Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/78c29d08-fdc7-3790-a89f-28eae95a2457.roa
File:                     78c29d08-fdc7-3790-a89f-28eae95a2457.roa (raw, json)
Hash identifier:          vHv6nJCGjjUwfmVoOCx47eM4wrz5TfBjJrvYxny0Ozs=
Subject key identifier:   BC:6F:8B:06:F4:FC:81:F8:6B:90:45:87:E7:95:1D:CD:E5:8D:78:C4
Certificate issuer:       /CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
Certificate serial:       010D0C9F4328584F53C57D75B05283FD629D7780
Authority key identifier: 88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/78c29d08-fdc7-3790-a89f-28eae95a2457.roa
Signing time:             Mon 28 Sep 2026 17:45:28 +0000
ROA not before:           Mon 28 Sep 2026 17:45:28 +0000
ROA not after:            Sun 27 Dec 2026 18:45:28 +0000
asID:                     46450
IP address blocks:        216.98.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:c5:7d:75:b0:52:83:fd:62:9d:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fbdc8c-2f4c-4dea-b420-52e582992086
        Validity
            Not Before: Sep 28 17:45:28 2026 GMT
            Not After : Dec 27 18:45:28 2026 GMT
        Subject: CN=cc31d45c-aed4-4277-bfe2-4e64ec30237e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b1:43:da:d5:f7:af:bf:57:4e:01:46:8a:af:
                    99:52:c7:77:e9:0d:7f:20:00:cf:74:ca:6d:a5:c1:
                    3d:c3:f6:fe:e7:ce:34:32:b8:50:62:2b:4f:71:98:
                    b9:07:20:f6:1e:50:2f:12:ac:24:e5:00:59:2f:29:
                    b4:19:bc:0b:93:28:72:e6:64:23:37:ae:47:7b:3c:
                    e2:a8:6f:58:c6:8a:b3:53:de:be:85:b0:aa:e7:e5:
                    96:ae:e4:4b:d4:e9:19:01:9d:b3:6d:09:e8:fc:2e:
                    1c:71:5f:6a:fb:d6:a0:61:40:ca:9d:da:e7:3e:76:
                    04:0c:9b:f8:f7:db:57:03:43:84:c8:28:58:32:71:
                    6b:7b:49:f2:87:36:c2:b1:a6:81:0d:9b:fb:ed:51:
                    2b:ef:60:34:4c:72:86:40:9f:7c:ea:cd:ca:4f:53:
                    cf:7d:99:96:e1:43:30:11:b0:e6:bd:22:a0:16:9e:
                    b8:46:80:9e:95:17:e3:a3:55:b8:f1:3a:ba:e5:f6:
                    c3:19:7e:29:27:ea:75:fc:33:d2:8a:a9:6d:24:9f:
                    12:d8:3c:4a:e5:da:99:73:08:65:e7:a6:fa:ad:8f:
                    6b:9c:90:bb:91:ec:cc:1f:ed:71:ef:2a:7b:93:80:
                    dc:aa:a9:f5:a8:b4:c6:2c:1d:1b:cd:76:61:e4:79:
                    d9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6F:8B:06:F4:FC:81:F8:6B:90:45:87:E7:95:1D:CD:E5:8D:78:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/78c29d08-fdc7-3790-a89f-28eae95a2457.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086/c3fbdc8c-2f4c-4dea-b420-52e582992086.crl

            X509v3 Authority Key Identifier:
                keyid:88:EC:1B:EE:A2:0C:53:B3:99:38:A4:26:8C:5E:B1:EE:56:2C:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3fbdc8c-2f4c-4dea-b420-52e582992086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:19:42:9d:65:d0:05:33:67:4f:27:43:81:af:b7:ee:27:94:
         8a:d0:21:e0:7e:1e:77:21:5d:46:32:ab:d4:b4:82:1a:ff:47:
         2d:63:05:08:f6:8e:6d:c1:97:40:46:11:15:46:8f:7b:ed:e9:
         1a:70:9f:84:c0:b6:96:74:59:7f:f2:d5:76:48:dd:8d:49:9c:
         c6:87:90:c6:53:69:f5:96:f1:28:ea:81:ae:34:4b:9a:2a:b1:
         84:36:49:fa:89:2f:89:2b:65:ed:b4:51:34:04:79:67:17:84:
         ca:27:77:cb:97:72:b0:99:fa:2c:c5:28:21:81:e3:46:a0:aa:
         f7:a3:c3:6a:8a:0a:f6:16:c5:f1:ec:55:3a:ef:ce:9f:c0:a6:
         0c:90:01:d6:ed:5f:74:73:a9:3b:6a:be:8d:70:37:09:78:cb:
         9f:cb:62:6e:56:29:23:44:31:ac:ce:d4:5b:d2:c8:82:da:4b:
         a8:78:78:66:f4:d9:06:2d:83:e2:bf:ee:3f:e0:30:4d:6d:a8:
         6a:70:20:59:7d:e9:3d:45:f3:9e:a2:3f:6a:f5:ba:cd:ee:58:
         19:62:01:1d:7e:95:c6:73:7c:3b:d2:55:21:e8:cc:8e:16:20:
         11:64:37:c9:4b:99:e8:5e:3d:71:bd:81:8b:66:fb:b4:ac:c1:
         a7:e2:ff:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:54:58 2026 by rpki-client