Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/69e451d6-a10f-3c10-9fb8-e81eccf02a03.roa
File:                     69e451d6-a10f-3c10-9fb8-e81eccf02a03.roa (raw, json)
Hash identifier:          e1oxaytIsrTiv03R7GFB7U6f823/Hd9rpJESnlV35I8=
Subject key identifier:   09:F4:B5:B9:29:EC:2F:D7:B1:98:82:05:BD:E2:47:26:3D:FE:5B:CB
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584AE9F67037057353F0D3267680
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/69e451d6-a10f-3c10-9fb8-e81eccf02a03.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     9009
IP address blocks:        172.94.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:70:37:05:73:53:f0:d3:26:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=f24befec-f883-4d3b-967d-e55d7f9555db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:10:14:d3:35:86:e0:c9:0b:ad:0d:53:0b:e4:
                    5d:f9:4f:9d:08:8f:69:ef:34:01:16:50:24:3b:83:
                    2c:63:69:43:22:aa:97:d9:a0:33:17:1f:a7:18:b2:
                    de:77:11:d8:be:d6:f7:a1:94:ae:e3:99:d0:c4:3a:
                    15:c9:4a:24:20:c1:ee:0c:1a:44:eb:45:d9:34:53:
                    42:d9:e5:9c:3c:7e:e5:1a:34:02:2d:de:46:b9:76:
                    00:98:de:e2:08:de:b3:98:aa:5e:cb:ee:4e:35:32:
                    5c:5e:d6:62:f8:75:c2:6d:fb:ea:ab:cf:08:9d:4b:
                    e4:88:18:ec:0d:54:d6:ee:81:58:bb:47:24:45:e8:
                    9f:2e:48:e4:f8:b5:13:70:90:11:0b:28:6e:b7:d8:
                    2a:92:75:dc:ba:09:2c:66:ef:93:26:d9:bb:52:03:
                    6c:ec:5f:e7:48:ce:0e:f0:17:6b:de:07:7a:d3:68:
                    ee:fa:05:b9:b1:df:43:64:2a:0d:94:59:43:a4:cb:
                    80:26:2b:fe:30:64:97:ce:42:b7:72:0a:f1:68:41:
                    21:a6:ba:ab:90:96:e0:a3:64:ac:14:a2:87:e5:50:
                    fe:7f:b3:74:b3:da:bb:c3:3c:57:48:40:3c:93:bc:
                    92:d2:29:9e:48:30:c4:62:e1:bb:ff:96:aa:2f:e6:
                    22:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F4:B5:B9:29:EC:2F:D7:B1:98:82:05:BD:E2:47:26:3D:FE:5B:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/69e451d6-a10f-3c10-9fb8-e81eccf02a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:a7:ed:35:16:fd:5e:53:4c:fe:48:c7:c2:a9:e7:51:1f:79:
         a8:9d:be:58:44:f3:00:02:0d:ed:9b:32:a5:5e:a5:9b:e6:e9:
         5c:00:c2:16:a8:67:76:0c:e8:71:7c:01:7a:58:37:eb:88:4e:
         47:2b:0d:3e:81:53:59:f4:6a:96:78:48:b4:e4:d9:16:cf:6b:
         68:b9:b8:1a:69:7e:22:20:2d:dd:67:ab:a9:77:07:63:c0:9a:
         e8:7d:d6:3f:32:ad:a6:d0:d6:a2:7d:09:4d:48:c4:39:87:1b:
         e4:9e:6b:a7:0a:e0:6f:41:13:25:d1:fb:6f:5c:e8:a1:5d:f8:
         5c:01:2e:c7:79:f3:0f:c3:86:3d:29:8d:39:c1:96:b8:f7:79:
         ba:54:c5:fa:53:fc:05:e8:52:82:04:b9:15:95:2e:f9:63:7f:
         80:af:39:c1:62:47:2e:55:03:48:68:dc:a5:ce:32:61:5f:24:
         95:3d:1a:23:b4:28:b0:0c:39:5a:0c:ce:22:c4:64:48:95:2f:
         d9:d8:b2:7b:d6:ce:7d:10:7e:76:f4:93:ac:34:82:62:d8:7e:
         8b:1f:ac:54:0e:ce:b9:f6:0a:46:c1:bf:8e:a9:87:36:79:96:
         02:1b:7f:c5:47:cd:2a:c2:d9:e0:9e:66:e5:ce:54:6b:2c:ef:
         49:2f:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:11:40 2025 by rpki-client