:
         9c:85:1e:69:d8:5d:23:34:e6:97:02:9f:23:37:6f:96:f0:11:
         7d:89:2d:44:2f:22:59:df:d5:2e:e0:9f:08:b4:99:12:0f:3a:
         7e:4e:f2:65:a8:7b:40:27:a5:b0:5f:ac:e0:6e:67:59:58:19:
         29:e4:ef:c0:71:94:74:d8:64:0b:7e:d1:32:55:a9:b5:da:da:
         6f:c5:94:69:c5:47:df:47:5f:38:2e:6b:0a:05:c5:a7:09:df:
         71:a4:f0:a2:b7:61:17:91:df:02:31:91:b8:58:ab:23:8a:80:
         3e:b6:1b:8d:a1:6f:ea:da:24:c6:73:20:d3:54:71:2e:84:28:
         95:68:86:31:93:ea:dd:6f:6c:43:e7:41:49:fd:fb:7b:6f:16:
         a1:ad:8b:36:3b:14:c8:c4:d0:93:a5:39:67:4b:ac:dc:f2:19:
         c6:7b:f1:cd:6c:33:32:e3:1b:63:84:62:6a:88:6a:a4:e5:e7:
         40:98:d7:c4:1e:81:90:50:89:fe:00:dd:7d:64:1e:c9:3f:af:
         3c:cc:6a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:23:38 2026 by rpki-client