Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/86ce4399-1b72-390d-8570-47106748f50a.roa
File:                     86ce4399-1b72-390d-8570-47106748f50a.roa (raw, json)
Hash identifier:          MPkIn9iUuXDogBaRQCjkynNqP/o5SPflagsRUSPoFfc=
Subject key identifier:   B8:74:92:6B:CD:B5:51:06:1A:94:A6:21:18:A0:8A:72:43:31:1A:8C
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584E7634CBC89F79EE38A5288D00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/86ce4399-1b72-390d-8570-47106748f50a.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     9009
IP address blocks:        198.145.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:cb:c8:9f:79:ee:38:a5:28:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=704a2fc7-69e4-438d-9fbc-563a63802be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7e:92:4d:45:b6:83:8d:25:ae:b7:1c:d3:58:
                    36:d8:1b:b2:a2:3c:a1:6a:dc:d4:81:6f:ec:9c:cb:
                    70:ed:e0:29:09:03:f0:c5:8f:f8:21:c0:92:37:20:
                    5e:1a:7b:03:3d:c5:98:45:8a:68:10:ff:f3:f7:91:
                    81:67:5e:0d:fa:48:e8:d0:09:3d:bc:a0:a1:f9:75:
                    1b:54:58:e8:6a:33:6c:3b:ff:25:d0:90:9c:5e:78:
                    db:23:44:74:fc:c7:9b:d3:b6:d7:df:64:ef:9d:d1:
                    3c:9d:9a:6b:3c:db:db:73:b0:59:05:43:93:75:83:
                    98:bd:ac:fb:02:4e:57:8c:ef:aa:00:cd:eb:57:0d:
                    f6:6c:43:fd:f8:1d:b5:dd:90:36:8a:be:d8:b6:98:
                    c2:3b:49:07:05:19:62:96:62:35:1a:e2:f1:67:bd:
                    28:67:92:da:4b:07:fc:3d:62:95:2c:6b:65:d4:b5:
                    24:90:b1:2e:b9:0e:e2:94:76:60:16:30:b4:0d:c6:
                    78:8b:07:69:d8:fc:66:8c:90:ce:b6:52:4e:1b:1b:
                    b6:9c:45:61:04:0c:05:38:a8:3a:63:0a:d6:cd:2b:
                    de:62:7c:ad:93:cf:d6:e5:13:75:db:cb:a9:05:94:
                    31:f4:17:2f:c5:c2:cf:8e:aa:0c:83:72:12:df:7e:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:74:92:6B:CD:B5:51:06:1A:94:A6:21:18:A0:8A:72:43:31:1A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/86ce4399-1b72-390d-8570-47106748f50a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:13:2d:96:bb:8c:47:58:c0:44:b5:09:82:e6:61:eb:45:8f:
         67:ed:07:c4:d5:03:45:22:12:99:ed:6f:b3:4c:88:42:f0:be:
         ee:b1:b5:76:a3:ff:25:de:f1:5e:6c:8a:e6:59:ec:dc:f8:0e:
         60:34:72:6d:f3:0b:b2:7b:f1:ef:ab:50:4a:fc:33:11:93:32:
         e5:3b:60:5e:39:56:d1:3f:89:69:f3:78:77:4e:20:01:0c:9e:
         fb:df:1f:b9:a1:34:c5:3e:ff:31:51:4c:fc:8c:1a:1b:54:9d:
         73:dd:4c:93:c1:e2:ba:24:77:77:2f:31:fd:b9:0c:20:21:20:
         89:ea:32:c5:a2:68:29:5d:02:69:a2:e1:f9:95:e8:bd:48:1d:
         1b:52:ff:74:f6:9c:5e:da:37:90:a6:a7:6f:0f:de:de:e5:5f:
         57:1a:79:7a:18:b4:e2:db:16:ac:16:9c:92:b5:84:07:0b:9c:
         91:6f:29:e0:16:43:27:20:19:86:db:3b:ee:ff:01:d8:bf:82:
         f8:6a:33:00:e6:d2:84:2f:20:fa:1e:d5:66:17:ec:cf:d6:bd:
         77:c6:7a:f7:03:48:d7:45:f7:9e:13:f5:2a:f8:86:eb:4d:79:
         7f:e8:b6:d9:67:dc:91:a3:b5:51:41:68:2c:84:3a:b8:3d:4a:
         b5:1c:ae:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:50:53 2026 by rpki-client