Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7395442f-a0fe-3451-b692-69afd3407f29.roa
File:                     7395442f-a0fe-3451-b692-69afd3407f29.roa (raw, json)
Hash identifier:          3C+aDE/LtRvSCZEvQdrm7JD+omEj9/jHR6piX2Xc9sM=
Subject key identifier:   B5:69:C0:36:9E:56:4C:3B:35:BB:90:B7:B0:2D:39:7C:81:55:6B:8B
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F4328584D75D54166AE2B596E1919AC00
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7395442f-a0fe-3451-b692-69afd3407f29.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     22925
IP address blocks:        168.235.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:41:66:ae:2b:59:6e:19:19:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=95e12b84-08f0-4552-98ef-c1cabb4761b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f4:5c:16:f4:e9:95:21:72:2f:33:23:74:9c:
                    e9:10:87:d1:67:2c:cc:92:d0:d5:72:a2:86:3f:11:
                    5c:af:87:31:89:04:c1:26:ef:52:4d:de:c1:ac:3b:
                    98:f9:3e:d9:33:59:58:14:e4:f6:6a:31:bd:34:39:
                    f5:75:47:80:36:f9:41:63:56:f3:bc:b4:87:75:a4:
                    d2:06:50:5a:3e:b2:f6:b6:cd:ec:68:de:31:78:41:
                    2f:8c:f4:17:cc:9b:6f:19:d7:71:a7:32:9e:fe:26:
                    26:40:d6:11:d0:b0:22:7b:25:78:20:4c:12:fe:f7:
                    22:09:92:4e:72:64:b4:24:0a:7f:78:32:41:0c:5b:
                    f6:f2:56:4d:06:df:01:7a:10:60:87:60:43:df:0b:
                    18:62:e8:88:4c:76:a7:17:44:fc:df:b8:06:b3:53:
                    8c:1d:50:51:5c:0a:d9:c5:ad:4d:2d:2e:7b:d7:2f:
                    06:b0:c1:20:8d:bb:6c:87:d2:62:cd:70:11:24:3c:
                    48:80:93:7d:0d:7c:1a:3c:fb:be:8a:b7:03:63:15:
                    b4:8a:96:89:db:50:fa:06:e6:71:10:eb:40:68:fa:
                    26:2f:a9:e9:d2:f4:7c:10:74:7b:83:78:ff:b7:8f:
                    2b:e8:e5:1b:42:0e:48:d6:80:4c:d3:0e:d3:fa:4e:
                    1d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:69:C0:36:9E:56:4C:3B:35:BB:90:B7:B0:2D:39:7C:81:55:6B:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7395442f-a0fe-3451-b692-69afd3407f29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.235.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:39:a4:8b:56:bd:46:dc:bd:3b:4a:ef:1c:29:67:0d:b8:48:
         f8:d1:4a:31:6c:03:52:74:e2:e7:72:f8:13:35:ed:9e:ec:d5:
         59:65:11:e9:e5:e9:a9:6a:03:03:a6:6b:d8:46:9f:d1:d7:e2:
         60:93:a5:91:03:48:9b:d9:51:cc:7b:48:3c:65:8e:ab:aa:42:
         da:57:2a:37:a8:d7:5e:83:ea:7a:69:8b:a2:15:d2:75:19:54:
         ab:29:11:ca:48:3b:73:be:7a:47:16:ea:08:43:89:c0:58:a9:
         e4:05:6b:6d:65:b6:89:eb:3f:26:e8:c8:1f:7f:ed:c2:f8:33:
         b4:e9:e6:9d:9d:98:48:68:01:d2:89:88:2b:8e:b0:07:9b:87:
         6b:ce:ae:d2:df:d5:75:b6:9c:80:80:61:f7:1a:3f:02:77:c5:
         59:2d:42:36:b3:9c:f6:2f:a9:bf:d0:76:cb:fb:33:10:70:f6:
         7e:98:97:0b:6c:59:6a:0c:e6:f3:e0:51:78:ab:d3:cd:1f:70:
         3c:c2:e5:cd:8e:7c:50:47:fc:b5:69:5e:c0:d9:6d:c1:de:1f:
         26:3f:cb:80:1b:f1:c0:ab:b2:ab:54:76:8f:cc:42:68:91:65:
         f7:e4:4e:b6:af:2f:3f:13:40:ff:39:dd:26:c1:07:6f:d5:a2:
         90:6d:7d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:23:06 2026 by rpki-client