Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/78ee7f09-cd18-3ebb-8bfa-256df7403126.roa
File:                     78ee7f09-cd18-3ebb-8bfa-256df7403126.roa (raw, json)
Hash identifier:          6JH5SW9nXqW4Czxc3rNI5S2J29q1MfxAdrxAeyC9G8M=
Subject key identifier:   6A:F0:02:50:E2:5B:52:78:B4:D9:6E:9A:FA:BA:55:53:F7:AE:D7:9E
Certificate issuer:       /CN=ea869763-37d6-43fe-b16f-bd22be08a7c5
Certificate serial:       010D0C9F4328584D5D45EDF5A489774447AC6900
Authority key identifier: 86:EB:A3:1E:58:34:F5:2A:95:1C:9F:4D:11:8A:B4:A1:80:2A:2E:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/78ee7f09-cd18-3ebb-8bfa-256df7403126.roa
Signing time:             Wed 01 Apr 2026 17:52:39 +0000
ROA not before:           Wed 01 Apr 2026 17:52:39 +0000
ROA not after:            Tue 30 Jun 2026 17:52:39 +0000
asID:                     609
IP address blocks:        199.52.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/ea869763-37d6-43fe-b16f-bd22be08a7c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/ea869763-37d6-43fe-b16f-bd22be08a7c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5d:45:ed:f5:a4:89:77:44:47:ac:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea869763-37d6-43fe-b16f-bd22be08a7c5
        Validity
            Not Before: Apr  1 17:52:39 2026 GMT
            Not After : Jun 30 17:52:39 2026 GMT
        Subject: CN=d5c32992-b6f5-4749-907a-432cdf3b43bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0a:58:2d:f2:aa:71:c6:58:53:a3:3e:47:1a:
                    fc:31:c6:81:5b:38:f8:25:eb:dc:f9:5f:2c:e1:bb:
                    b7:bb:26:df:c0:ba:ea:93:0c:47:58:9d:d5:c7:2e:
                    57:fb:3a:04:91:2b:a3:3e:f8:3b:f2:0b:e0:a2:b9:
                    15:64:68:a3:36:15:4a:2e:9d:69:b4:ad:ad:ff:ba:
                    73:e0:ad:49:1a:fb:4d:ed:a8:2d:e3:26:bd:f5:35:
                    88:b5:6b:17:04:7a:0a:ab:d3:b9:91:53:e1:29:5e:
                    0f:0c:38:95:68:36:25:6b:2a:ad:7f:d1:58:2d:38:
                    4f:da:05:d8:76:c3:94:18:7f:77:98:0e:9b:73:75:
                    12:67:74:14:3c:bb:ac:d0:d4:33:e8:3b:59:90:d4:
                    76:09:8f:f3:89:be:c6:92:4d:4c:ee:20:36:b5:09:
                    10:c4:8d:c8:35:f6:57:28:6d:8b:ed:ce:6c:7b:ba:
                    a0:0a:90:69:56:66:0e:2e:3d:bf:0a:f8:1b:de:f8:
                    a0:f2:fc:85:a5:77:f6:bc:04:80:07:5a:d8:bc:ef:
                    96:fd:43:b1:e3:68:64:64:e2:40:4d:d5:e9:d5:73:
                    6f:af:47:17:d1:dd:63:ef:d5:2a:08:6c:7e:ed:58:
                    2d:e1:af:de:19:22:93:fb:d9:42:96:05:5a:65:36:
                    5f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F0:02:50:E2:5B:52:78:B4:D9:6E:9A:FA:BA:55:53:F7:AE:D7:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/78ee7f09-cd18-3ebb-8bfa-256df7403126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5/ea869763-37d6-43fe-b16f-bd22be08a7c5.crl

            X509v3 Authority Key Identifier:
                keyid:86:EB:A3:1E:58:34:F5:2A:95:1C:9F:4D:11:8A:B4:A1:80:2A:2E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea869763-37d6-43fe-b16f-bd22be08a7c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.52.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:7e:02:0b:fd:fd:81:85:fe:6e:da:74:a7:4f:99:8c:30:6c:
         d2:88:2b:26:b6:9a:5e:7f:bd:a1:dd:f5:b6:63:d3:0e:3c:76:
         44:7b:fa:f2:bb:49:65:79:a5:28:55:b1:35:53:84:c0:3f:e0:
         11:d5:43:ad:c9:2b:25:cf:f5:bc:23:16:dd:dc:a3:7a:26:b3:
         36:9b:9a:72:db:9e:cb:c6:65:c3:78:df:89:d0:ac:45:c1:12:
         7c:63:f1:6a:09:88:5e:67:83:f5:b4:7b:24:e9:12:7e:1c:89:
         a3:71:84:d5:50:00:d3:35:7d:af:6f:66:24:31:4d:4f:70:03:
         0f:3f:ce:66:ef:1a:59:2a:25:5a:83:63:6d:66:53:57:b2:cb:
         7c:be:08:9d:65:a3:aa:17:49:4b:f6:ca:95:5b:e4:ec:25:1b:
         9b:5a:03:a2:a7:1b:31:f1:d1:91:0a:55:f2:20:65:df:a0:f0:
         21:3c:76:26:13:46:a4:43:22:bb:b2:a5:29:3e:6e:1c:61:8a:
         ff:1d:be:f4:ea:a7:07:fa:71:61:92:99:cb:4a:f5:49:9c:bc:
         55:5a:7d:6a:88:fc:eb:45:11:d3:01:07:19:1a:37:f1:97:cb:
         a5:ae:39:be:42:49:f6:f8:33:52:f8:56:d2:9a:d2:55:ab:22:
         c5:c1:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:50 2026 by rpki-client