Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/43a4ca13-89c9-3560-85d2-f6355cc48f37.roa
File:                     43a4ca13-89c9-3560-85d2-f6355cc48f37.roa (raw, json)
Hash identifier:          6GYE1Edcxv15uS/yG43eu2wMV8WAHYwBaXqVoXmegZU=
Subject key identifier:   26:EA:18:B3:C1:B7:37:79:33:64:25:FC:12:BC:B0:E0:F7:7C:D2:CD
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584D422F8455D2465F27B2AFFF80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/43a4ca13-89c9-3560-85d2-f6355cc48f37.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     9009
IP address blocks:        172.94.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:84:55:d2:46:5f:27:b2:af:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=94907601-9adc-44d4-94d5-c6037ec116a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:34:45:c2:d7:33:26:85:d1:90:05:3c:4d:82:
                    03:59:86:a8:dc:5d:22:ac:2a:a8:8d:e0:b8:22:57:
                    44:bc:05:38:f4:5f:53:30:94:9f:b3:99:de:b2:ae:
                    b7:d0:49:eb:62:1c:75:94:8e:71:67:73:24:e4:36:
                    f2:04:b6:1a:34:20:da:fe:ff:a1:ea:e5:c4:29:b0:
                    d9:e8:7b:60:91:ce:64:c6:f7:e4:13:fa:9b:cc:95:
                    12:c4:ce:9d:40:ed:2c:ab:7e:e2:e1:31:7d:14:8b:
                    3a:57:d2:a5:77:a9:6d:9d:36:d4:d6:23:4c:f1:5d:
                    57:38:e0:78:88:8d:00:03:94:75:d1:a9:29:48:ff:
                    75:b4:f0:c7:55:0a:13:35:aa:45:0c:5f:6c:b0:f6:
                    a5:d4:18:38:f4:4b:c6:ad:7f:5b:ec:ff:1d:c4:04:
                    1d:b9:8c:30:1b:a2:0d:95:b6:ef:0f:93:2a:f8:5f:
                    63:93:fa:7f:20:af:f0:9a:97:a9:8e:02:77:70:c5:
                    21:11:21:13:45:75:59:a7:f8:83:a0:1d:a1:c3:e7:
                    86:ac:4a:82:77:e8:a2:45:5d:e0:98:da:01:34:42:
                    e5:a4:cd:5a:ad:6a:01:bb:92:32:27:37:83:95:d5:
                    18:b3:0e:f6:4f:ba:2f:b4:c6:8d:5f:80:76:4e:d0:
                    08:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EA:18:B3:C1:B7:37:79:33:64:25:FC:12:BC:B0:E0:F7:7C:D2:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/43a4ca13-89c9-3560-85d2-f6355cc48f37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:30:00:d0:b6:2b:df:6d:ba:9d:74:cf:06:c7:5b:04:c0:af:
         85:16:83:41:08:64:ec:af:36:5d:03:62:d1:96:d1:82:40:f9:
         58:a5:89:22:e3:6d:99:d2:96:4f:d5:7f:47:a5:c4:39:01:bc:
         3a:8d:84:17:49:52:9a:c1:76:4d:ff:cc:de:c2:d8:45:4f:c5:
         72:f1:bd:b7:97:bc:b1:2a:07:9a:57:04:d6:c8:15:98:83:c8:
         58:42:8a:30:5d:6e:39:80:4c:b8:70:c8:06:64:14:40:cd:5f:
         7f:5b:ba:d3:cf:6f:54:60:6b:1e:24:66:8a:90:5d:f1:8f:78:
         58:41:f8:c6:0c:a0:44:7d:1e:c4:f7:20:40:f5:e9:e9:82:0e:
         09:35:44:04:27:59:6a:f9:d5:7e:68:23:65:18:e6:9d:13:0a:
         5b:b5:5d:7b:bf:eb:3c:b7:3e:9c:09:41:22:97:ab:17:55:20:
         cd:ee:55:2e:54:81:5d:f7:21:05:95:36:95:fb:f3:e4:e2:ae:
         6a:73:b9:66:77:55:04:92:f0:9b:45:f8:5f:d2:68:ab:fc:b7:
         68:2e:1c:76:3f:98:fb:ad:66:87:2b:3f:2f:9b:24:38:aa:ca:
         ce:67:22:d0:d1:2e:5f:6a:7b:c5:b6:0d:76:91:77:12:32:3a:
         41:6f:c1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:44:43 2026 by rpki-client