Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0e91771f-79fe-469f-a8ab-6dee271a5e68/067c6d31-a175-3d57-89bf-fb7a3245567b.roa
File:                     067c6d31-a175-3d57-89bf-fb7a3245567b.roa (raw, json)
Hash identifier:          EQQJafzgJr5FG6+3sBdFve9bcjJz3+PDS503jrj4Jw8=
Subject key identifier:   7C:31:A5:93:27:61:15:E4:85:8E:9C:41:28:A9:DB:BB:EB:68:31:96
Certificate issuer:       /CN=0e91771f-79fe-469f-a8ab-6dee271a5e68
Certificate serial:       010D0C9F4328584E0756B0DF27F07AD59E895A20
Authority key identifier: 7A:96:81:58:F8:33:C8:7E:9E:C8:FB:1A:13:14:78:9B:9F:C0:7F:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0e91771f-79fe-469f-a8ab-6dee271a5e68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0e91771f-79fe-469f-a8ab-6dee271a5e68/067c6d31-a175-3d57-89bf-fb7a3245567b.roa
Signing time:             Mon 01 Jun 2026 15:53:51 +0000
ROA not before:           Mon 01 Jun 2026 15:53:51 +0000
ROA not after:            Sun 30 Aug 2026 15:53:51 +0000
asID:                     393775
IP address blocks:        148.78.70.0/23 maxlen: 24
                          148.78.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0e91771f-79fe-469f-a8ab-6dee271a5e68/0e91771f-79fe-469f-a8ab-6dee271a5e68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0e91771f-79fe-469f-a8ab-6dee271a5e68/0e91771f-79fe-469f-a8ab-6dee271a5e68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0e91771f-79fe-469f-a8ab-6dee271a5e68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:56:b0:df:27:f0:7a:d5:9e:89:5a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e91771f-79fe-469f-a8ab-6dee271a5e68
        Validity
            Not Before: Jun  1 15:53:51 2026 GMT
            Not After : Aug 30 15:53:51 2026 GMT
        Subject: CN=3cef637b-3d39-48ac-bcf6-4f40c7d887ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e7:14:d8:60:9d:30:04:2e:95:45:5e:c6:6b:
                    d3:17:0b:9c:a9:ad:90:6c:8e:f1:a5:ae:24:5c:6c:
                    e4:c8:93:93:8a:67:aa:a3:b0:5c:46:64:4d:d2:b4:
                    57:49:92:3e:7b:8b:7a:d2:a9:17:2c:5a:cb:04:7b:
                    1e:7d:d4:7e:e5:2f:5b:85:59:bc:40:fd:e9:60:f4:
                    52:1f:d9:4d:49:14:e8:e6:d8:41:ef:1d:3d:ac:88:
                    a7:c9:b5:42:59:f0:2b:e4:ff:4b:9a:c9:67:f3:a4:
                    a6:f6:4f:d8:49:60:72:b5:23:03:71:ac:6c:21:8c:
                    a9:7e:7b:cf:9e:e1:f8:8e:4d:00:e7:db:2d:b6:aa:
                    48:d7:fc:cf:8e:43:7d:5f:08:2f:6b:9e:16:35:e8:
                    e3:d8:cb:27:a5:86:5f:b7:5b:4e:54:7f:a3:d3:67:
                    82:b1:d3:12:b6:44:1d:26:92:ce:95:ea:22:51:05:
                    20:9b:04:46:ef:5b:65:b0:8b:fa:74:7d:f3:bc:18:
                    c1:ba:c8:99:e7:1d:39:e4:ec:b2:b8:e7:e4:77:3c:
                    b0:60:71:4a:4a:8a:51:39:8d:a0:c6:ad:2f:f7:71:
                    0b:fa:3a:ca:db:d2:9d:54:b7:2c:64:aa:e8:9e:7f:
                    55:9c:7c:8e:21:90:a6:ce:62:65:ed:07:96:f2:c2:
                    32:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:31:A5:93:27:61:15:E4:85:8E:9C:41:28:A9:DB:BB:EB:68:31:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0e91771f-79fe-469f-a8ab-6dee271a5e68/067c6d31-a175-3d57-89bf-fb7a3245567b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0e91771f-79fe-469f-a8ab-6dee271a5e68/0e91771f-79fe-469f-a8ab-6dee271a5e68.crl

            X509v3 Authority Key Identifier:
                keyid:7A:96:81:58:F8:33:C8:7E:9E:C8:FB:1A:13:14:78:9B:9F:C0:7F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0e91771f-79fe-469f-a8ab-6dee271a5e68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.78.70.0/23
                  148.78.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:63:ab:15:9f:71:66:c6:87:b4:5c:d2:85:45:06:1f:93:55:
         48:36:81:fe:6f:1a:23:95:5b:d7:da:0e:0c:2a:06:1c:59:06:
         c6:f3:ec:85:a8:dd:d8:dd:e7:d3:66:7a:f8:98:23:83:72:ca:
         ef:e6:c3:c7:56:93:91:54:c0:f6:aa:f4:8e:fd:11:8a:47:ab:
         58:47:2c:5f:81:16:ed:d6:90:e6:4d:cc:f7:96:02:a6:70:25:
         18:08:31:6d:ff:6c:5a:18:2a:56:9a:ba:3b:bc:76:ee:22:ef:
         2f:d1:97:67:b1:e2:62:47:49:45:77:15:4f:7c:7e:ba:9d:15:
         73:1c:fe:ba:f7:14:d2:ed:83:f8:91:4e:20:dc:b5:1b:28:6b:
         83:ac:99:ef:b2:f5:7e:8a:49:4c:c6:ce:f3:1a:0f:ef:83:fc:
         21:97:07:e3:23:2b:5f:99:9a:20:99:01:2d:73:43:82:ef:c8:
         06:60:d7:b9:62:69:50:48:d5:39:d9:d6:e4:66:58:ea:03:b0:
         1f:aa:bc:80:fd:1c:67:87:9d:d4:7b:00:ae:70:c4:f5:bd:bf:
         8c:e8:0b:c2:0e:64:92:97:56:30:f9:ea:09:80:f2:bd:26:df:
         0d:13:d6:4e:50:7b:17:c2:18:0d:38:ca:50:bd:57:ef:a4:18:
         e9:34:a8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:04:03 2026 by rpki-client