Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bc3e6b60-45b7-3a03-a6e9-6ba9060485c6.roa
File:                     bc3e6b60-45b7-3a03-a6e9-6ba9060485c6.roa (raw, json)
Hash identifier:          28J4yYli+jbj3XTiz+it7CxOlKI+6obbopgKif28z3E=
Subject key identifier:   F4:79:8D:4E:A0:DA:4E:50:46:A8:7E:C1:FD:F5:3B:D5:4F:FD:BB:37
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584CEFF22635F61111CE07B93640
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bc3e6b60-45b7-3a03-a6e9-6ba9060485c6.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     137409
IP address blocks:        172.94.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:26:35:f6:11:11:ce:07:b9:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=0fbe30e0-cb95-4524-a4f8-14677d0a1dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:36:30:b1:01:1b:e5:9f:4f:49:ed:8b:b5:77:
                    db:f7:76:f1:d3:ce:f8:58:25:60:ea:5b:92:0e:9f:
                    b7:88:1d:7d:48:77:58:e7:76:8f:c1:c6:21:16:22:
                    f8:d6:c2:25:fe:f1:df:1d:b4:4f:02:7e:b9:99:1d:
                    ae:e5:15:ae:53:fb:40:ea:09:ba:2c:0c:c4:5b:47:
                    6e:55:5f:74:97:02:b3:61:e4:18:85:d8:69:bb:96:
                    f4:88:0c:bb:32:d4:aa:e2:fb:f2:ca:8f:fb:3f:d1:
                    05:d1:80:7f:64:b7:76:dc:10:ef:0b:61:ca:b2:8d:
                    81:3b:cb:13:70:6c:5b:e6:2a:33:ab:4d:1d:8c:78:
                    f9:56:75:21:b2:ba:75:7b:6b:6b:fc:67:6b:9a:64:
                    6e:4b:4a:3a:7f:0e:e1:ec:ab:74:b7:14:25:6e:1f:
                    7c:96:22:36:c0:54:91:cb:65:6c:ce:29:c8:c1:d2:
                    81:bd:99:0f:13:64:eb:0b:d1:8e:0e:e6:6e:98:38:
                    3e:44:03:b2:da:60:1e:12:d9:7f:95:1f:81:3e:59:
                    de:8d:fb:69:d5:06:0a:a4:11:7b:c4:f6:0a:6b:35:
                    2c:50:17:c3:d4:00:34:72:92:0b:37:b8:a5:fc:35:
                    d0:9b:5d:ab:0a:b9:cf:74:fb:40:6f:bc:fc:55:a2:
                    b6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:79:8D:4E:A0:DA:4E:50:46:A8:7E:C1:FD:F5:3B:D5:4F:FD:BB:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bc3e6b60-45b7-3a03-a6e9-6ba9060485c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ec:8b:56:da:23:50:67:65:0d:7a:81:30:2c:7c:b8:3b:0f:
         78:2c:2f:c8:50:b4:ef:39:3a:21:1b:25:8f:2b:48:81:4b:c4:
         1c:82:32:62:95:ce:c3:fa:4b:e3:54:b0:35:3b:c0:51:39:b2:
         39:b7:e6:2c:37:d5:91:db:a2:d0:d7:d6:dc:85:4a:61:e7:8d:
         6e:95:30:29:9f:7c:9b:9f:a5:91:e7:7b:12:d5:13:11:16:50:
         8a:45:00:22:fa:da:1a:4c:ce:8f:66:b4:47:c4:b6:61:5c:82:
         ed:b7:d2:9c:02:3d:b6:b8:ec:f2:c1:ce:cf:4a:08:86:ad:ad:
         f7:cf:41:1f:d5:23:bd:43:b0:2b:7a:4e:6c:24:10:a0:cd:73:
         3c:fe:c3:c4:c4:e2:7c:af:d3:02:0e:4f:b7:14:5f:30:db:0b:
         6f:97:5a:70:cd:51:27:35:54:c3:98:62:e3:ea:1c:3d:6b:ea:
         77:68:3e:46:ac:d3:b0:39:7b:3f:ef:cb:8d:35:86:ad:29:06:
         48:a9:ef:66:36:4c:20:34:af:b6:2d:55:09:5d:73:75:b1:93:
         31:10:68:14:c4:52:3d:cf:f3:21:4c:f8:23:9f:c6:8f:9f:a8:
         d7:45:76:58:b1:e1:67:8a:64:e5:b3:99:81:27:51:be:4f:9c:
         bc:a8:4a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:56:02 2026 by rpki-client