Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/c78bccb7-aa67-36b0-b486-2629fba09248.roa
File:                     c78bccb7-aa67-36b0-b486-2629fba09248.roa (raw, json)
Hash identifier:          9uVM/Q0l1HAxWXCOYah8NgOy9Ui6htnwnvoN4NCZn98=
Subject key identifier:   55:E0:73:D8:36:58:5A:47:71:0D:B7:1C:97:20:C5:A9:59:09:80:01
Certificate issuer:       /CN=cf583966-1f17-4c26-a82b-e8e2d76d7ca5
Certificate serial:       010D0C9F4328584F2D87C6DDD62B0ED24A75A400
Authority key identifier: 77:BD:09:53:35:71:A8:33:FB:8D:E4:F3:37:D8:F2:0B:72:3C:0C:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/c78bccb7-aa67-36b0-b486-2629fba09248.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        206.108.255.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:c6:dd:d6:2b:0e:d2:4a:75:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf583966-1f17-4c26-a82b-e8e2d76d7ca5
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=543c7876-0f91-433a-82da-8e1d2ee34787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d5:50:67:95:f7:9f:31:73:14:24:a8:c9:83:
                    6b:c8:eb:4c:a5:11:dd:a5:b2:f4:c5:30:8b:75:5f:
                    35:1f:b6:f1:a6:15:57:4b:89:ba:e6:6c:18:eb:b7:
                    57:f1:d8:fe:c0:08:ce:45:cd:53:46:de:5c:da:ef:
                    37:ea:45:b3:a4:0c:1a:67:2b:54:97:6c:04:10:7a:
                    6d:f3:2a:dd:fc:5f:89:52:c4:ac:a3:ff:33:46:ed:
                    f2:13:ba:a5:47:c5:7e:72:4d:01:d3:ad:25:1f:7a:
                    a8:49:86:ee:8b:98:7e:0c:f2:39:fa:48:33:79:8e:
                    58:8e:1f:56:94:85:2a:83:e4:c3:6d:c5:f8:4e:80:
                    92:e2:65:f4:7a:a5:51:bd:ab:8f:d6:5a:96:c8:b8:
                    00:f3:73:32:a4:20:19:7b:df:98:79:44:1d:eb:3d:
                    41:d6:ff:c0:0f:41:e2:81:6d:1a:5a:f3:fd:bf:a1:
                    0a:09:fb:79:d4:5e:94:49:d4:80:e5:fa:fa:ab:bc:
                    1c:8e:11:e9:9d:bd:7e:0c:5f:7b:96:a5:86:8b:ca:
                    82:1d:23:26:c8:ad:70:7d:60:bb:35:53:11:bf:42:
                    f7:73:0d:4a:bd:a8:dc:7a:5f:05:e7:45:67:63:9b:
                    0a:b1:11:9c:34:20:ad:52:34:c3:25:a7:86:5e:dc:
                    3b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E0:73:D8:36:58:5A:47:71:0D:B7:1C:97:20:C5:A9:59:09:80:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/c78bccb7-aa67-36b0-b486-2629fba09248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.crl

            X509v3 Authority Key Identifier:
                keyid:77:BD:09:53:35:71:A8:33:FB:8D:E4:F3:37:D8:F2:0B:72:3C:0C:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf583966-1f17-4c26-a82b-e8e2d76d7ca5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.108.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c3:c1:e7:26:a7:33:40:01:ee:75:7b:03:50:06:91:8c:dd:
         87:91:a9:16:58:24:20:ca:40:04:06:9f:09:29:7a:e6:b4:d0:
         b6:b6:ad:b0:44:f0:37:9b:f2:5d:18:74:2f:96:b1:31:bf:c4:
         66:41:1c:44:e9:da:b0:c7:dd:75:96:84:74:03:3e:fc:b5:85:
         42:d7:70:ff:1a:9e:2f:6d:4f:e1:65:c7:dd:c7:95:d8:67:40:
         18:99:6c:62:47:6b:b0:12:6b:a6:2b:27:58:e3:13:55:4c:5f:
         0a:a0:3c:8d:75:9a:8e:0e:37:45:89:ac:dc:c7:57:53:f4:30:
         9d:1e:e1:f0:40:72:7b:d5:c2:07:e4:41:ef:00:81:89:7e:65:
         c8:33:b4:7f:18:b5:e1:8c:66:e7:fb:40:6b:65:06:4f:51:62:
         8e:88:1f:57:bf:1e:04:41:d6:93:a5:5d:29:5d:7e:47:5d:e5:
         ce:63:f3:55:2a:9f:63:47:ee:1c:ca:7f:1f:2c:7c:e8:2e:fa:
         0a:87:81:8b:6b:47:4b:a7:f9:25:a3:29:c0:ac:2e:94:10:e3:
         d5:cb:13:37:de:85:f6:34:25:42:95:89:27:98:43:51:a9:6d:
         67:12:9d:7d:62:5d:1a:14:96:1c:c3:9b:5d:ca:72:82:5b:1a:
         3d:a2:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:42:23 2026 by rpki-client