Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/34058185-377f-354b-88a7-3cbad9e0ed0a.roa
File:                     34058185-377f-354b-88a7-3cbad9e0ed0a.roa (raw, json)
Hash identifier:          Zk55R4n7HDhpEcFE9aMjxiygjRRxGA3roPZT/ht08VM=
Subject key identifier:   DF:14:4E:D4:A0:3F:1A:CF:DF:BF:1E:0B:86:DC:3E:EF:A8:74:C1:5C
Certificate issuer:       /CN=e51abfb2-ff55-4866-8f32-d2fc9346d303
Certificate serial:       010D0C9F4328584CA32C54A1D7D539D8AE3EF980
Authority key identifier: 0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/34058185-377f-354b-88a7-3cbad9e0ed0a.roa
Signing time:             Sun 25 Jan 2026 02:00:31 +0000
ROA not before:           Sun 25 Jan 2026 02:00:31 +0000
ROA not after:            Sat 25 Apr 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        208.78.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a3:2c:54:a1:d7:d5:39:d8:ae:3e:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e51abfb2-ff55-4866-8f32-d2fc9346d303
        Validity
            Not Before: Jan 25 02:00:31 2026 GMT
            Not After : Apr 25 01:00:31 2026 GMT
        Subject: CN=02d587fc-7f24-4122-a3e4-840224342e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:66:4d:5d:10:0e:4e:d4:df:d6:07:ce:24:05:
                    f4:a9:d6:a4:1d:b5:36:ab:11:8d:12:54:fe:a2:e0:
                    1b:52:f5:c6:86:de:a1:75:49:2b:61:96:e7:32:67:
                    f2:ae:bf:58:54:5d:26:e8:34:35:94:f4:76:8f:b0:
                    d3:84:28:09:ca:32:f6:02:ee:a5:fd:f9:93:73:a5:
                    03:7f:4c:ac:a9:57:4b:37:c2:ff:f1:aa:a2:66:90:
                    49:ea:f4:5b:f1:69:cc:a0:82:42:22:04:42:c8:c9:
                    40:e8:cf:56:59:62:0c:69:70:eb:16:6c:e2:95:c0:
                    89:23:83:b7:d3:dd:fc:6d:ee:7f:15:19:2f:da:95:
                    55:f4:5a:66:d4:ba:4b:81:55:ce:72:95:38:17:46:
                    e6:39:c7:7c:f3:a8:dc:05:b5:ae:f2:c0:47:0e:0a:
                    29:7b:b3:ca:0c:34:03:3a:23:95:33:61:4f:9a:90:
                    be:bf:a6:c6:01:a9:82:e0:43:dc:83:52:48:f7:f4:
                    18:31:3c:d6:84:6c:91:43:7a:77:70:7a:03:9a:3e:
                    16:31:d2:e4:60:5e:bf:86:22:63:a8:b7:ec:b9:8d:
                    2f:b7:56:4b:c6:39:7e:5e:74:f3:cb:c7:02:30:76:
                    8e:35:f2:51:d3:8e:27:78:3c:10:4a:00:ac:8a:bb:
                    85:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:14:4E:D4:A0:3F:1A:CF:DF:BF:1E:0B:86:DC:3E:EF:A8:74:C1:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/34058185-377f-354b-88a7-3cbad9e0ed0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:68:6e:c1:ac:51:8c:b9:f6:da:7e:d7:42:b2:9d:0e:38:17:
         83:76:53:83:57:d8:dc:00:88:b5:fd:35:20:71:ed:2e:42:fd:
         d3:39:13:3d:c5:b6:e0:38:21:90:65:26:70:28:fd:83:24:d3:
         46:99:7f:ef:e2:f6:f3:be:b4:93:95:a8:89:8e:15:c3:42:86:
         89:17:95:77:30:be:af:18:61:b4:87:e1:a4:cb:45:34:fb:06:
         ca:dd:4b:d6:d0:ba:04:e7:94:7d:30:72:f9:08:48:33:90:29:
         20:60:ec:c7:46:14:4c:af:9b:09:84:58:4c:e9:f1:f1:95:0e:
         ba:a4:3e:9a:3f:f2:af:1a:c4:6f:e1:ca:3e:02:22:48:88:33:
         e3:55:bd:b1:07:04:e1:51:bc:e2:69:12:4d:f9:0c:b9:a3:7e:
         7f:e2:ca:d0:7f:48:fa:6a:9c:25:ed:93:b9:03:a9:01:0a:76:
         54:6e:40:94:b6:87:b9:33:1c:a0:d4:ed:eb:e4:ce:f2:ea:c1:
         63:86:f2:a1:19:f6:15:e7:f2:f1:b1:42:63:b6:3f:7f:aa:9b:
         91:48:b1:07:95:e5:9b:8e:44:73:1d:72:cf:03:6f:65:ba:ff:
         fc:11:76:72:c9:91:06:cb:d9:3e:9b:fe:8a:fc:89:1f:f0:58:
         cd:05:e5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:48 2026 by rpki-client