Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/c2c82089-3ecf-381a-ad02-492f2562fe40.roa
File:                     c2c82089-3ecf-381a-ad02-492f2562fe40.roa (raw, json)
Hash identifier:          nlhOD2Dwa3AeXbSAIDbOjN5lvD5JHpBL2jwgIhxbsM8=
Subject key identifier:   CA:BF:86:F5:FA:69:7F:C4:B2:F6:5F:75:D3:5E:A7:6A:67:87:72:E7
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584BB88D11DEA4062066FCC6C360
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/c2c82089-3ecf-381a-ad02-492f2562fe40.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     23059
IP address blocks:        208.69.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:11:de:a4:06:20:66:fc:c6:c3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=387911d1-086c-42ca-b18d-7c34de5f1273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:29:ef:16:6e:6b:38:d9:b1:3d:70:69:63:2f:
                    46:3a:c2:21:ff:bc:aa:f5:c7:96:1d:03:c4:a3:a7:
                    09:57:b0:3f:5f:75:1a:03:1d:9c:f0:9c:ce:ca:19:
                    fe:1f:35:cb:f4:c3:4b:3d:c1:80:48:2f:ac:ee:c6:
                    13:97:d3:1c:db:5e:74:38:ee:5a:7d:d8:02:3b:c1:
                    d9:5b:51:58:80:fc:dc:f1:08:69:91:db:d5:a8:97:
                    49:1b:53:4e:70:67:9b:c9:84:59:58:55:b7:d3:ac:
                    fe:be:68:34:94:5d:b4:3e:89:71:66:84:d1:89:71:
                    02:b9:5d:01:7a:e1:84:b8:98:d0:a5:3f:ab:02:1e:
                    83:e8:bf:63:6d:e6:50:3d:64:7d:1f:16:51:78:45:
                    06:6b:ab:1a:1d:33:d9:d1:3b:c6:09:48:93:83:b0:
                    37:8c:fa:14:7d:61:9a:95:42:7d:e9:d8:7e:8c:14:
                    d9:41:2a:1d:c0:d7:d0:00:e8:4c:a6:74:53:53:84:
                    af:22:39:7e:21:4d:24:68:15:e4:24:59:b9:9e:56:
                    bc:27:ab:3d:7f:5f:23:3f:eb:a9:d6:99:2b:df:ff:
                    9e:7b:af:0b:07:1c:74:f1:40:03:af:de:5e:a4:44:
                    85:a0:03:7c:cc:1a:fc:78:a6:fb:9d:42:66:57:9b:
                    10:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BF:86:F5:FA:69:7F:C4:B2:F6:5F:75:D3:5E:A7:6A:67:87:72:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/c2c82089-3ecf-381a-ad02-492f2562fe40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.69.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:78:ed:b0:a8:a1:8b:78:07:35:c0:2c:55:28:e4:b7:2b:64:
         a1:d9:94:6e:e1:38:92:9f:ab:fb:d1:1b:80:0a:4e:89:30:b6:
         a3:c4:08:d0:6e:5a:2a:74:3a:06:df:c9:74:e3:9e:50:ac:62:
         80:37:f0:7a:14:24:94:70:c8:80:cd:44:b6:de:2b:09:36:48:
         21:89:63:62:60:32:f5:d7:fc:f7:43:93:79:fd:d9:c1:e5:51:
         aa:3a:d8:41:64:e0:30:4d:39:a8:d4:1a:a8:d5:69:38:0c:43:
         71:a6:95:47:6a:b1:1a:4f:29:d5:cc:74:fe:b2:09:c8:d3:67:
         72:c5:69:2c:ef:7a:87:b1:28:95:bf:40:c8:8e:96:60:5d:3f:
         e4:87:48:15:9b:be:b3:f4:58:ef:09:85:4e:64:ff:e3:6b:97:
         7f:70:1f:61:be:7a:45:5e:a8:02:a0:08:f8:99:6d:c4:f3:85:
         83:4b:d3:de:fe:cd:4d:f7:ef:1d:d1:54:b7:e0:35:c8:d4:10:
         0f:03:96:0e:d3:b2:90:0c:68:81:8d:d1:95:a3:35:48:24:e4:
         5f:9c:68:ad:49:57:e2:79:7d:f3:ea:31:ef:fb:a6:3d:b4:6f:
         a2:9a:fe:45:e5:e3:75:0d:a4:7c:97:c9:06:18:c0:9f:5c:47:
         96:9a:e2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:37:19 2025 by rpki-client