Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/54bd93e4-37b5-30b1-9400-97c9f6177c01.roa
File:                     54bd93e4-37b5-30b1-9400-97c9f6177c01.roa (raw, json)
Hash identifier:          EX7NjffL6Eox7m6YKVAJCFf+kaFKWd5qGhAdUAFH9Us=
Subject key identifier:   75:73:8C:68:C2:FB:5A:0E:57:1C:B3:1C:95:94:D6:87:E5:E8:9C:12
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584D00B27E83E0DAD825DA1C8A40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/54bd93e4-37b5-30b1-9400-97c9f6177c01.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     9009
IP address blocks:        172.94.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:7e:83:e0:da:d8:25:da:1c:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=141289f4-e70b-4663-bf32-5c4dc2491ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c1:ca:e7:d9:15:c3:29:80:6d:a2:2e:84:a0:
                    03:8d:74:a1:1a:8e:ff:fe:5d:77:41:cd:10:1f:0b:
                    c1:90:68:05:4f:b5:d6:d9:a1:e9:b4:c3:59:d0:41:
                    80:a6:f7:7e:a5:c3:36:51:45:de:e9:6b:46:47:2f:
                    64:85:77:9e:a2:2a:53:ba:d2:85:be:13:cf:5b:91:
                    f3:6d:de:bb:8a:fe:89:bb:6b:b6:bb:0f:31:42:1b:
                    fb:41:a8:f9:a8:a7:13:30:92:b4:dc:02:47:1a:6a:
                    ca:fb:14:77:ca:88:63:ed:af:61:d2:b0:00:49:ad:
                    5d:f2:74:3f:11:d3:6e:25:8b:02:10:21:36:5a:b0:
                    a1:8d:9c:e2:46:e1:f1:37:49:48:a1:31:7b:ea:4a:
                    c3:c7:c4:e6:f9:66:96:cb:22:22:34:be:82:a3:14:
                    f0:9b:d2:28:20:bb:6c:98:8d:88:f9:f7:07:22:4d:
                    36:4a:ed:59:7f:6a:81:4f:48:b1:a1:fd:be:c9:d8:
                    94:4c:d1:52:b3:40:6b:b3:46:a9:3b:40:f5:b1:08:
                    c9:f9:1c:48:1e:bf:57:71:b3:b7:91:2f:9f:4f:71:
                    d3:c5:fc:c3:6b:26:04:80:d4:e8:59:a9:6c:14:3f:
                    eb:87:ab:c4:04:59:77:ef:22:a4:41:1a:c7:43:5c:
                    c2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:73:8C:68:C2:FB:5A:0E:57:1C:B3:1C:95:94:D6:87:E5:E8:9C:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/54bd93e4-37b5-30b1-9400-97c9f6177c01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:3d:de:3c:f3:fc:1e:0d:01:05:0e:f8:38:b6:78:bf:be:c0:
         9c:26:4c:90:6b:af:c0:c3:e9:7b:33:04:ef:9b:4a:f4:09:7e:
         32:00:de:da:07:f1:42:13:60:cf:5a:a9:e8:d4:25:e4:80:60:
         c6:30:54:68:23:87:29:ef:2f:2f:0f:a5:f4:25:19:21:ac:86:
         80:38:6e:eb:d2:8f:5f:80:dc:88:18:8c:44:39:83:1f:d1:6b:
         30:ae:96:13:71:ee:73:42:6c:c2:69:f8:b0:cc:32:08:b0:44:
         d2:6c:a2:d9:d3:4f:9f:4c:d9:cb:7f:1e:51:e7:4f:d7:2c:e8:
         03:71:7f:56:f6:73:b9:cf:71:e3:d2:b6:a8:ad:83:80:1e:28:
         ed:68:ba:d2:90:7f:72:7f:9d:ed:33:10:02:44:08:5e:ca:55:
         ed:96:b4:ac:2b:1b:e9:c0:5f:68:42:2e:0e:9e:35:76:33:c5:
         e8:48:18:4b:5d:cc:ec:2e:67:76:bf:76:33:8e:9b:de:89:ff:
         77:99:dc:b1:ab:b6:63:45:55:77:73:4c:5c:23:4c:5a:ff:cf:
         12:0f:be:0f:3c:78:6b:fa:cb:4b:dd:35:9d:8e:a4:25:79:9d:
         47:c7:8d:12:61:1c:80:d5:ca:99:af:f1:1a:36:1c:a7:86:a1:
         dc:ec:32:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:01:01 2026 by rpki-client