Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/678c2786-4349-3a13-8476-3b89495cae56.roa
File:                     678c2786-4349-3a13-8476-3b89495cae56.roa (raw, json)
Hash identifier:          6ulAJA5Lq4E3IIbc7XdTOuFpR4iTE26Cu0wsD7wpyBQ=
Subject key identifier:   5A:F7:08:73:39:DD:42:B6:8D:10:7A:1F:BC:07:C3:B3:CB:EC:A4:0B
Certificate issuer:       /CN=c7036deb-a358-4ff8-8a2d-c51f0988c8a2
Certificate serial:       010D0C9F4328584F4976A16B8B16120A9EB33B80
Authority key identifier: 05:C6:11:20:66:E0:FA:5E:98:9C:8B:85:30:7E:E5:34:E9:0C:A0:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/678c2786-4349-3a13-8476-3b89495cae56.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        208.76.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:a1:6b:8b:16:12:0a:9e:b3:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7036deb-a358-4ff8-8a2d-c51f0988c8a2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dd5adafd-449c-4250-a933-0a0cb8c8c561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3b:a7:b0:49:d8:01:9b:43:8f:92:5c:b5:f9:
                    6a:45:2a:5d:ec:16:36:37:e2:66:27:ed:31:61:b2:
                    23:3b:6a:14:88:32:ac:8f:3f:f5:49:99:b2:62:fb:
                    9b:e9:81:de:51:5f:04:89:d6:77:9d:8b:9f:16:31:
                    42:53:b1:85:03:43:af:c6:cc:86:a7:d4:26:69:29:
                    af:8c:fd:79:b4:f6:7d:37:be:da:46:84:e5:56:04:
                    e0:c3:6d:c9:b9:a9:10:88:49:f8:8e:26:fe:a3:5e:
                    ad:b2:50:f3:56:a6:9a:76:89:c3:80:63:34:87:29:
                    5c:74:7e:32:38:c5:d3:05:e0:c1:92:02:43:de:63:
                    02:c5:62:a8:31:8b:98:40:61:35:c0:cc:8e:0e:24:
                    a6:92:ca:0b:50:68:37:93:cc:94:ee:28:b2:85:2a:
                    64:2e:31:96:fc:35:ce:1d:04:d2:9f:6d:e5:c4:5f:
                    e2:00:dc:e4:33:98:a6:fd:8d:1f:6d:ce:9b:4b:6c:
                    0d:eb:7d:99:a6:e4:ac:87:36:e5:59:4b:98:4b:4b:
                    46:4a:c6:d2:f1:26:73:22:af:21:b0:6e:78:82:69:
                    09:56:44:8e:ae:57:fe:a4:bd:00:86:42:04:ab:bf:
                    8d:1e:8a:33:cb:3b:96:a5:6e:af:aa:b6:6c:bd:39:
                    91:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F7:08:73:39:DD:42:B6:8D:10:7A:1F:BC:07:C3:B3:CB:EC:A4:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/678c2786-4349-3a13-8476-3b89495cae56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.crl

            X509v3 Authority Key Identifier:
                keyid:05:C6:11:20:66:E0:FA:5E:98:9C:8B:85:30:7E:E5:34:E9:0C:A0:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c7036deb-a358-4ff8-8a2d-c51f0988c8a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:74:15:7b:e1:b5:ed:e5:74:0a:56:bc:27:79:b5:34:f9:27:
         2c:86:e7:9f:16:55:3f:5f:5e:ef:5a:8d:7d:62:3f:3f:b6:03:
         51:d4:39:3a:ac:fc:b1:67:d0:16:fc:a4:a9:52:39:7c:e4:77:
         c3:e3:7c:d0:e0:c5:0a:0a:45:ef:b6:66:0c:6b:d1:9d:23:2c:
         43:a3:97:59:76:bc:a0:23:63:83:df:79:dd:50:a0:6a:95:9c:
         10:da:38:5d:88:95:b6:e5:49:c7:15:f5:37:43:ad:0a:d6:54:
         99:eb:8d:16:cb:e4:03:53:1a:b4:fd:c6:12:5f:47:a1:60:cf:
         ec:ea:01:dd:54:9b:c5:ce:5b:2f:fd:aa:a0:9f:49:56:88:0b:
         75:ea:1a:c4:6e:f4:b1:5d:17:07:95:a4:1c:e7:71:cb:df:27:
         6a:5f:6a:13:3b:91:04:c1:e1:8e:a9:0e:af:88:fe:48:5f:bb:
         d7:32:2d:2f:f0:df:0c:b9:4c:20:5e:83:04:ef:de:b5:ec:39:
         70:d7:ff:97:ff:ca:78:6c:c6:e6:62:8b:e9:09:24:f9:0c:95:
         e6:2b:a5:23:69:7e:49:90:4d:ae:50:c5:93:cc:8d:02:57:87:
         c7:1b:59:e3:7f:7f:a1:9e:9e:ed:b8:3a:36:bf:20:3d:2e:b4:
         f0:64:30:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:59:41 2026 by rpki-client