Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/78f4f4b6-3abb-3b91-8c02-563a6d8dbce4.roa
File:                     78f4f4b6-3abb-3b91-8c02-563a6d8dbce4.roa (raw, json)
Hash identifier:          uzbtniaQ8o3I4affuFZi9opaIk/aRbu0dE0iHubIKGA=
Subject key identifier:   ED:5E:A5:29:AE:24:C6:87:D4:8B:F7:C9:8C:AE:AF:A8:EB:D5:11:03
Certificate issuer:       /CN=41810617-fa0e-48cc-badf-1b017add1f3e
Certificate serial:       010D0C9F4328584CEBC228913A19269084209560
Authority key identifier: 7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/78f4f4b6-3abb-3b91-8c02-563a6d8dbce4.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     23471
IP address blocks:        67.219.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:28:91:3a:19:26:90:84:20:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41810617-fa0e-48cc-badf-1b017add1f3e
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=50220653-6780-4cee-8724-3329e5b99d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:22:1c:02:20:d5:05:60:76:64:1f:c0:83:
                    61:0c:d4:0a:79:e7:ad:7f:8f:ba:0d:c6:ee:87:74:
                    f6:45:ac:91:07:ae:cc:2e:e3:3e:e1:fd:02:a9:d9:
                    27:b7:fa:10:61:f3:5f:ff:8e:18:f2:4b:b7:75:83:
                    84:14:0d:75:89:56:4e:c6:b4:b8:54:5f:d9:ef:16:
                    b0:b2:1e:56:8f:41:a5:04:d6:f1:0d:e8:f9:06:e5:
                    a1:a2:04:30:ec:29:6b:c3:28:17:ce:ab:11:b7:62:
                    c4:0c:98:ea:8d:38:78:36:3e:da:bc:56:1a:9e:b9:
                    48:ba:ef:c4:e8:c2:89:a9:cc:05:c6:6d:8a:f2:e9:
                    af:51:bb:cb:7f:69:c3:ee:24:91:6c:d2:a3:3e:04:
                    b9:7e:2b:c3:8c:88:d5:a5:59:ee:e1:ad:3d:cb:69:
                    15:e4:57:fe:11:bb:3f:53:65:ab:cd:7c:4b:c0:80:
                    66:c5:bb:a0:1d:c5:1d:2b:dd:b5:73:68:1a:a4:3b:
                    ef:8d:de:31:79:f7:ba:bc:36:9b:f5:ee:b4:0a:78:
                    c7:5b:c5:64:17:08:2f:39:64:aa:ba:f0:0d:7f:04:
                    36:56:f2:53:e2:0c:04:5a:ed:80:e5:26:47:a9:c5:
                    d5:8f:6e:ae:01:e2:22:3c:37:09:89:fc:e2:94:8d:
                    61:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5E:A5:29:AE:24:C6:87:D4:8B:F7:C9:8C:AE:AF:A8:EB:D5:11:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/78f4f4b6-3abb-3b91-8c02-563a6d8dbce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl

            X509v3 Authority Key Identifier:
                keyid:7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ee:e9:74:a7:8d:ae:86:18:7f:cd:91:7b:29:eb:7b:1c:a7:
         47:68:d8:6e:d9:0a:ae:2a:53:9a:8a:ff:c3:36:b1:68:96:ef:
         95:a1:13:f0:dd:9e:5d:a7:12:c9:71:cf:bd:33:46:9c:6a:94:
         e1:fa:93:ad:ab:83:db:f5:91:33:87:bd:bb:bd:a6:f5:52:d9:
         a2:67:48:9d:3b:d3:de:01:51:33:53:ad:5b:db:b9:fc:a1:2a:
         18:56:d1:db:7c:57:7e:1f:b1:86:b1:41:a1:d2:20:8b:8b:dc:
         53:02:be:05:07:2b:61:40:75:a9:b5:d0:e3:d1:26:49:ac:eb:
         95:06:fc:27:42:99:af:4e:69:26:9d:ee:df:20:a7:2c:01:06:
         a3:2f:57:2f:d3:89:61:23:4f:5b:73:ad:f3:5f:1c:00:59:52:
         c7:b6:36:fb:8f:bd:dc:92:63:e3:7a:9b:9c:78:f9:f4:36:25:
         cd:66:56:4a:b4:0b:34:fe:e7:09:56:e8:fe:12:78:f9:6b:aa:
         5c:18:12:ae:fe:21:a9:22:54:54:43:d0:de:98:21:45:f7:55:
         6e:f9:86:7a:59:ba:3c:5c:6a:e8:e0:61:23:e0:db:99:7b:f6:
         f8:8c:57:e6:2b:f9:8c:6e:78:ee:da:db:18:73:31:3a:ea:3b:
         ec:66:7d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:23 2026 by rpki-client