Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/678c2786-4349-3a13-8476-3b89495cae56.roa
File:                     678c2786-4349-3a13-8476-3b89495cae56.roa (raw, json)
Hash identifier:          Z0wYt2ojEymGaoWPJLj73QjZp1QmN2zZl+dAPeMQfL0=
Subject key identifier:   36:73:07:51:F5:BD:F7:45:E2:5A:2E:EB:E5:29:06:84:37:13:2E:FE
Certificate issuer:       /CN=c7036deb-a358-4ff8-8a2d-c51f0988c8a2
Certificate serial:       010D0C9F4328584DD4C076A05F9A88064027BF80
Authority key identifier: 05:C6:11:20:66:E0:FA:5E:98:9C:8B:85:30:7E:E5:34:E9:0C:A0:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/678c2786-4349-3a13-8476-3b89495cae56.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        208.76.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:76:a0:5f:9a:88:06:40:27:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7036deb-a358-4ff8-8a2d-c51f0988c8a2
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=79e3ca3d-7c4d-4886-ac99-f49f61e9e294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c5:11:2b:1a:17:2d:85:04:17:a9:04:54:63:
                    be:72:4c:28:e3:ae:64:f6:9c:41:62:cb:84:47:35:
                    ba:d9:dd:74:d2:33:4e:4f:70:7d:e8:a7:c1:bd:ce:
                    3a:1b:d5:04:1e:ce:6f:0b:2e:64:dc:66:9f:61:ba:
                    7d:e2:cd:7a:83:2d:68:5d:49:22:c2:33:c5:14:68:
                    a6:c9:8e:b9:6f:1a:bf:a9:5e:e7:b7:4f:ff:81:58:
                    f8:5e:64:e7:c8:01:8d:a6:6e:03:12:d0:23:79:09:
                    84:c0:1a:da:bb:38:5c:80:1c:f6:c7:6f:25:4e:b0:
                    c1:9a:6e:71:66:44:bd:57:6b:35:59:76:b4:07:0f:
                    7f:79:13:93:f1:3e:7d:15:d3:0c:2c:02:80:e2:3a:
                    7a:d4:e9:ab:76:dc:2f:4d:a5:2d:0b:c2:41:c0:13:
                    44:00:59:57:01:02:71:15:28:52:61:52:5a:0c:66:
                    17:67:5e:f7:f1:21:eb:63:ee:79:8a:48:d1:fc:e9:
                    22:30:fd:eb:59:31:1f:f7:80:85:63:4c:d4:c0:81:
                    52:55:81:08:9c:3b:10:e1:5d:af:25:11:6c:4a:2f:
                    ff:62:77:e8:58:7c:6f:33:ee:38:a2:e6:44:b5:4e:
                    fa:9f:8c:fc:aa:58:a1:ee:f0:1d:02:ee:a3:ad:16:
                    90:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:73:07:51:F5:BD:F7:45:E2:5A:2E:EB:E5:29:06:84:37:13:2E:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/678c2786-4349-3a13-8476-3b89495cae56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.crl

            X509v3 Authority Key Identifier:
                keyid:05:C6:11:20:66:E0:FA:5E:98:9C:8B:85:30:7E:E5:34:E9:0C:A0:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:56:e1:5c:5d:41:e2:36:df:55:aa:0d:1c:db:c1:c4:ac:83:
         fb:f6:e5:37:e4:0f:60:5b:48:56:5a:45:3f:c6:6f:aa:43:12:
         67:4a:b9:0e:9f:de:b5:b9:f7:f6:a9:68:76:d6:dd:79:3d:3d:
         c9:a3:53:ec:ca:84:3e:c2:f1:cb:14:0e:f7:aa:92:49:9a:04:
         36:22:e8:15:3b:55:99:a3:b0:cc:19:d4:32:f5:7e:6d:02:1f:
         f3:f1:e0:5c:7a:49:03:36:e6:04:92:23:46:8c:9b:89:4b:54:
         4a:78:b2:56:63:4a:e9:ae:58:0a:85:0e:29:bf:aa:5c:9e:ca:
         5c:32:69:a0:2e:5d:72:e4:f0:c7:5b:2a:4d:f3:02:23:65:59:
         31:b8:4b:d9:f8:d1:21:30:ef:3b:32:94:4c:f1:e2:f8:ed:fa:
         9a:cb:b7:80:eb:1f:28:2d:16:b8:ad:0c:0a:17:0f:fa:87:d2:
         73:82:d3:e1:53:d7:e0:9b:bb:76:a0:48:63:a0:c3:28:69:64:
         38:7d:a5:22:d5:8c:6a:b1:08:b5:c7:9e:af:70:d7:7c:86:0d:
         e6:57:b3:e4:5b:3d:aa:e8:09:97:89:d0:5e:0e:d0:7b:da:cf:
         6a:94:18:5e:bb:d2:2b:b9:bc:5d:c4:60:04:27:7b:cf:2b:39:
         83:76:10:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:48:58 2026 by rpki-client