Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/20407699-399d-3a34-9a0a-cccc3acac035.roa
File:                     20407699-399d-3a34-9a0a-cccc3acac035.roa (raw, json)
Hash identifier:          NjhCBSutTzxQruIwgF0zHzB2QhKhcX093zAGR2wV2/0=
Subject key identifier:   59:99:05:DA:6D:8C:65:3F:57:4B:DA:58:E2:6D:22:6F:A7:07:31:BD
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584CF5878F3D4E0CE9EE9F00F680
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/20407699-399d-3a34-9a0a-cccc3acac035.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     25804
IP address blocks:        208.69.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:8f:3d:4e:0c:e9:ee:9f:00:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=fbe17f09-149f-48d6-a6a0-03094878b619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:1c:63:cc:1f:25:10:ff:93:da:e0:02:46:
                    07:ef:6e:76:c2:10:56:f4:51:b3:89:33:cf:89:42:
                    ac:f7:5a:7a:bb:c5:7b:7f:84:ac:c1:5a:0e:4c:70:
                    33:7b:81:7a:71:c4:b8:53:0b:2f:0b:a0:21:9e:71:
                    d5:da:f9:40:69:b8:d9:98:9c:e0:02:bc:ba:bb:59:
                    6e:c4:5c:8c:da:51:b5:50:fb:07:e5:dc:97:39:c8:
                    1c:38:45:da:f5:6f:48:64:6a:5d:9c:71:a1:b8:84:
                    82:9a:1b:33:c7:0e:31:4d:82:70:25:92:37:5e:15:
                    ad:4d:ae:24:7d:4e:79:c2:ac:72:ab:74:a9:1e:83:
                    df:1d:98:3a:f3:d0:f3:ab:83:75:77:5a:1b:43:01:
                    31:a5:40:10:55:ac:d9:d4:8b:9c:e5:b3:8f:46:28:
                    57:4a:aa:73:b0:1c:cb:f8:05:41:93:7c:d9:7c:1f:
                    56:3b:19:9c:dc:33:14:99:14:05:a0:4f:90:00:3d:
                    58:bb:15:57:48:9a:3e:3c:70:71:d6:85:7b:df:a8:
                    05:78:33:d7:de:7c:0e:8a:e3:13:6e:74:bb:85:98:
                    22:43:a7:79:40:c2:2f:cf:a7:75:40:9e:99:12:66:
                    20:51:6a:6d:3d:a9:d0:c7:86:de:b4:f4:5d:14:8c:
                    e6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:99:05:DA:6D:8C:65:3F:57:4B:DA:58:E2:6D:22:6F:A7:07:31:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/20407699-399d-3a34-9a0a-cccc3acac035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.69.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:19:94:9b:77:e2:3f:b7:72:e4:0f:0b:41:4e:9d:12:0e:75:
         bd:15:21:8d:6a:e6:f8:40:2a:50:02:ea:c2:15:35:5a:f2:bd:
         c0:df:76:c9:4e:e3:51:20:a9:6a:f0:b6:91:f8:cf:3c:a4:3c:
         5b:e0:59:be:5b:15:37:0b:5d:5b:3b:0b:5e:c6:e3:de:c9:c8:
         b7:b4:0a:77:fa:33:18:a8:0e:6f:a8:28:34:af:a5:71:42:21:
         b7:6d:6b:89:64:a5:67:f0:cb:ec:0d:08:55:f7:0f:b4:26:55:
         80:9f:1e:b7:a7:d8:32:29:d2:2a:09:42:30:ed:d4:33:da:9e:
         a8:b2:4e:46:54:73:95:d6:54:ff:b4:ac:1d:cc:2d:48:bc:4b:
         e0:49:d7:ff:cd:c4:1c:51:cb:96:f2:14:50:cb:db:9c:50:1b:
         e6:3f:01:8e:f6:24:99:60:93:0d:3a:09:b3:e7:a4:99:86:84:
         8c:90:af:6a:64:5f:71:5c:34:fc:16:0c:8d:95:f2:3c:7e:21:
         a6:43:ec:a7:45:3d:1d:ab:23:95:41:54:6e:ea:bd:61:ae:0b:
         ef:c2:60:7c:82:08:b7:e3:24:25:5f:48:5b:59:2e:0d:d7:22:
         d6:54:c0:2b:6e:a2:a3:49:0c:27:a1:22:44:af:97:3f:d7:c1:
         82:d4:3e:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h489Tgzp7p8A9oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw
MDdjMB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk
ZmJlMTdmMDktMTQ5Zi00OGQ2LWE2YTAtMDMwOTQ4NzhiNjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6EcY8wfJRD/k9rgAkYH7252whBW9FGziTPP
iUKs91p6u8V7f4SswVoOTHAze4F6ccS4UwsvC6AhnnHV2vlAabjZmJzgAry6u1lu
xFyM2lG1UPsH5dyXOcgcOEXa9W9IZGpdnHGhuISCmhszxw4xTYJwJZI3XhWtTa4k
fU55wqxyq3SpHoPfHZg689Dzq4N1d1obQwExpUAQVazZ1Iuc5bOPRihXSqpzsBzL
+AVBk3zZfB9WOxmc3DMUmRQFoE+QAD1YuxVXSJo+PHBx1oV736gFeDPX3nwOiuMT
bnS7hZgiQ6d5QMIvz6d1QJ6ZEmYgUWptPanQx4betPRdFIzmYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFmZBdptjGU/V0vaWOJtIm+nBzG9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2
OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvMjA0MDc2OTktMzk5ZC0z
YTM0LTlhMGEtY2NjYzNhY2FjMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk
MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk
MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0
ZjFmZDAwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EW0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADAZlJt34j+3cuQPC0FOnRIOdb0VIY1q5vhAKlAC6sIVNVryvcDfdslO
41EgqWrwtpH4zzykPFvgWb5bFTcLXVs7C17G497JyLe0Cnf6MxioDm+oKDSvpXFC
Ibdta4lkpWfwy+wNCFX3D7QmVYCfHren2DIp0ioJQjDt1DPanqiyTkZUc5XWVP+0
rB3MLUi8S+BJ1//NxBxRy5byFFDL25xQG+Y/AY72JJlgkw06CbPnpJmGhIyQr2pk
X3FcNPwWDI2V8jx+IaZD7KdFPR2rI5VBVG7qvWGuC+/CYHyCCLfjJCVfSFtZLg3X
ItZUwCtuoqNJDCehIkSvlz/XwYLUPiU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:52:02 2026 by rpki-client