Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39302ab9-19a5-39d1-945c-659d3e27e590.roa
File:                     39302ab9-19a5-39d1-945c-659d3e27e590.roa (raw, json)
Hash identifier:          o22eyaQeJ73ujX2xUp0DbdY+svMG7gfexSVnU4JuWd4=
Subject key identifier:   A4:38:B8:E9:B0:A6:B4:69:00:D6:C5:9F:44:10:8D:CB:C4:FF:26:52
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584F11A15A71624CB2ECEAD44F00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39302ab9-19a5-39d1-945c-659d3e27e590.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        172.111.147.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:5a:71:62:4c:b2:ec:ea:d4:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=c4b85c16-78c8-4b8c-81ee-fe560acd303d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:7f:c3:b7:8d:c2:93:00:6a:60:96:ff:26:
                    08:bb:90:7d:99:b5:66:3f:56:4f:d9:65:5c:4f:4d:
                    f5:1f:20:9d:54:f3:a2:a1:33:59:d6:e1:fd:09:b8:
                    97:6a:31:5b:0b:39:c7:f2:81:ee:00:03:ad:3b:d4:
                    65:6e:ca:66:8b:09:63:ac:88:74:98:e8:3c:ad:c2:
                    28:49:a9:3a:64:32:a6:91:3a:fa:af:71:1a:68:23:
                    91:b8:f2:f4:5f:a7:fd:3e:97:e2:25:54:ce:d7:ef:
                    76:0c:69:c8:bd:ab:74:57:71:fb:26:4e:c8:8a:64:
                    b2:37:a5:01:25:9d:16:79:ac:7f:30:6e:7a:98:25:
                    0a:d2:8b:4c:bd:28:a7:a1:1f:a0:e0:dc:e1:6b:2b:
                    32:2d:da:83:28:31:77:bc:18:a2:cb:ab:86:7a:81:
                    33:31:d6:65:bf:d1:4a:fc:fb:2d:4a:c4:26:a2:94:
                    4c:e1:08:0b:38:5b:c6:46:e1:a7:60:7c:62:fc:a9:
                    f7:16:e7:9f:1f:6a:4c:dd:01:0f:a4:1a:6e:49:67:
                    f6:46:43:a5:05:1e:6e:8c:38:2b:fc:21:b4:66:28:
                    cd:0a:73:bb:86:5a:8b:96:90:46:ca:2f:f5:02:cc:
                    3b:80:b9:5d:99:27:43:60:86:f9:6f:57:c3:54:81:
                    be:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:38:B8:E9:B0:A6:B4:69:00:D6:C5:9F:44:10:8D:CB:C4:FF:26:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39302ab9-19a5-39d1-945c-659d3e27e590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.147.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e2:31:0b:99:13:1f:d0:b3:22:df:2e:cf:02:02:b6:1e:27:
         18:88:0f:d7:2d:03:f6:31:73:59:7b:11:51:99:96:1e:42:64:
         fa:4f:de:5a:47:ee:e2:9c:8c:7b:be:d2:d6:3c:3f:09:26:8e:
         0c:0f:7c:a0:26:8c:c3:89:aa:e8:e1:14:9d:b1:5e:7c:2e:a0:
         2a:af:9d:0b:a4:78:9d:72:a9:c2:6c:64:d5:d2:c3:d0:da:be:
         33:e3:97:d0:29:73:39:46:76:37:5f:e4:5d:49:7e:02:23:f9:
         1b:f9:bd:b5:a8:0d:ab:b6:ff:db:63:8d:70:39:2f:b4:43:0f:
         c6:22:44:5e:bb:bb:ca:3c:15:50:a8:fd:3e:90:c8:a0:5e:2c:
         2b:7f:e1:ba:8c:66:ab:e8:ff:7c:6d:8c:68:5f:e0:f3:a9:df:
         36:fb:fc:52:d2:2b:eb:11:68:b5:33:24:43:a2:cc:a4:fe:b8:
         4e:2d:43:23:45:99:c9:46:6e:af:aa:15:4c:d3:49:79:4b:6c:
         21:d3:8b:30:ef:1a:1d:e6:55:93:40:29:1b:d9:80:1c:e0:e8:
         43:92:86:d4:f7:c0:55:23:6b:43:34:3f:d3:41:79:67:df:d3:
         aa:3e:60:ae:9e:a6:39:37:66:27:52:4a:a3:95:8a:31:0e:09:
         e2:40:7d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:56:02 2026 by rpki-client