Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a21672ba-8157-3645-afa8-e12fce27f1e2.roa
File:                     a21672ba-8157-3645-afa8-e12fce27f1e2.roa (raw, json)
Hash identifier:          BA6T1C5E5yy4XMJnENzrs1sHejlj5rJehJnomBoKPkA=
Subject key identifier:   C4:0D:6B:F0:4F:62:62:7E:5D:FB:39:C0:07:54:9A:48:17:FE:04:47
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE4234A93AECEEE582476C900
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a21672ba-8157-3645-afa8-e12fce27f1e2.roa
Signing time:             Wed 19 Aug 2026 18:03:55 +0000
ROA not before:           Wed 19 Aug 2026 18:03:55 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     26812
IP address blocks:        209.107.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:4a:93:ae:ce:ee:58:24:76:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:55 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=51321e0e-fadd-4ffb-8f21-e2c408276399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d2:be:81:1c:ac:e7:76:94:7e:a5:ef:ae:76:
                    23:0f:aa:92:e0:a6:4e:ae:96:a5:6c:0d:58:01:8b:
                    7a:2b:45:a8:e0:8f:70:90:7e:e3:29:ba:52:d6:f5:
                    3d:bf:81:16:4f:26:30:86:df:aa:de:f5:c9:3a:e2:
                    fd:36:b8:b4:c4:38:28:cc:c0:a8:fd:d5:66:f5:5c:
                    0f:11:3e:18:21:de:16:ba:53:72:37:77:c3:1c:87:
                    33:be:a9:20:ca:71:41:28:20:33:ab:52:cf:8a:56:
                    83:2c:1d:47:84:1f:0e:42:a7:30:fc:fb:ed:d3:09:
                    43:ea:ad:70:2d:36:68:e7:07:be:c8:d7:78:ad:1a:
                    15:08:38:4c:7a:fe:9e:5c:21:01:58:4b:cf:64:43:
                    69:9d:43:bd:91:33:f5:00:61:d1:bc:b3:aa:7d:03:
                    f3:8d:db:fa:06:f7:63:d6:b6:ee:93:44:8f:a6:5b:
                    89:60:24:e0:a3:42:f9:0f:13:c3:81:ae:aa:56:8e:
                    fc:b7:c3:14:d7:94:e1:64:bd:88:e3:e4:25:5f:9c:
                    68:93:ba:01:40:76:04:e5:da:19:74:35:6a:40:3f:
                    2c:83:f5:64:09:89:58:84:ae:1b:3b:57:4d:0f:b1:
                    72:1a:9b:c2:1c:bc:61:d3:3b:74:10:b4:6c:a1:1b:
                    e1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0D:6B:F0:4F:62:62:7E:5D:FB:39:C0:07:54:9A:48:17:FE:04:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a21672ba-8157-3645-afa8-e12fce27f1e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:51:b0:aa:be:32:bb:08:12:ed:53:df:db:3d:c1:72:f1:e7:
         be:b9:ad:1a:1a:4e:d2:6f:8a:91:d2:91:30:7e:9c:32:ae:fc:
         72:78:6d:16:53:07:07:94:d8:37:c1:0c:b3:b3:90:d3:58:db:
         c5:41:5f:ab:92:dd:3e:9b:95:76:b8:4c:50:28:ca:a4:e0:83:
         68:da:49:8b:c4:7c:89:75:9f:d0:8b:a6:2f:f3:9e:23:c2:13:
         54:05:74:a4:2e:d9:27:61:78:e5:88:22:b2:40:88:38:e2:cb:
         32:45:73:6b:b5:70:0e:75:11:f5:a4:33:df:c1:79:0b:42:5b:
         45:d6:36:fa:80:0f:a4:25:b3:85:86:0f:d4:7a:4f:1b:4b:d4:
         b7:12:d1:4f:38:a1:62:d9:e5:02:4d:1a:aa:fa:bf:75:71:0b:
         15:b9:ce:c6:ec:1f:a7:44:51:78:a3:98:3d:64:80:77:fb:7b:
         f2:02:9c:b4:80:f1:fe:f7:92:b1:07:80:71:c4:b4:49:9c:18:
         34:91:dd:63:28:c0:8b:e7:ec:31:0f:d1:47:91:77:c4:01:59:
         58:b0:92:89:af:91:c7:74:55:dd:ed:87:01:48:d8:70:7a:b9:
         51:ec:e9:94:94:3d:45:cf:61:35:5f:76:47:f0:5d:78:00:af:
         ab:46:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:24:25 2026 by rpki-client