Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/8514b79f-a9a8-35b6-8428-b909a675a2f7.roa
File:                     8514b79f-a9a8-35b6-8428-b909a675a2f7.roa (raw, json)
Hash identifier:          kHINOr5FEFaQVfDXfDkbAD1DjR7mYm7cPSzz6dI8bO0=
Subject key identifier:   FE:35:A4:EF:B4:9A:B5:4E:65:FF:6C:49:08:8E:08:3D:D5:C2:77:67
Certificate issuer:       /CN=e51abfb2-ff55-4866-8f32-d2fc9346d303
Certificate serial:       010D0C9F4328584D83CA9B395541B9A348818F80
Authority key identifier: 0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/8514b79f-a9a8-35b6-8428-b909a675a2f7.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        208.78.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:9b:39:55:41:b9:a3:48:81:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e51abfb2-ff55-4866-8f32-d2fc9346d303
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=266776ec-c9b7-422c-b69d-8390881faf2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2d:20:66:78:d0:b9:c8:3c:b1:68:c5:1f:f4:
                    fc:c7:5a:b7:ae:2d:3a:25:18:7a:90:75:fe:cb:f7:
                    94:b2:fb:6b:51:69:14:4b:d8:d7:94:0d:b4:e1:c2:
                    7b:c3:79:5d:ac:8e:1d:b3:0c:6c:b0:b3:f0:7b:63:
                    f5:1a:e0:62:90:20:f1:2c:15:d0:cc:fc:54:af:8a:
                    bc:0e:9e:ae:4e:f1:2a:5c:d7:6f:be:e8:04:85:b5:
                    59:9e:82:19:c4:7c:76:65:f0:7f:2b:e7:de:d5:9a:
                    81:bd:d2:0a:4e:ab:d6:39:81:c7:eb:42:ec:b6:d6:
                    8e:30:3b:1f:89:58:ea:1c:1e:9a:77:fc:c1:04:98:
                    29:b7:a2:bb:22:6b:f2:73:e1:e0:42:c0:37:35:c0:
                    e5:9a:be:b6:d3:c2:bb:b6:1d:aa:71:08:75:c8:80:
                    c8:82:15:9b:5e:ff:e4:2e:7d:cd:2f:21:88:96:10:
                    d5:a8:72:3b:3b:c4:ec:09:47:18:cc:e2:63:87:71:
                    5f:d4:35:00:62:69:dc:9e:55:6c:d4:a3:23:d6:fd:
                    86:5c:b7:25:56:9c:42:94:93:61:9e:2d:20:3f:35:
                    79:18:a1:aa:29:64:a5:8f:4b:1f:31:c3:f2:a9:84:
                    f6:a1:6e:46:51:62:19:50:eb:95:8e:5a:1c:75:f8:
                    a7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:35:A4:EF:B4:9A:B5:4E:65:FF:6C:49:08:8E:08:3D:D5:C2:77:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/8514b79f-a9a8-35b6-8428-b909a675a2f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:87:81:16:3a:db:c6:34:3b:0e:9a:58:47:00:d9:dc:cf:0e:
         53:9c:03:04:b3:8c:e5:16:da:f1:43:5c:82:6a:c7:1a:fb:a9:
         bc:ea:97:4c:8a:67:a5:40:e7:19:2b:6e:f3:66:f1:52:3a:2e:
         9b:2d:76:75:ba:28:9b:49:3f:20:6e:7e:b9:ed:a7:df:57:51:
         a1:f9:42:f7:0b:c9:bd:74:49:7a:e5:e2:83:e3:2e:d0:fd:df:
         c3:e7:fc:f5:29:30:a5:a2:76:00:04:06:c0:4d:18:b1:37:0c:
         9b:d7:56:1c:0f:8a:65:16:fb:bc:ed:2d:f0:6e:a3:ab:89:2b:
         61:cf:f3:a7:e8:e6:c9:cf:89:f2:83:2c:8f:14:5a:1b:8d:f5:
         73:fe:e4:3e:de:e5:2e:fc:58:ea:cc:18:83:66:f8:45:29:b9:
         74:27:5d:0f:29:01:ef:b6:d9:6a:2e:f9:e7:ca:5c:5b:e8:54:
         9e:f2:80:08:52:15:2d:ca:3e:d8:78:66:78:8b:09:a0:34:71:
         bb:76:97:cc:4d:a6:0a:ea:91:72:b7:d0:2a:a9:c3:76:3e:b4:
         84:72:36:3a:53:f5:75:e7:19:e3:38:2d:97:ba:c2:1a:56:3a:
         a7:c9:d0:5a:ab:af:37:ae:8b:71:ca:f1:a1:6c:4a:24:2f:73:
         c6:74:fe:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:42:10 2026 by rpki-client