Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f5547c64-fcfa-34cf-93af-936cdbe44fcd.roa
File:                     f5547c64-fcfa-34cf-93af-936cdbe44fcd.roa (raw, json)
Hash identifier:          96/IlcgeN2f2EC0sb1g6K8fcMHgAs7ZaWeWVQbxz7Ow=
Subject key identifier:   33:48:EF:A8:61:DE:A7:49:B4:49:A2:3D:17:07:DE:2A:4D:EE:55:CD
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584D91C00FA9A3FBE32E682B2560
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f5547c64-fcfa-34cf-93af-936cdbe44fcd.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     212238
IP address blocks:        172.111.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:0f:a9:a3:fb:e3:2e:68:2b:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=bc2540c8-df84-4a09-bd83-5d73e9d1f672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:2d:25:3f:4a:01:53:a9:cd:61:88:71:f1:
                    27:8f:c7:22:d8:00:2d:ae:36:26:8a:8f:62:19:07:
                    a0:0b:ba:32:ec:63:93:4d:cc:79:92:40:65:b8:09:
                    6d:b6:a8:06:50:63:ab:3d:95:26:82:3c:6c:04:4f:
                    c0:f3:64:9f:fd:ec:31:26:b0:0b:23:f4:e2:83:95:
                    ee:46:e5:fb:44:e4:22:24:15:ef:16:0e:ac:34:65:
                    01:63:e9:76:fd:b9:f4:3f:71:87:c0:dd:1f:f5:dd:
                    51:4c:55:e2:7e:58:97:7f:57:5d:fc:c9:a6:56:3d:
                    d0:90:aa:bb:77:2d:35:43:43:a8:0d:e3:ec:75:19:
                    8c:21:03:ba:e7:fb:13:86:e3:cf:00:ff:68:95:c8:
                    5c:6f:bc:33:7c:2d:2d:7d:bf:7c:f6:78:38:b8:47:
                    7d:78:62:fa:43:d4:1e:79:96:37:9b:c5:6e:1e:26:
                    38:c4:1c:a3:18:c1:cc:20:88:f5:ca:25:9e:80:f4:
                    7a:41:57:02:c9:6a:e3:ef:2d:28:ce:58:11:dc:54:
                    d6:d9:a8:50:61:9d:c1:e6:39:b3:78:19:06:e2:91:
                    70:e7:28:4d:ee:d0:0b:5d:4f:e1:9d:ec:18:0a:49:
                    5f:47:d2:de:d0:08:f6:df:1b:23:78:94:d9:e4:9c:
                    4b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:48:EF:A8:61:DE:A7:49:B4:49:A2:3D:17:07:DE:2A:4D:EE:55:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f5547c64-fcfa-34cf-93af-936cdbe44fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:8b:7d:9a:57:a6:ba:d0:de:d7:72:f2:78:36:92:78:0f:82:
         54:88:fc:e9:48:e8:89:b9:b8:9f:e5:92:e0:e6:0b:7a:52:e8:
         b7:ed:7e:9a:84:7f:72:e5:20:04:b1:5b:38:82:7b:e1:8e:75:
         3a:0f:4a:41:f7:8d:1f:7a:9e:29:73:de:87:5d:1b:61:8a:c8:
         30:a5:d4:6d:a1:9f:f5:13:65:44:06:e6:54:00:d4:4b:ff:01:
         d6:23:7a:95:ff:c5:94:bf:97:e7:1d:8c:bf:74:51:a1:82:b1:
         52:41:c3:8d:7e:81:5d:40:9d:0c:a5:7f:fa:0d:96:73:df:e3:
         22:e8:1c:3b:b0:39:3d:2c:37:a6:a7:6f:6d:e7:bc:af:04:31:
         26:61:aa:29:81:09:74:ce:1c:27:68:49:f2:06:dd:a4:fe:42:
         73:26:dd:4e:c4:80:51:7a:21:38:c2:8a:09:c4:cc:c2:6f:b1:
         83:c4:d3:bb:b6:0f:c8:2f:5b:9e:93:bd:d4:b6:c6:d1:36:20:
         05:46:d4:58:4c:8b:6a:86:b6:35:4c:5a:24:66:2a:b7:ef:e4:
         da:f3:5c:8b:70:92:8f:bc:87:dd:f4:44:b7:3a:99:f5:71:c2:
         05:91:36:92:6e:fa:1e:0d:8d:73:61:8e:82:29:d4:9d:04:ca:
         09:2b:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:29 2026 by rpki-client