Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa
File:                     8c0cf3f7-33fa-3591-ab58-960d708c9989.roa (raw, json)
Hash identifier:          xkSE8CtA3e19Pn/JTLeoAhoW8X+RDOaS0Ndte3XGRWU=
Subject key identifier:   B8:31:81:FB:76:C5:64:37:AA:E3:CF:2A:1A:C4:9F:05:D7:4D:90:06
Certificate issuer:       /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial:       010D0C9F4328584D59EA593A8BFF42B9FECA7480
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        209.142.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:59:3a:8b:ff:42:b9:fe:ca:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=3def0d0b-f898-436a-a894-bee0b44ad711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:a1:48:55:ae:31:bb:06:7f:c0:c9:cd:9c:
                    e9:9c:c2:b9:38:e7:42:07:dd:b4:8a:ce:d3:d0:8b:
                    db:eb:a9:66:a8:0b:98:21:6d:8a:06:99:7a:6f:fe:
                    18:5f:ed:6c:22:1d:df:6e:a2:e4:81:70:21:22:51:
                    ee:7a:34:a9:db:eb:f4:92:fc:e6:ee:8a:0c:20:10:
                    d7:4c:e6:dd:60:04:18:ef:d5:34:6e:ac:35:5e:c5:
                    30:ca:07:17:f2:ec:4e:36:89:64:e3:b7:a2:a4:b3:
                    82:d6:0b:d3:4c:65:01:38:9f:c9:ae:f6:2f:66:db:
                    79:5b:5d:82:aa:04:5e:3f:51:6d:c6:9e:83:eb:a4:
                    3b:6e:d2:fa:57:84:ec:69:ec:cf:39:e8:4e:e0:80:
                    82:c9:53:e1:5b:1b:ff:5c:a7:56:2d:60:b4:49:41:
                    83:be:85:ef:03:ec:5e:f2:e9:1f:d8:1f:14:6b:65:
                    85:1a:c8:6f:f2:f0:e9:94:d3:7d:39:15:be:b1:d3:
                    d1:48:58:c9:ad:51:7f:4e:3f:bb:71:57:7a:84:ae:
                    43:39:5e:50:fc:51:56:fc:09:1c:ee:90:a8:0b:18:
                    98:19:9d:54:7d:fb:24:ae:fd:f3:7d:71:a7:90:de:
                    bf:7c:11:f7:ce:87:13:2d:80:32:d7:d8:ba:63:d3:
                    f4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:31:81:FB:76:C5:64:37:AA:E3:CF:2A:1A:C4:9F:05:D7:4D:90:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl

            X509v3 Authority Key Identifier:
                keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:61:8e:d1:5e:8c:3a:84:ee:a9:f5:fe:4e:1f:99:da:e9:fc:
         8f:fb:5d:46:02:69:2a:14:1f:4c:28:ac:e5:ce:7a:1c:fb:4c:
         8f:4a:b7:58:b4:77:07:f3:ce:07:fb:b6:a0:0b:48:ee:1b:52:
         4e:b6:52:e9:2b:32:c3:ca:4e:e4:3f:fd:f8:0c:70:d6:f4:ee:
         18:c5:cb:47:b3:48:10:b9:a1:3a:28:b8:7e:94:9d:ba:fb:08:
         dd:1f:60:75:03:2c:ee:4a:f3:5a:20:e8:c4:5c:e1:d6:ea:90:
         65:d5:b6:42:22:f7:3a:a6:4b:ce:de:6a:1f:d9:b5:6f:d1:6f:
         e1:0a:cd:34:d0:cb:01:82:66:60:ee:1e:0b:34:77:ae:f0:1f:
         d4:25:71:ed:83:f2:90:8c:9b:c3:b7:14:25:ff:8a:43:ed:00:
         4f:31:63:78:ff:d1:d5:49:e0:8c:d5:12:a8:5a:c5:0e:da:bc:
         9e:9b:7e:31:bd:95:2c:69:79:52:62:10:1a:8c:8a:d1:a0:70:
         8a:97:04:f1:26:c1:64:78:62:49:2b:13:2d:53:b4:d2:7d:d8:
         5f:26:87:44:3f:d8:f3:b1:30:4a:be:04:6f:90:89:85:7e:00:
         2e:21:a1:39:14:ee:4d:ca:d8:6c:b1:28:6b:86:69:9a:2a:37:
         f8:a5:ae:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:34:31 2026 by rpki-client