Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81721768-2c4c-42a2-ac0c-dff79d5c3618/e40cf17d-cd7e-3121-a175-5873ac6736a5.roa
File:                     e40cf17d-cd7e-3121-a175-5873ac6736a5.roa (raw, json)
Hash identifier:          ZfHGOHOPQYi3eLL31GZjBldF8zrwtFqpzB2lO0IYkAI=
Subject key identifier:   C3:7E:5D:42:CC:DC:92:99:4A:E3:EB:DE:EB:57:D6:74:43:79:04:E1
Certificate issuer:       /CN=81721768-2c4c-42a2-ac0c-dff79d5c3618
Certificate serial:       010D0C9F4328584EF7BDD8F20F5023E30CD6D260
Authority key identifier: 5E:72:19:72:3A:D1:A6:EE:BB:DF:9B:A7:F6:93:92:8A:EE:8F:E1:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81721768-2c4c-42a2-ac0c-dff79d5c3618.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81721768-2c4c-42a2-ac0c-dff79d5c3618/e40cf17d-cd7e-3121-a175-5873ac6736a5.roa
Signing time:             Wed 26 Aug 2026 18:35:42 +0000
ROA not before:           Wed 26 Aug 2026 18:35:42 +0000
ROA not after:            Tue 24 Nov 2026 19:35:42 +0000
asID:                     395701
IP address blocks:        148.78.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81721768-2c4c-42a2-ac0c-dff79d5c3618/81721768-2c4c-42a2-ac0c-dff79d5c3618.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81721768-2c4c-42a2-ac0c-dff79d5c3618/81721768-2c4c-42a2-ac0c-dff79d5c3618.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81721768-2c4c-42a2-ac0c-dff79d5c3618.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:bd:d8:f2:0f:50:23:e3:0c:d6:d2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81721768-2c4c-42a2-ac0c-dff79d5c3618
        Validity
            Not Before: Aug 26 18:35:42 2026 GMT
            Not After : Nov 24 19:35:42 2026 GMT
        Subject: CN=f10f8bb5-c814-42f9-bfca-8b5da347a983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:31:90:c1:1f:b7:c8:11:ad:22:c3:6a:47:
                    3d:3e:87:4c:9e:61:eb:e5:09:8a:48:47:3b:bf:6c:
                    4b:af:10:de:e4:ac:7a:ac:67:21:6b:b5:8f:5e:d2:
                    fa:37:1b:b3:1b:74:40:4f:90:74:15:3d:17:7c:df:
                    9f:e7:5e:ce:6b:d1:cc:f3:4d:e7:c4:24:75:4d:7a:
                    79:9c:e0:f8:ef:6b:4b:72:13:f7:62:20:6b:4d:cf:
                    9e:1e:63:7c:3f:63:48:a4:60:65:95:3e:96:5a:d7:
                    8e:d5:04:c4:3c:c2:62:7e:31:02:6c:e5:36:bd:d5:
                    49:8e:22:9a:55:26:02:af:b7:63:56:5b:e5:b1:85:
                    87:28:b9:ac:cd:83:40:33:c7:6a:f1:12:a0:15:ee:
                    44:df:4e:87:a1:ba:18:0a:fb:c5:52:fd:e2:4e:ad:
                    54:39:19:66:77:48:bc:6b:d7:6e:a6:81:54:13:a7:
                    54:68:80:4d:2f:b2:a1:0f:c7:9c:b6:df:9b:24:5c:
                    64:52:0f:07:bc:e6:12:d8:2d:92:34:94:40:f9:01:
                    61:4b:9b:5b:fd:f0:58:d3:84:ff:5f:70:5d:fa:6d:
                    79:36:65:f2:2d:25:6f:61:5a:60:64:7f:f5:c6:48:
                    ae:80:2d:c5:fa:92:45:34:53:6f:c2:45:e5:f2:f2:
                    d4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7E:5D:42:CC:DC:92:99:4A:E3:EB:DE:EB:57:D6:74:43:79:04:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81721768-2c4c-42a2-ac0c-dff79d5c3618/e40cf17d-cd7e-3121-a175-5873ac6736a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81721768-2c4c-42a2-ac0c-dff79d5c3618/81721768-2c4c-42a2-ac0c-dff79d5c3618.crl

            X509v3 Authority Key Identifier:
                keyid:5E:72:19:72:3A:D1:A6:EE:BB:DF:9B:A7:F6:93:92:8A:EE:8F:E1:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/81721768-2c4c-42a2-ac0c-dff79d5c3618.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.78.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e0:42:cf:99:a8:47:bf:90:e6:1a:2d:23:c2:b9:ef:35:52:
         f1:52:10:a4:fd:ba:3d:27:91:ef:ad:da:08:86:aa:1a:80:2f:
         4c:04:c8:19:d3:17:ba:c6:bd:df:a0:35:61:40:5b:86:80:2f:
         66:74:bb:7f:18:06:cc:e5:6f:fb:65:04:5a:c3:f9:ca:5b:a0:
         c6:78:57:ee:15:8a:87:9e:c8:2e:aa:1c:0e:16:39:b1:93:fc:
         3d:f9:8b:17:dd:16:20:22:19:49:6b:83:72:26:24:b6:96:aa:
         44:61:2e:28:c8:03:48:43:8c:9e:aa:f9:69:42:2a:46:fa:19:
         d2:ef:c9:54:f3:d0:ed:95:55:32:9e:03:e9:9b:09:40:b2:67:
         15:c4:a7:db:33:c6:10:a2:07:90:ce:3f:e6:20:6a:d4:76:ec:
         ab:c4:dc:ad:b3:1e:15:09:24:28:26:a5:99:49:60:66:44:2e:
         54:a1:52:5e:46:33:7b:b8:da:9f:11:ea:6f:88:2c:42:6a:6e:
         07:e6:ea:8f:2c:3b:73:e4:2f:1c:3e:f7:0d:1b:8f:ab:82:a9:
         f6:ad:45:9b:2d:e6:7e:e0:60:cd:5c:c5:9a:a1:0b:4c:24:3a:
         5a:02:a7:b6:fa:85:f4:84:9a:74:88:fb:78:a2:a1:02:e7:08:
         39:0c:07:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:59:54 2026 by rpki-client