Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/78d78e94-8ad9-391f-95ab-233174e2fb88.roa
File:                     78d78e94-8ad9-391f-95ab-233174e2fb88.roa (raw, json)
Hash identifier:          caSYs5FChSex1gkAWVbL2zRqIBojFPUqqOUKYk8Ulbw=
Subject key identifier:   0C:06:6C:F1:4F:A8:F0:E4:E6:D9:04:9A:F2:98:ED:78:F0:20:11:79
Certificate issuer:       /CN=8da2ab18-c7fe-481a-a5e3-31579c83e101
Certificate serial:       010D0C9F4328584EA797D0C44F956BE4830BB640
Authority key identifier: 5D:FC:5C:D7:AC:EC:F4:24:89:AB:F0:DD:0A:B6:1A:C6:FF:26:B6:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/78d78e94-8ad9-391f-95ab-233174e2fb88.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26337
IP address blocks:        206.188.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:d0:c4:4f:95:6b:e4:83:0b:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8da2ab18-c7fe-481a-a5e3-31579c83e101
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=43f5d162-e374-4790-a63a-0d62bfdb86bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:85:71:e2:12:fc:2d:65:e3:c3:a0:53:60:70:
                    0b:bf:74:61:d0:e2:65:4e:fd:6f:0a:5a:17:05:da:
                    86:99:40:6d:63:62:b0:b1:0d:15:ea:52:ec:4f:99:
                    8b:6a:6f:b3:c9:dd:18:8b:43:2f:8b:a2:d3:c3:f7:
                    53:f9:ca:02:56:28:95:56:64:1c:53:1b:37:ab:52:
                    21:21:5a:89:23:2f:e3:bb:6c:b9:fe:85:37:44:9f:
                    6b:e6:f0:d9:e0:9e:07:b6:08:80:64:8b:01:3d:c2:
                    5a:8d:ce:1f:7e:68:81:fd:79:37:34:11:2a:2f:26:
                    0d:df:e2:9f:00:7a:3a:dd:7d:71:b2:03:5b:16:37:
                    ce:8c:dd:1f:8b:c3:cc:95:d3:33:5c:64:4c:fe:b0:
                    9c:ea:33:89:1a:89:dc:97:ab:b1:0d:9d:a8:08:84:
                    1b:58:01:d3:36:0d:56:89:1e:1f:88:d8:a2:14:0d:
                    31:44:17:37:24:25:b8:07:2a:17:95:d1:0d:60:18:
                    ca:5c:4f:cd:40:1a:4d:60:8e:8e:b4:ab:df:1e:c4:
                    c5:6b:fd:3f:45:86:75:6f:e4:1f:83:f2:ee:69:89:
                    e9:f1:a8:a0:f8:d9:46:07:8e:01:52:05:1c:c1:03:
                    57:fd:57:63:03:d0:3d:fb:2a:49:c1:92:3a:c0:79:
                    be:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:06:6C:F1:4F:A8:F0:E4:E6:D9:04:9A:F2:98:ED:78:F0:20:11:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/78d78e94-8ad9-391f-95ab-233174e2fb88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.crl

            X509v3 Authority Key Identifier:
                keyid:5D:FC:5C:D7:AC:EC:F4:24:89:AB:F0:DD:0A:B6:1A:C6:FF:26:B6:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.188.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e6:54:63:a9:bb:fe:54:30:f1:ea:2e:ec:9a:a3:f6:f8:3e:
         96:06:36:59:e5:a9:e4:19:5a:88:8f:8e:c7:b8:cf:5d:e5:3e:
         e7:2d:61:1e:ba:d6:e3:67:92:28:d7:8a:e7:17:5e:fb:39:bd:
         ac:37:7c:bf:b2:bf:0a:f5:2a:ac:1a:c4:aa:58:3c:5b:35:d9:
         88:e3:1b:71:35:e8:a3:df:16:6b:c0:0b:5c:72:4d:bc:45:9b:
         75:4b:4b:28:22:ab:9a:31:dc:c4:8b:6f:a7:b0:de:30:99:07:
         8c:8d:93:3e:22:61:00:cf:1c:62:d9:ea:64:63:7a:5a:0f:cf:
         f3:d3:2f:5f:4b:23:9a:f9:9d:84:24:e3:4f:1b:6e:78:32:ad:
         40:05:89:f9:6e:d6:d1:15:21:cc:b1:d0:a0:24:9f:e6:5e:72:
         15:7b:a6:aa:f3:1b:db:8e:20:6b:fa:35:d3:62:63:4a:c1:41:
         9f:10:3a:44:44:1a:af:b6:80:5c:df:8d:3c:dd:b9:07:26:95:
         7e:34:a2:a0:5b:2b:40:f7:bb:68:1b:63:c4:ff:59:24:1e:f3:
         76:e8:51:bb:22:64:32:e8:9d:d1:ca:2f:ce:c5:ca:33:78:eb:
         81:17:b6:bf:43:5b:74:a6:72:d1:4c:87:1b:9e:3c:8c:f1:de:
         9b:1b:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:45:49 2026 by rpki-client