Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/5b4e2c95-60cb-3c35-9a1c-66dce773263e.roa
File:                     5b4e2c95-60cb-3c35-9a1c-66dce773263e.roa (raw, json)
Hash identifier:          D25Q9wRKbuvijP406A2bzwuSDjZe+qBByAmDndwwih4=
Subject key identifier:   A9:CD:23:B5:19:99:30:FA:B9:07:3D:73:B0:B8:CD:37:D3:03:18:DA
Certificate issuer:       /CN=8847881a-ccc0-4631-8384-a7d78db5864d
Certificate serial:       010D0C9F4328584EA7876404DECDFF0855A5D700
Authority key identifier: 65:0C:DD:D3:74:05:4D:57:AA:6E:30:A8:E0:12:B2:B4:A7:44:39:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/5b4e2c95-60cb-3c35-9a1c-66dce773263e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54182
IP address blocks:        208.78.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/8847881a-ccc0-4631-8384-a7d78db5864d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/8847881a-ccc0-4631-8384-a7d78db5864d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:64:04:de:cd:ff:08:55:a5:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8847881a-ccc0-4631-8384-a7d78db5864d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=25f0406b-a1bd-41ea-8638-6461d4371a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:37:e4:67:bb:35:1f:b9:3b:04:7e:82:33:89:
                    6f:2c:f8:cb:3a:39:ba:48:ad:77:ac:b3:95:8a:2e:
                    d3:03:d1:38:79:3f:a0:06:e5:3f:67:68:83:cd:51:
                    45:c3:93:6a:41:5a:d4:0a:bb:d4:e3:bc:da:57:94:
                    44:f6:c2:ec:7d:cd:e3:f9:b4:83:2f:28:8b:21:dd:
                    79:b2:68:b8:4f:cc:4c:1f:64:ce:b9:02:4e:cc:1a:
                    47:22:ba:4f:fb:3f:97:5a:77:e5:5b:a4:15:5c:52:
                    6c:7f:82:58:a6:7a:7e:0d:10:2c:94:d7:aa:ee:c6:
                    b8:68:c4:30:97:61:68:17:8e:78:94:a3:ab:df:db:
                    e7:63:1f:be:ae:7b:44:45:2e:5c:a6:ea:b2:bb:b6:
                    af:70:f0:22:16:ef:38:f9:48:c8:68:27:a4:d9:42:
                    98:92:47:d6:76:01:73:18:57:a8:4f:38:d1:0a:6b:
                    2d:54:44:51:89:8e:7e:81:53:89:ba:07:47:c9:bf:
                    a0:50:39:8d:cf:12:28:95:9c:4c:28:43:b0:fe:17:
                    08:e8:d0:71:2d:03:07:49:19:5a:fd:f2:b5:57:3d:
                    59:7f:e1:48:5c:08:00:00:17:77:4e:88:7a:a7:58:
                    f8:f5:f6:64:24:09:87:b7:b4:15:3c:cc:93:b9:b1:
                    81:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CD:23:B5:19:99:30:FA:B9:07:3D:73:B0:B8:CD:37:D3:03:18:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/5b4e2c95-60cb-3c35-9a1c-66dce773263e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/8847881a-ccc0-4631-8384-a7d78db5864d.crl

            X509v3 Authority Key Identifier:
                keyid:65:0C:DD:D3:74:05:4D:57:AA:6E:30:A8:E0:12:B2:B4:A7:44:39:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b5:92:d8:e3:95:21:41:cd:e2:c6:1f:ba:22:bb:32:3c:ea:
         f5:c5:59:97:14:8d:7b:62:06:5e:5d:55:77:c5:c6:65:18:ba:
         df:d9:d6:52:46:7f:32:1e:aa:ea:3a:ca:b4:cf:2e:f2:ad:d9:
         00:07:6d:98:c8:b8:9e:ea:99:38:c6:80:59:99:21:5c:5b:e5:
         dd:34:94:ea:ad:7b:c9:4a:48:6a:5f:2d:1e:f4:50:2d:21:ea:
         37:da:cf:3f:64:5c:9a:9e:54:1f:35:bb:8f:42:07:74:94:ef:
         73:4c:0c:f3:e9:ce:37:ec:bc:0a:14:f3:b6:95:d0:5a:b5:8c:
         be:01:e6:6d:f2:63:c4:6c:89:82:1a:8b:f3:4e:ad:ed:14:7e:
         e0:c9:92:86:8e:8b:6b:06:41:37:ca:e4:cd:f8:10:ec:c9:14:
         06:e1:64:38:d2:42:44:49:93:cc:b4:50:25:a1:f8:da:55:66:
         d3:5f:a4:f1:ca:2a:cf:ad:85:28:54:b8:48:97:87:dd:ec:c3:
         92:d3:a5:be:cc:2d:ff:6c:59:08:35:8e:8a:31:80:c7:1a:bb:
         bf:b7:f7:86:da:a2:d7:b3:42:d0:5d:75:d8:b1:3b:cd:b1:03:
         6d:b5:ec:2d:df:7e:79:a0:64:92:e1:68:cf:60:24:8b:93:97:
         88:3f:99:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:49:28 2026 by rpki-client