Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1f5830b6-4685-3bde-b771-738caa87bfbf.roa
File:                     1f5830b6-4685-3bde-b771-738caa87bfbf.roa (raw, json)
Hash identifier:          3vYyzvnDQXG6kLlCqdkNkIdVICfnROQKp/mw9fNvlf4=
Subject key identifier:   03:C2:77:F6:95:A7:2C:60:24:26:5D:15:7C:FC:24:5C:52:BA:C9:2E
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584B795174F2EAB6E15313107C00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1f5830b6-4685-3bde-b771-738caa87bfbf.roa
Signing time:             Fri 10 Oct 2025 09:24:38 +0000
ROA not before:           Fri 10 Oct 2025 09:24:38 +0000
ROA not after:            Thu 08 Jan 2026 10:24:38 +0000
asID:                     208185
IP address blocks:        172.94.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:51:74:f2:ea:b6:e1:53:13:10:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 10 09:24:38 2025 GMT
            Not After : Jan  8 10:24:38 2026 GMT
        Subject: CN=581ce664-4bf3-4176-9c48-145b64238651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:85:18:a5:83:af:b7:b9:8c:31:74:df:3b:
                    5f:7f:39:9f:fe:25:91:a0:75:e1:68:fc:e1:be:52:
                    f7:8f:69:bd:e5:03:92:06:8e:39:80:08:d2:8f:ba:
                    95:e0:14:e8:e0:e8:1b:8d:39:5b:ea:b3:c5:64:f5:
                    de:d0:b6:8a:0c:f7:24:e3:da:b1:e7:ec:9b:b3:a4:
                    d4:15:1b:e8:c8:48:67:ba:80:d8:62:79:53:82:a2:
                    47:32:87:c9:74:5a:35:dd:b7:0c:a4:5b:8f:c9:cd:
                    32:3c:e5:74:f8:ff:8f:03:68:0b:7c:c3:c0:f3:d5:
                    24:33:16:1d:6f:4a:cf:cd:34:4c:6f:96:82:43:b6:
                    40:7c:21:86:69:96:e9:2b:08:58:bd:99:c5:cf:f2:
                    3e:85:86:1a:d7:36:29:d3:ac:80:85:4a:27:fc:ce:
                    87:4b:8a:06:db:70:17:32:ca:06:6e:0a:a9:79:0d:
                    fd:39:ae:1f:a6:d0:2a:8e:1c:a3:17:1b:a7:cf:46:
                    0b:53:68:29:76:c9:29:2b:a8:8e:97:97:ec:bc:ad:
                    ee:4f:6c:8d:f8:72:ea:00:9a:14:e1:fc:7c:f9:63:
                    dc:b5:22:d1:25:02:b3:31:25:78:30:72:6b:5f:a1:
                    38:e6:7a:13:cf:5a:87:dd:77:6b:45:50:f0:63:37:
                    69:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C2:77:F6:95:A7:2C:60:24:26:5D:15:7C:FC:24:5C:52:BA:C9:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1f5830b6-4685-3bde-b771-738caa87bfbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:0e:89:6e:19:d5:24:67:c3:be:b0:2d:25:e0:aa:cd:e7:35:
         6d:60:56:ac:19:f3:dd:e7:3b:1a:03:69:03:b3:3d:7e:f0:ff:
         8d:d3:df:5f:ef:92:3c:b2:c5:5b:17:74:da:05:51:5e:bb:fc:
         5a:3a:f1:8b:74:fc:78:e4:bb:39:96:1d:30:e5:fc:e0:52:7e:
         8f:f2:05:67:61:9c:6b:84:b3:be:c5:87:44:2a:81:04:bb:c4:
         34:d3:ea:24:42:4d:c4:a9:6b:24:78:03:6f:53:12:55:b4:d3:
         f5:3b:5d:d8:52:8e:8d:2f:89:50:5b:a0:92:20:b6:a5:47:32:
         a9:42:75:0f:be:91:90:9f:3f:1c:29:1d:5e:a5:7f:4c:bf:71:
         5c:73:2a:e9:56:d4:12:92:06:9e:77:45:97:50:82:15:bc:21:
         2a:c6:59:d4:ed:49:9a:1d:f5:ce:cd:42:bc:00:17:7a:aa:62:
         ab:94:b2:59:68:14:a7:6b:ad:58:6a:a0:9a:72:26:cb:a8:69:
         5c:81:f8:95:60:cd:e4:e9:f4:c7:91:98:6f:18:d1:2a:14:1c:
         2c:52:d3:df:69:93:80:47:90:42:13:b0:86:da:e6:90:06:fa:
         97:8c:8f:39:c7:9a:2a:f5:18:24:60:ff:4c:a9:69:83:95:ed:
         94:b0:ec:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:14:01 2025 by rpki-client