Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/989e586b-0747-3270-a033-41e803e851c5.roa
File:                     989e586b-0747-3270-a033-41e803e851c5.roa (raw, json)
Hash identifier:          KnyyY24GsQh6iODuhigvNC15IbdQ4PSXmgIq0B0URYQ=
Subject key identifier:   41:68:1E:DE:87:04:5C:62:F9:0D:E8:24:6E:E2:12:5F:BE:AC:D8:C0
Certificate issuer:       /CN=e51abfb2-ff55-4866-8f32-d2fc9346d303
Certificate serial:       010D0C9F4328584D83CA9E9F6F465DF3C7D5B780
Authority key identifier: 0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/989e586b-0747-3270-a033-41e803e851c5.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        208.78.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:9e:9f:6f:46:5d:f3:c7:d5:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e51abfb2-ff55-4866-8f32-d2fc9346d303
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=55de384a-79d6-45f0-a6e3-ffbd3851bc92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:13:5e:f3:2f:85:86:d3:80:47:36:db:0a:93:
                    15:a5:ba:30:17:01:24:4b:d9:71:25:8e:4a:93:de:
                    a7:4e:77:96:13:7d:e6:5e:33:ae:fe:aa:32:1a:47:
                    26:5d:7d:78:91:e0:b4:56:fc:02:2d:d5:2f:7c:42:
                    03:41:c6:ce:a4:51:aa:dc:03:86:31:c2:48:42:38:
                    64:47:4e:66:90:10:8c:e5:70:47:5b:73:0d:af:07:
                    f2:7a:04:f0:94:97:34:30:2f:ba:5f:e8:2b:f5:62:
                    b0:0d:37:d7:05:78:9e:7c:f7:79:5f:7c:6a:bb:0a:
                    b1:24:ee:19:87:0c:48:cf:c5:90:9b:7c:82:86:22:
                    79:5a:f9:60:4d:fd:7a:6d:e4:02:2d:52:52:6c:84:
                    7a:44:da:9f:56:5f:61:ce:31:96:03:ce:dd:4e:51:
                    0f:a0:60:e4:20:0f:2b:fb:89:f8:cf:5b:b5:70:d5:
                    ba:c1:4a:13:51:0f:20:c4:6d:cf:83:45:89:2b:7d:
                    fc:d3:94:b3:83:54:7a:6c:84:85:ad:51:e7:3b:d1:
                    34:07:b2:8c:82:05:aa:5c:a3:af:bf:fd:ef:b5:65:
                    a1:3a:1c:9a:eb:c3:ef:4d:95:2f:d0:ef:fc:a7:6b:
                    b8:12:fd:3c:04:91:23:f8:99:02:73:e7:6b:63:c0:
                    c1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:68:1E:DE:87:04:5C:62:F9:0D:E8:24:6E:E2:12:5F:BE:AC:D8:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/989e586b-0747-3270-a033-41e803e851c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:a1:19:e2:a6:d4:10:2f:35:85:13:af:90:91:76:8d:16:67:
         5e:5c:33:0f:e8:d8:6b:39:a2:53:f8:e5:7d:58:39:4a:5f:a1:
         03:59:94:d2:8f:4e:1f:e6:18:5b:af:46:66:d3:fc:e3:b7:fd:
         32:b4:b6:d9:ab:2f:9e:a1:c2:c0:29:aa:93:90:80:ca:f5:ed:
         f2:25:40:41:17:0c:f2:56:1e:26:23:f3:0e:92:03:e3:43:77:
         28:65:94:9c:7b:11:c3:b3:c8:54:d5:af:98:2c:43:5e:3e:8e:
         8f:4b:52:16:47:74:c1:af:7e:96:7b:62:16:a3:4c:db:63:27:
         a6:ec:97:57:a8:43:76:e5:f6:31:05:d2:97:53:12:5f:e8:d0:
         fc:c5:98:91:42:c3:d4:76:5e:22:5c:28:0a:a7:b2:7c:a9:47:
         18:7a:d1:e8:b2:d4:41:9d:98:6a:a7:6c:12:93:40:44:d4:5c:
         9e:cb:06:30:5b:bb:b2:21:b3:01:0e:f5:48:ef:a5:dd:d4:31:
         1c:63:9b:bb:79:2c:fc:ff:9a:f3:1b:95:1b:12:6b:aa:89:9c:
         2f:ab:ca:9e:96:5c:c1:c9:d8:6c:31:98:3b:d2:23:83:fe:08:
         27:d3:f0:41:8e:16:3d:40:f8:7c:d9:5e:20:64:0e:62:fb:b5:
         bf:30:f1:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Dyp6fb0Zd88fVt4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTUxYWJmYjItZmY1NS00ODY2LThmMzItZDJmYzkzNDZk
MzAzMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
NTVkZTM4NGEtNzlkNi00NWYwLWE2ZTMtZmZiZDM4NTFiYzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hNe8y+FhtOARzbbCpMVpbowFwEkS9lxJY5K
k96nTneWE33mXjOu/qoyGkcmXX14keC0VvwCLdUvfEIDQcbOpFGq3AOGMcJIQjhk
R05mkBCM5XBHW3MNrwfyegTwlJc0MC+6X+gr9WKwDTfXBXiefPd5X3xquwqxJO4Z
hwxIz8WQm3yChiJ5WvlgTf16beQCLVJSbIR6RNqfVl9hzjGWA87dTlEPoGDkIA8r
+4n4z1u1cNW6wUoTUQ8gxG3Pg0WJK33805Szg1R6bISFrVHnO9E0B7KMggWqXKOv
v/3vtWWhOhya68PvTZUv0O/8p2u4Ev08BJEj+JkCc+drY8DBewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEFoHt6HBFxi+Q3oJG7iEl++rNjAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNTFh
YmZiMi1mZjU1LTQ4NjYtOGYzMi1kMmZjOTM0NmQzMDMvOTg5ZTU4NmItMDc0Ny0z
MjcwLWEwMzMtNDFlODAzZTg1MWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTUxYWJmYjItZmY1NS00ODY2LThm
MzItZDJmYzkzNDZkMzAzL2U1MWFiZmIyLWZmNTUtNDg2Ni04ZjMyLWQyZmM5MzQ2
ZDMwMy5jcmwwHwYDVR0jBBgwFoAUDvT5JuL94JoF5JVDUqYmwxmh63QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lNTFhYmZiMi1mZjU1LTQ4NjYtOGYzMi1kMmZj
OTM0NmQzMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0E4HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD6hGeKm1BAvNYUTr5CRdo0WZ15cMw/o2Gs5olP45X1YOUpfoQNZlNKP
Th/mGFuvRmbT/OO3/TK0ttmrL56hwsApqpOQgMr17fIlQEEXDPJWHiYj8w6SA+ND
dyhllJx7EcOzyFTVr5gsQ14+jo9LUhZHdMGvfpZ7YhajTNtjJ6bsl1eoQ3bl9jEF
0pdTEl/o0PzFmJFCw9R2XiJcKAqnsnypRxh60eiy1EGdmGqnbBKTQETUXJ7LBjBb
u7IhswEO9Ujvpd3UMRxjm7t5LPz/mvMblRsSa6qJnC+ryp6WXMHJ2GwxmDvSI4P+
CCfT8EGOFj1A+HzZXiBkDmL7tb8w8ak=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:03 2026 by rpki-client