Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa
File:                     d2eba7e0-6a87-3e70-9830-21cdb930b252.roa (raw, json)
Hash identifier:          VXyBcVKDgoietDYwGYflbgcJVuOM4UaAe0I7y24TYF8=
Subject key identifier:   1F:22:C1:95:B3:44:19:C0:D5:84:DF:28:8F:01:A6:23:BE:26:F5:90
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584B87B21F68A8EF179975405800
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     9009
IP address blocks:        172.94.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:1f:68:a8:ef:17:99:75:40:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=6d5eda5d-839b-421f-90a0-e139ebf2f635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:35:bf:55:9f:fa:ef:cf:5e:85:1a:de:e8:81:
                    20:6f:d1:85:fa:50:7d:fd:37:89:04:21:a3:1a:bd:
                    77:c1:aa:1d:c2:4b:bf:e8:57:21:ee:98:f4:65:55:
                    17:7b:5a:10:f4:c9:bf:d0:83:fd:35:ac:6d:d6:18:
                    2e:11:7d:ec:78:b3:2f:8b:08:4b:dc:3d:b7:c8:7d:
                    6d:3e:73:79:e4:48:9a:ab:83:f3:66:31:12:c3:f0:
                    87:39:66:dc:69:ab:72:03:ad:7c:f1:88:7e:ce:4b:
                    02:7f:fa:d3:e3:83:a6:55:3e:b2:d9:e6:74:b6:77:
                    e2:0a:53:87:da:b4:27:c7:79:a3:59:64:d2:e7:a7:
                    0e:1c:e6:c9:9b:a1:01:6e:8c:ee:02:42:e4:18:27:
                    72:74:ed:37:6b:7c:dc:64:5e:c4:1f:cb:4e:a3:92:
                    4d:05:04:c9:45:8e:87:27:0f:3c:2b:fe:17:0f:63:
                    2b:12:53:d1:31:f3:46:37:e5:0e:9a:93:62:77:c3:
                    c2:ce:42:43:f7:e6:11:6c:9d:24:90:91:03:e0:42:
                    43:ec:c6:f8:a3:70:40:ec:23:0f:8f:14:84:a5:17:
                    ed:4e:7d:46:47:3d:98:8c:3c:d9:14:46:30:61:5b:
                    13:88:49:ad:98:ef:7f:70:a4:25:1f:ab:12:2f:9d:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:22:C1:95:B3:44:19:C0:D5:84:DF:28:8F:01:A6:23:BE:26:F5:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d2eba7e0-6a87-3e70-9830-21cdb930b252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:58:1d:cc:18:1a:ad:59:af:37:f7:8c:e4:11:c2:1b:a3:07:
         32:8c:24:83:64:fe:43:29:8c:12:7c:5f:ab:cd:bb:17:6c:de:
         62:98:d7:bd:0a:54:dc:eb:b8:de:fb:30:6c:d1:60:1c:29:e3:
         a1:7d:6f:29:18:cb:75:5e:09:4a:a3:26:46:4f:fe:34:fd:fb:
         5b:23:22:7a:74:bf:ec:a6:ba:46:37:ea:31:45:9b:b6:05:61:
         cc:29:b4:03:92:53:81:57:0b:8b:7b:a8:c0:95:1a:5e:7b:2b:
         34:2d:27:df:ed:91:c7:a5:5a:73:ba:a1:6f:3b:a0:8e:7f:b5:
         08:fa:7a:01:7a:34:2e:e7:a1:b1:06:f9:30:20:fc:99:95:f8:
         15:63:08:d2:96:46:99:7e:e0:f1:54:e9:bb:6b:91:36:45:46:
         3d:10:4f:51:b5:5b:e9:07:4d:d2:65:47:56:6d:f9:ad:9a:af:
         09:e6:9c:ef:df:26:76:a5:69:bf:c1:43:98:4f:d2:ff:81:e2:
         9f:3d:07:1b:a3:39:16:08:b0:d9:73:71:e6:47:04:0a:d1:ba:
         6a:fd:27:30:ff:40:f9:3a:cb:83:bc:9e:64:64:9f:1e:cb:75:
         d3:b4:b4:2c:8c:fc:26:d6:d1:9a:b7:e6:cf:e2:a4:c6:e0:24:
         00:7f:f4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:35:30 2025 by rpki-client