Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/3f46fd98-d9f0-37be-a70b-3ee8def1bf2d.roa
File:                     3f46fd98-d9f0-37be-a70b-3ee8def1bf2d.roa (raw, json)
Hash identifier:          SF7ZXDp5xWdvG2ZI8dJIzebAX0jCH9ZotqHz/4pfdyM=
Subject key identifier:   02:8A:47:D1:E3:33:97:20:13:58:DE:11:76:5D:7D:1D:5A:03:F3:14
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F4328584EF87CD4A3632C8AAC293CAF80
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/3f46fd98-d9f0-37be-a70b-3ee8def1bf2d.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     22925
IP address blocks:        216.59.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:d4:a3:63:2c:8a:ac:29:3c:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=5a71f6c4-773a-4d47-a856-2cbf178e29c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ad:94:4f:e8:50:af:ec:13:81:1a:0e:24:14:
                    00:05:e2:01:d4:ed:25:0b:78:98:c8:82:bc:b9:fd:
                    aa:2e:e7:28:89:71:0a:3b:fe:e3:f6:5e:ee:9c:ef:
                    8f:b9:8f:76:65:c4:9e:cf:00:59:b7:35:d7:eb:5d:
                    de:0f:aa:18:ac:de:54:d1:c2:0f:c6:b3:04:18:5b:
                    06:93:c2:01:0a:f4:20:cc:b0:e4:ad:6d:79:9a:ca:
                    b7:09:e0:3b:53:e4:08:88:af:71:3a:ed:6f:87:c2:
                    fb:3f:e3:68:7f:dd:86:71:18:9f:04:5c:e6:bd:76:
                    c3:39:3b:d5:9c:73:54:b9:97:71:7c:32:0d:6c:26:
                    10:5c:4b:40:5c:4b:49:7d:27:53:77:15:ca:53:b9:
                    71:6e:43:8b:65:46:0e:79:95:08:f7:78:4e:7f:13:
                    b4:3a:1f:f3:31:a8:7b:b0:2d:51:08:05:56:5f:48:
                    3b:77:02:69:40:2a:db:5e:36:48:b8:b4:5a:93:02:
                    b6:c5:ae:a6:d2:22:8c:ca:cc:d0:07:c1:e3:e8:8d:
                    6b:f2:cf:1c:72:9d:34:02:28:e5:2b:fd:f0:37:ab:
                    7b:5e:2c:a2:75:c1:53:a8:ac:d8:39:a7:01:f0:2d:
                    77:7b:a7:6f:1e:4c:dc:7c:d5:c6:32:77:56:c9:15:
                    07:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8A:47:D1:E3:33:97:20:13:58:DE:11:76:5D:7D:1D:5A:03:F3:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/3f46fd98-d9f0-37be-a70b-3ee8def1bf2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:d6:43:f3:76:bb:05:55:01:8a:73:54:81:c7:11:6a:72:84:
         00:5f:2c:44:be:d4:1b:88:de:e7:ec:37:c7:8c:75:28:ae:96:
         5f:f0:3a:b6:10:c2:14:39:e1:8a:8d:e9:05:65:fb:fa:b7:c6:
         73:f4:49:48:a1:f0:1c:e9:3f:6e:d5:90:ba:cc:87:89:35:25:
         fc:2d:e9:b4:36:d6:2d:18:07:ce:72:b2:dd:36:36:8c:75:df:
         24:4d:8f:6c:14:69:4a:01:d1:de:8c:3d:4d:e7:07:a1:a8:7b:
         2b:0f:a8:a1:33:78:12:5b:4d:b0:cc:1c:9c:c8:f1:0a:7b:b6:
         e6:d5:96:d9:02:bb:93:f6:b2:bb:f0:3c:07:51:0f:a1:10:b1:
         9c:75:9b:2e:2b:bd:4a:48:5f:63:4f:19:4a:86:42:17:b9:58:
         4f:b5:fc:1a:41:6f:50:4a:df:66:c8:1d:e7:1b:7b:c4:f8:cc:
         7b:2f:86:d4:d9:26:3e:69:7c:2a:ec:32:55:0c:64:af:3b:7d:
         12:be:24:f7:d2:0c:ba:46:f8:d6:34:d3:27:08:4e:43:50:ed:
         81:d0:eb:f1:3d:1b:41:18:5e:aa:7b:70:9c:c5:c4:bc:70:35:
         77:8a:21:d5:e7:20:31:ba:e2:bd:02:1e:66:e3:5c:74:92:e1:
         0f:68:a7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:53:28 2026 by rpki-client