Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/78d04205-2b1b-3a89-8a6b-8efaafbd4f4f.roa
File:                     78d04205-2b1b-3a89-8a6b-8efaafbd4f4f.roa (raw, json)
Hash identifier:          fp4kC1y1QVmj7IsFfZFPOSiufdX0FDiASX4mxOEMKck=
Subject key identifier:   87:56:3B:CB:B8:57:84:FA:9E:AD:C2:7A:F9:34:D3:F3:35:B1:29:7F
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584DF4DB6247C2A5DFD5B98C9800
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/78d04205-2b1b-3a89-8a6b-8efaafbd4f4f.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     19886
IP address blocks:        171.162.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:62:47:c2:a5:df:d5:b9:8c:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=57a29e1d-74b4-407d-bb4a-9aee58d82037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e7:de:07:78:12:b8:a0:09:38:4a:33:84:fc:
                    11:f4:c9:ce:3a:dd:10:ef:18:e3:d0:26:b7:7e:8d:
                    0e:93:3a:39:ac:8d:cb:a5:66:67:a8:85:66:16:21:
                    98:3c:05:fb:21:ba:17:03:e2:fc:e6:33:ec:d8:d3:
                    f2:66:40:77:b8:7f:e4:84:d6:33:66:d9:f1:74:5f:
                    42:57:8d:94:14:1e:4a:80:5e:78:5a:79:8c:d4:c0:
                    b6:f4:6b:96:df:5d:54:f2:c9:03:1b:66:15:bf:a8:
                    93:b2:25:c6:75:7a:db:c6:eb:c0:80:eb:52:02:0e:
                    c5:d5:09:1d:4c:b1:5f:79:c7:17:00:ee:25:df:28:
                    8f:e1:8a:aa:eb:6f:a1:cd:9e:83:59:b3:53:f5:e0:
                    26:ef:a7:aa:51:8c:d6:c1:31:5f:47:ef:4b:f8:f3:
                    ca:d4:b6:5b:9f:8f:9a:41:f1:89:05:44:67:40:9c:
                    4e:00:d4:cd:0c:5f:50:67:51:a6:3b:43:50:8b:49:
                    2f:4a:ab:ae:9a:ca:54:9d:46:c8:c1:84:a7:49:ab:
                    52:7a:82:66:20:d3:48:c7:23:1c:cd:0f:6e:f1:2c:
                    6c:c4:06:83:59:c1:04:6e:99:60:69:55:5a:fc:0e:
                    9c:a0:e5:5d:16:ad:bd:50:81:9b:9a:f2:7c:74:4b:
                    38:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:56:3B:CB:B8:57:84:FA:9E:AD:C2:7A:F9:34:D3:F3:35:B1:29:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/78d04205-2b1b-3a89-8a6b-8efaafbd4f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ac:c0:0b:fa:2d:47:5c:e6:29:33:10:44:80:91:9f:2f:74:
         09:ac:c2:1a:69:06:71:55:de:f9:0c:f0:c1:03:5b:bb:fd:a4:
         75:42:c0:19:fc:68:77:aa:c0:05:1d:e0:55:d3:36:43:9e:e9:
         ae:e5:8a:51:fe:f7:4b:c2:10:57:b5:6b:84:be:79:01:81:d3:
         e3:53:3a:fb:f7:d5:4c:57:ea:a3:84:35:7d:0f:86:c2:07:ba:
         d6:da:9d:9d:51:88:9b:32:f6:a6:3f:ab:a0:66:57:56:e5:79:
         a5:08:93:16:2e:7c:de:2b:47:48:57:64:a0:79:f8:37:04:61:
         49:01:e7:ef:bd:c4:88:a2:91:81:52:05:6d:2d:d7:d1:68:94:
         ab:58:6b:00:ab:e9:07:44:73:dc:b5:11:b4:ae:ef:c9:43:2c:
         03:12:54:df:59:a5:44:07:7a:5b:91:0a:44:a3:db:87:b3:f9:
         51:f5:7f:19:95:20:31:72:88:40:84:ff:67:00:0f:ee:36:c0:
         eb:6f:23:37:0c:0f:5a:8a:cd:18:cd:fa:23:38:af:52:80:81:
         df:73:ca:c7:8e:85:58:f9:a8:b4:2b:ca:2c:e3:b2:c7:a6:5e:
         0f:37:b8:9d:32:89:cf:cc:20:38:05:9d:56:d2:09:cc:ec:97:
         7c:5d:f9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:57:06 2026 by rpki-client