Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/090798c2-16ed-3539-92d3-7af6c59173f1.roa
File:                     090798c2-16ed-3539-92d3-7af6c59173f1.roa (raw, json)
Hash identifier:          8kMrLzpMbgWZaA/m5S+CVw8jdHJZOZzuvvqoyTsDx2Y=
Subject key identifier:   FC:C2:F2:9C:7D:DB:9C:3D:C3:B4:9A:31:AB:AD:CB:1C:67:78:69:0D
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584B79514FE4A9FB6A203EC2D028
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/090798c2-16ed-3539-92d3-7af6c59173f1.roa
Signing time:             Fri 10 Oct 2025 09:24:21 +0000
ROA not before:           Fri 10 Oct 2025 09:24:21 +0000
ROA not after:            Thu 08 Jan 2026 10:24:21 +0000
asID:                     208185
IP address blocks:        172.94.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:51:4f:e4:a9:fb:6a:20:3e:c2:d0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 10 09:24:21 2025 GMT
            Not After : Jan  8 10:24:21 2026 GMT
        Subject: CN=f38d4790-b2e5-45f6-857c-0f6ea6795424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:92:12:68:e9:ea:5e:50:aa:2d:92:ad:a1:3c:
                    73:4e:ee:5f:19:42:2b:f6:36:d3:f3:56:8a:32:2b:
                    a9:31:56:c9:b9:cd:b8:a3:3e:46:50:e2:da:8a:2f:
                    c6:a9:f9:0a:f4:ef:fb:96:a8:c2:5f:2d:42:23:dc:
                    1e:f6:d8:ab:ba:7e:0f:47:09:42:11:94:ff:41:5b:
                    24:3f:a1:de:2a:a8:42:d3:14:d8:c3:a8:26:b3:dc:
                    84:87:fc:27:9f:12:df:44:2e:ce:d1:04:5c:36:9a:
                    da:2d:76:fc:dc:77:ef:70:c2:71:ff:ea:f1:39:f0:
                    40:2e:49:07:11:c2:8d:17:aa:e6:a3:df:1b:59:af:
                    58:c5:36:43:2e:0a:ba:ab:ef:a8:80:eb:14:ef:cc:
                    43:cd:d5:50:ed:ec:3c:06:2e:db:aa:e8:12:a4:6b:
                    9c:c0:9b:a6:f2:1e:df:2b:c4:55:16:db:46:fb:5c:
                    97:22:21:42:20:72:1c:5a:80:aa:dd:a7:ba:3e:43:
                    b8:5c:57:49:c3:2a:cd:94:99:3f:02:27:80:bd:33:
                    ae:9a:2b:5b:d1:19:9d:03:bc:32:a9:10:31:95:d6:
                    b4:d0:f2:63:b9:ea:8f:d1:1a:ea:56:95:c1:95:35:
                    dc:b6:1a:5b:ce:5f:73:58:df:e9:b9:73:f1:80:15:
                    8f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C2:F2:9C:7D:DB:9C:3D:C3:B4:9A:31:AB:AD:CB:1C:67:78:69:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/090798c2-16ed-3539-92d3-7af6c59173f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:c0:70:3d:86:d9:99:c0:9f:47:1a:27:61:13:0c:05:64:fd:
         7f:4f:25:85:5b:84:d1:45:2d:2c:15:2e:f0:e5:40:be:fd:fb:
         c5:68:e3:3a:95:e9:7c:21:2a:23:61:ce:0d:86:62:39:64:1b:
         cf:50:a1:ff:58:18:67:48:1b:9c:14:bf:7e:1b:e0:7d:3b:ec:
         be:af:82:13:ba:f9:18:f7:97:fe:69:ca:26:64:7d:5e:09:17:
         c7:2f:92:99:f5:80:79:49:3f:62:f3:a5:24:de:99:2e:f8:a0:
         ab:4e:9a:fe:7f:dc:9e:e8:3c:80:f9:ac:d4:e4:f4:d1:36:a8:
         c0:65:cb:a2:8c:88:2a:f7:59:5a:51:c3:d2:23:e7:cc:c8:8c:
         5d:b4:ab:3d:c3:b3:3b:cb:a1:80:61:47:62:c3:c3:26:ba:b6:
         88:57:fb:ac:0a:49:6d:86:ab:c6:48:24:f2:f3:39:1f:a5:e7:
         72:02:9d:8b:0a:e4:23:1c:b5:ba:3a:00:4a:12:64:b9:28:18:
         53:cb:f5:8f:67:3c:ab:b2:ae:e9:02:ea:00:60:10:8e:31:d6:
         99:38:04:1c:b7:b6:ee:e1:77:ff:9b:17:d3:91:6f:bb:ab:a3:
         89:ff:01:d5:04:c5:c0:6b:78:70:38:89:55:3c:fe:dc:d4:87:
         93:43:80:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:57 2025 by rpki-client