Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/9a5c2d4f-9a39-3617-b88b-12e0b4122816.roa
File:                     9a5c2d4f-9a39-3617-b88b-12e0b4122816.roa (raw, json)
Hash identifier:          fbKKrsq7vjQ71XH1VfSg8E6dSuc6dpzPnutEhgaWq4M=
Subject key identifier:   8D:81:05:9D:23:EF:1F:2A:C9:44:EC:DE:E4:29:16:94:4F:29:B1:F1
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F4328584D59EA78909110928F88DF6F80
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/9a5c2d4f-9a39-3617-b88b-12e0b4122816.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     2734
IP address blocks:        208.74.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:78:90:91:10:92:8f:88:df:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=5a1d251b-70df-44b4-8d64-cd92c279879a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3a:ee:10:53:66:98:a0:b4:56:67:04:6f:48:
                    5d:fd:6c:84:71:94:62:05:a9:e4:8c:a4:aa:58:98:
                    d5:50:35:5c:6f:ff:06:6a:46:dc:91:d1:65:f6:d6:
                    f5:e0:9c:87:b9:e6:c9:87:59:dd:69:2d:eb:85:2a:
                    13:f4:f4:32:f4:01:48:5b:7b:68:16:40:6c:d2:52:
                    54:6b:e7:58:6c:1d:72:23:9d:03:eb:02:da:3e:a9:
                    74:8e:29:8f:05:c9:69:d8:c7:7a:ed:f2:41:65:cd:
                    1f:05:51:98:36:58:19:dd:c7:13:68:ee:a7:a1:2f:
                    1b:3f:de:d4:47:f0:82:44:ac:4f:b8:42:78:2c:cd:
                    98:a7:dd:27:f2:cf:47:5e:94:1d:50:be:c8:a8:53:
                    a1:00:55:23:14:18:03:d2:48:f8:d7:49:e3:15:6b:
                    1d:72:c5:cf:aa:cd:85:60:4e:14:ab:61:45:9b:85:
                    bd:ec:43:ae:8c:42:f0:4b:9b:f7:84:9f:c3:55:2b:
                    55:b5:86:56:07:27:d2:76:a1:d0:ea:fa:e4:e4:ed:
                    8b:89:0c:30:15:aa:69:d5:5f:58:00:b1:fe:c8:35:
                    f9:bb:b7:69:19:de:15:53:83:47:87:6e:09:34:ad:
                    45:8f:af:40:40:e4:41:28:a1:42:0f:32:d3:6f:c0:
                    f4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:81:05:9D:23:EF:1F:2A:C9:44:EC:DE:E4:29:16:94:4F:29:B1:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/9a5c2d4f-9a39-3617-b88b-12e0b4122816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:23:23:a2:0a:cd:ab:51:ed:e5:0e:dd:f8:bc:79:f3:10:16:
         88:98:4a:9d:11:7a:6d:76:e9:15:cd:dd:1c:8f:f7:51:5f:25:
         cc:c6:92:c7:88:4a:c2:f7:a8:76:27:82:87:67:25:82:3c:e8:
         78:2b:e2:0e:a4:fc:8b:eb:48:78:d3:6e:ea:59:35:47:9e:ae:
         c9:2d:5b:40:b2:30:92:cc:90:56:d5:44:7e:30:99:10:d9:6f:
         78:70:f7:ed:48:91:63:3e:f7:31:c7:5c:f1:ae:a6:60:35:f3:
         d1:59:fc:c6:c6:26:e4:d5:50:db:c1:e8:13:76:11:f2:98:6d:
         ee:dd:19:4a:70:90:1d:aa:2b:f6:94:41:b9:95:c7:94:0c:3d:
         08:e4:6f:b7:dc:8e:b7:6b:a6:56:71:ad:e5:4d:08:5d:42:8d:
         45:aa:39:69:78:4a:b9:08:b9:d7:84:e5:af:e1:71:66:81:64:
         65:b7:f2:f2:36:b8:5e:3a:e3:94:2c:9c:de:49:c7:5f:fd:2c:
         5a:23:a5:3a:72:a7:a8:6b:9e:8b:31:4a:5a:cd:1e:83:8f:d0:
         2a:35:f7:82:73:93:42:6e:dc:dd:f5:23:7a:a8:c6:f0:52:b9:
         ab:a8:d1:9d:f1:45:59:9f:d8:e5:14:e4:70:ae:b6:4f:68:2f:
         8e:78:96:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:32:08 2026 by rpki-client