Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/4f550d86-c8d5-38b1-b2f4-b766aa418db3.roa
File:                     4f550d86-c8d5-38b1-b2f4-b766aa418db3.roa (raw, json)
Hash identifier:          KYWX5fFMbMzFdPXP6zklA/+t9qD2eLda2gvS8hrKL1k=
Subject key identifier:   68:6D:65:0D:74:D1:BD:B3:DA:27:E3:82:A7:97:19:6A:6A:D1:A1:3C
Certificate issuer:       /CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
Certificate serial:       010D0C9F4328584E9D4A620CE458478F44110C80
Authority key identifier: B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/4f550d86-c8d5-38b1-b2f4-b766aa418db3.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     396982
IP address blocks:        64.6.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:62:0c:e4:58:47:8f:44:11:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=17015809-cf9a-49af-9455-79136413d07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:c9:dd:ca:85:26:dc:4d:30:28:97:1e:77:
                    40:de:29:92:30:40:c0:1a:43:0f:f0:6c:e2:d4:29:
                    72:e8:34:39:cb:1f:aa:52:7c:05:b9:21:c7:54:4c:
                    84:d3:b7:ea:b2:69:ee:86:ff:f0:73:e0:6c:97:76:
                    64:b1:bd:66:c1:70:65:14:99:3b:75:e1:09:21:f9:
                    40:aa:6b:57:d0:f1:87:d7:df:a5:b1:0c:6f:73:4a:
                    4d:b3:f2:88:08:c5:8b:0f:d9:b7:aa:af:3d:19:12:
                    20:51:f8:b2:c9:cc:76:d7:43:a6:37:41:29:ae:1d:
                    96:d3:62:a3:f6:2b:5b:20:22:f0:d5:3c:fd:79:b7:
                    65:1d:c3:43:72:38:da:9a:99:76:93:86:15:2f:cf:
                    cb:8d:30:f5:69:82:cf:29:7f:10:e3:47:72:7f:40:
                    99:41:6e:59:4c:b7:c0:65:87:0a:da:c4:72:6a:37:
                    9a:56:f9:d0:dc:89:99:4e:04:a6:75:8c:79:e9:2a:
                    03:84:9a:ae:0d:f4:3b:c1:6f:5e:ba:4d:b4:c1:32:
                    ac:92:ac:81:ca:26:ac:0e:98:d9:7b:5f:6a:66:ae:
                    c3:a8:e8:a5:a8:78:ed:4f:2c:0e:bd:a2:19:a5:ad:
                    e9:c8:8d:ce:5b:12:ab:8f:2f:61:60:21:a6:b3:a3:
                    0d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6D:65:0D:74:D1:BD:B3:DA:27:E3:82:A7:97:19:6A:6A:D1:A1:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/4f550d86-c8d5-38b1-b2f4-b766aa418db3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl

            X509v3 Authority Key Identifier:
                keyid:B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:fa:f9:da:a7:16:b1:92:8a:a3:00:a5:2c:4e:43:b3:4a:bc:
         03:4d:bf:92:d8:c6:5b:6f:9f:0c:c2:da:68:e7:a7:1e:a9:ed:
         2f:fb:6b:74:46:01:56:1e:48:02:9d:24:33:ec:d7:4b:8f:e4:
         3a:63:3d:de:17:ea:f1:05:6e:d1:0a:11:00:66:48:51:d1:ed:
         55:18:75:2a:d7:9a:e0:80:f4:dc:d0:bd:24:46:28:1e:91:ae:
         0e:a3:34:d2:47:32:25:e9:4b:56:d4:c3:3f:9e:59:a4:01:c6:
         bd:74:b3:db:ab:50:06:23:7f:bb:8f:7f:d4:97:f1:45:66:7d:
         ec:77:ce:a7:16:95:bb:50:93:3c:c2:00:31:0c:1f:24:80:55:
         89:7c:85:e7:94:3b:5c:f5:78:33:51:6a:b1:ea:69:11:a1:d3:
         ea:e6:a7:ec:6e:db:41:40:ad:64:07:c3:cd:90:93:10:21:94:
         37:c8:a3:71:c3:cc:09:39:e2:5f:0a:64:40:9c:37:28:53:87:
         f0:bd:1c:14:a8:3e:14:ec:3a:c5:87:2a:cc:dd:9d:83:64:23:
         d1:75:ff:be:0c:0e:d4:a1:64:9f:81:05:af:86:45:0a:04:51:
         dc:c1:18:fd:d3:36:16:e1:bf:bb:fe:f1:48:a2:16:34:5f:a8:
         2a:f9:cf:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:03 2026 by rpki-client