Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/78b3ad72-1b71-3b2d-881b-d250eb25669c.roa
File:                     78b3ad72-1b71-3b2d-881b-d250eb25669c.roa (raw, json)
Hash identifier:          cFD/mSDy1TIwCoybWBRpYVBalnxgMNz3s0g5S4584IM=
Subject key identifier:   60:94:9C:29:1E:E4:A2:E8:54:D2:0D:3C:09:48:43:72:61:33:C3:4C
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584D55BA41FE9189E90874FC0C00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/78b3ad72-1b71-3b2d-881b-d250eb25669c.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     137409
IP address blocks:        172.111.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:41:fe:91:89:e9:08:74:fc:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=3af911fb-cb29-4505-a8cc-edc172db0b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:44:bb:97:41:cf:ed:30:f9:df:70:78:c8:eb:
                    e9:44:05:23:33:3f:4c:e0:9f:cb:84:96:ad:4e:c8:
                    cf:d3:5d:d8:cc:eb:bb:6c:a3:be:b3:77:77:2a:03:
                    69:9a:18:9c:f9:20:5d:86:e1:4d:ba:ae:96:4d:05:
                    70:59:c4:bf:20:e8:76:5c:f9:79:02:69:8c:42:8a:
                    bf:a0:eb:cc:4d:3b:96:b7:c6:83:2e:dd:68:ae:83:
                    98:06:0f:7a:ee:ca:e3:28:a6:cc:28:ac:36:bb:5b:
                    ac:12:09:4a:5f:24:28:87:68:e3:a4:82:e0:7e:30:
                    e2:20:57:26:03:d1:e0:b4:2e:e3:91:79:78:19:96:
                    33:9f:f5:da:0a:d0:d1:b2:15:74:d5:3e:65:5a:a3:
                    24:eb:cd:d4:38:47:04:f7:cb:10:0c:7e:d8:c6:01:
                    43:23:7d:64:58:65:fe:fe:2d:69:c1:ed:f5:da:8d:
                    34:2d:12:7b:bd:b9:ee:bb:49:6f:83:c7:5d:b0:c9:
                    38:c2:12:71:f6:1b:4d:21:ec:3b:56:62:06:45:8e:
                    32:51:5d:ef:ee:24:fe:a1:d1:c6:d1:d2:df:2c:03:
                    12:75:6b:78:79:e8:53:ce:73:c5:40:c5:f5:84:ef:
                    78:db:be:a5:14:c8:7b:af:c9:45:05:93:0a:8c:cf:
                    6d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:94:9C:29:1E:E4:A2:E8:54:D2:0D:3C:09:48:43:72:61:33:C3:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/78b3ad72-1b71-3b2d-881b-d250eb25669c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ee:56:cd:bd:f6:a6:0c:1b:33:e3:13:4a:1a:03:e8:62:20:
         70:76:79:1a:3e:69:96:3a:42:66:f0:97:30:a3:f2:dd:87:ed:
         f6:d0:91:18:28:20:1d:c3:35:12:a9:de:fd:66:43:22:8a:38:
         ee:1e:ea:c9:0a:3f:0a:c3:2d:09:93:6e:bc:e0:21:66:92:fd:
         18:20:52:2d:7a:eb:4b:a2:31:f9:cb:30:ba:2c:60:17:e8:53:
         2c:ba:39:04:d1:60:c1:dc:e0:db:20:a4:5b:d9:0a:cf:05:9b:
         82:e1:7f:10:b2:38:52:09:c3:3e:7d:d7:9d:1e:79:ef:6c:54:
         f9:d5:25:92:e7:6b:d8:f8:25:40:1a:6a:f3:bc:5a:7d:f6:35:
         56:66:fd:56:7b:88:11:27:f7:b6:7d:58:be:40:4f:70:8c:f4:
         35:9f:2e:68:c7:56:3d:76:06:1e:bc:b5:3c:ed:4e:d8:a0:77:
         ee:50:dd:51:be:4f:ec:70:8a:c5:65:7c:83:ba:d9:08:81:d7:
         b8:3b:0b:f9:60:2b:04:e7:bf:80:99:5d:6d:00:fb:68:0f:f6:
         44:33:38:64:a5:b2:69:d7:67:37:ef:4e:6e:e3:49:3e:29:0d:
         7f:5b:06:fd:26:ee:3e:b0:e4:9a:e1:17:d8:73:2f:33:00:4d:
         66:7e:64:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:05 2026 by rpki-client