Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6/4e3a71f8-743a-3226-872a-784b5ba49c8e.roa
File:                     4e3a71f8-743a-3226-872a-784b5ba49c8e.roa (raw, json)
Hash identifier:          QzdT/JvjQiTLi7l04HgomZ/I42JUA9wSFWWSXW7+vQ0=
Subject key identifier:   DC:25:39:16:C0:D3:14:8C:9E:21:A6:7C:9C:50:F9:50:7F:0A:EE:25
Certificate issuer:       /CN=78750804-3afd-47fa-9a58-deb2fe74ecb6
Certificate serial:       010D0C9F4328584CE1FCCD055F20B44E62323328
Authority key identifier: 6C:DD:0A:AE:12:D0:6A:88:04:07:1C:65:C1:CF:1D:78:73:9B:E5:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6/4e3a71f8-743a-3226-872a-784b5ba49c8e.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     62782
IP address blocks:        192.64.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6/78750804-3afd-47fa-9a58-deb2fe74ecb6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6/78750804-3afd-47fa-9a58-deb2fe74ecb6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:cd:05:5f:20:b4:4e:62:32:33:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78750804-3afd-47fa-9a58-deb2fe74ecb6
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=a82a92cf-12e7-4e09-932d-47dfc2781444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:57:0f:3c:87:01:59:d4:21:7f:83:39:9d:
                    22:92:9a:c4:c5:79:d8:af:3c:aa:ac:23:06:4d:5a:
                    bd:ca:42:00:08:f8:57:c7:67:f1:1e:9a:d5:99:10:
                    d5:eb:d4:1c:e0:c5:16:7c:63:0e:44:ad:3e:3b:00:
                    10:8c:63:d5:c0:12:85:54:3c:58:f5:b1:98:3c:ab:
                    c4:03:d2:f9:59:3f:87:da:de:ae:fe:fd:05:a4:2b:
                    6e:d7:c3:36:0c:16:c8:81:a8:e2:fb:d8:7b:07:b9:
                    16:d1:98:6d:cd:0e:03:cf:e0:03:2c:9c:8f:98:25:
                    30:1e:2a:07:e7:4a:b7:7d:fe:6f:98:d0:93:30:bc:
                    fa:aa:10:cb:0c:69:7b:25:08:d8:45:26:01:ce:31:
                    85:8b:f0:28:be:ad:0a:04:41:6f:03:fd:29:a8:6d:
                    ab:40:e9:c6:f4:f9:b2:79:9a:50:b9:fe:25:20:eb:
                    25:88:76:d1:d1:42:c6:e1:d7:bf:37:05:e9:b7:30:
                    e6:97:70:40:3f:9d:35:f8:0c:f6:ca:27:ca:9e:c1:
                    57:8e:17:98:ca:e7:ae:3b:42:9b:6f:fc:23:ef:13:
                    d2:c0:03:4c:71:cf:36:08:a1:5a:e2:27:3c:45:a0:
                    2e:ec:08:5d:80:c8:06:af:b4:15:b9:0c:4b:47:64:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:25:39:16:C0:D3:14:8C:9E:21:A6:7C:9C:50:F9:50:7F:0A:EE:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6/4e3a71f8-743a-3226-872a-784b5ba49c8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6/78750804-3afd-47fa-9a58-deb2fe74ecb6.crl

            X509v3 Authority Key Identifier:
                keyid:6C:DD:0A:AE:12:D0:6A:88:04:07:1C:65:C1:CF:1D:78:73:9B:E5:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78750804-3afd-47fa-9a58-deb2fe74ecb6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:80:e1:ad:dc:86:19:58:87:6d:7d:0b:6e:ce:0e:d8:a3:a8:
         82:23:0c:1a:25:c7:f0:8b:21:94:5a:ec:0f:b0:28:d3:56:5b:
         90:b5:95:0e:84:10:69:73:ec:5a:d1:39:11:0a:0e:06:83:3d:
         40:de:ea:62:db:64:c2:d0:59:30:17:2e:fa:4b:b2:69:6a:c0:
         1a:68:a8:68:21:77:6b:69:f1:58:c1:83:9e:50:8d:c8:55:4c:
         f9:d5:34:e2:2c:88:6c:89:9b:68:6c:74:32:20:bf:a6:0a:ce:
         62:47:0c:91:ff:3d:ba:2d:b6:4f:0b:5d:2d:18:02:38:f9:bf:
         7a:95:7b:a4:e7:7d:09:2b:13:58:bc:94:19:d0:b9:12:31:dd:
         db:d5:33:60:95:3a:83:e8:64:92:b6:00:eb:64:2b:71:c5:7c:
         0c:6f:5c:23:25:e4:fe:f8:ec:4c:15:3c:1e:8d:15:8e:84:6a:
         7f:94:fe:41:7f:02:53:b4:7a:f1:ea:90:c5:37:5a:ca:7b:07:
         23:96:05:1c:47:97:c1:3a:c1:dc:0e:d9:92:2f:d9:f0:98:b2:
         b7:57:13:0b:67:94:37:6e:b1:55:16:00:f1:be:25:67:ca:3c:
         21:3e:2e:42:39:b7:82:fd:5e:e4:45:9b:3d:63:10:4c:ed:19:
         a5:a7:13:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:55 2026 by rpki-client