Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/571aa9e7-97ba-365a-95c7-47c7ed8f6327.roa
File:                     571aa9e7-97ba-365a-95c7-47c7ed8f6327.roa (raw, json)
Hash identifier:          9oscRJ0lWIUtLNKzY/wdk/vaVIqvHzxoWPvO9VKXraM=
Subject key identifier:   A2:EB:F6:A4:02:0F:71:98:50:BD:EC:A9:D4:92:D2:36:67:C4:EB:C2
Certificate issuer:       /CN=a78600ec-48a2-4f1a-8904-302418a38c57
Certificate serial:       010D0C9F4328584B8D67915EC14B192E363989C0
Authority key identifier: 01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/571aa9e7-97ba-365a-95c7-47c7ed8f6327.roa
Signing time:             Fri 17 Oct 2025 14:05:21 +0000
ROA not before:           Fri 17 Oct 2025 14:05:21 +0000
ROA not after:            Thu 15 Jan 2026 15:05:21 +0000
asID:                     16509
IP address blocks:        167.124.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8d:67:91:5e:c1:4b:19:2e:36:39:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a78600ec-48a2-4f1a-8904-302418a38c57
        Validity
            Not Before: Oct 17 14:05:21 2025 GMT
            Not After : Jan 15 15:05:21 2026 GMT
        Subject: CN=e9464125-4966-459f-bdc8-58a6eba4d1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:39:74:b3:cb:4c:19:01:a8:ec:c0:dd:73:
                    da:33:79:0e:e3:7c:77:46:2e:cd:b3:48:c9:91:02:
                    10:e4:fc:19:9b:72:d4:35:36:33:f9:0b:a7:e7:c6:
                    c3:00:88:8e:8a:a8:d9:fe:28:e2:41:91:62:0b:10:
                    41:51:fd:91:4a:f9:e6:b9:f7:ef:cd:d1:c0:62:a1:
                    ef:74:96:3b:70:21:fa:92:5a:6b:78:41:36:ce:92:
                    64:e8:ae:28:78:1d:80:a9:d7:b5:1e:19:2e:71:fc:
                    9a:74:c4:c7:5d:54:27:b9:4d:0c:29:d3:6b:e9:38:
                    b6:a5:fb:21:f8:c2:5b:eb:6e:6f:8b:6d:96:5d:06:
                    48:5c:3f:a6:78:48:3e:fc:ec:98:04:ec:a7:ea:7c:
                    c7:51:3e:50:2c:14:4b:07:e4:23:0d:1a:25:81:60:
                    b9:8d:06:56:d3:20:d6:df:af:0b:90:a2:69:4e:31:
                    9e:5c:a8:8d:da:29:a5:1c:38:16:82:1e:49:a9:ff:
                    4d:e0:73:0a:56:d4:b4:6d:c4:42:27:02:14:86:de:
                    a3:55:31:d2:a4:ad:64:e0:88:a2:15:f2:d9:58:bf:
                    cb:b0:ff:88:f4:f5:8e:9f:8c:a3:36:c5:f2:47:c4:
                    57:d7:18:bf:e5:96:b7:77:b9:1f:ce:dc:ba:b5:39:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EB:F6:A4:02:0F:71:98:50:BD:EC:A9:D4:92:D2:36:67:C4:EB:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/571aa9e7-97ba-365a-95c7-47c7ed8f6327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl

            X509v3 Authority Key Identifier:
                keyid:01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.124.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:c0:5d:63:b1:3d:75:1e:55:3f:32:19:60:c7:dc:77:63:f8:
         9c:a6:45:ba:b0:b1:29:be:ff:e5:17:e0:fd:6a:b4:c2:7c:5b:
         03:bd:f9:39:14:d1:f5:06:46:5a:4d:cd:78:4e:09:7d:01:d0:
         07:6b:cd:4e:09:ed:bb:79:14:1e:c0:a5:08:4e:ee:aa:04:06:
         c3:de:9a:ee:a5:c7:df:1d:25:19:97:20:ee:16:58:a7:26:99:
         8f:a0:ef:ae:d8:64:5f:4c:b8:17:fa:90:cf:83:4b:c3:36:23:
         a5:a5:95:b4:f0:cf:5e:26:56:3d:ac:2d:6f:9f:88:c1:e3:f0:
         16:8d:2d:43:38:b5:b6:83:5d:cc:2c:b4:c2:38:cb:9d:1d:11:
         5a:40:7e:26:a9:a0:04:18:62:35:56:16:a5:e7:69:6a:4d:27:
         7b:41:fa:12:c5:84:31:6a:28:9c:1a:c4:30:e3:37:21:3d:4b:
         93:34:aa:85:54:76:78:a8:9f:3a:33:72:1b:6d:9e:00:c9:4c:
         f8:0a:2a:7b:e5:4e:4a:64:4b:8c:47:43:ec:ba:80:63:83:29:
         19:9c:72:3c:09:b2:ae:11:2c:83:20:20:55:e0:49:50:ae:6a:
         1c:b6:0d:aa:b5:10:59:4f:2c:a2:16:2f:ff:94:8f:4f:c6:5f:
         0a:a1:e9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:29 2025 by rpki-client