Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/5a7d536a-75e2-3fe4-bcf3-39be580ae546.roa
File:                     5a7d536a-75e2-3fe4-bcf3-39be580ae546.roa (raw, json)
Hash identifier:          eHGoObSmEXAXwOcxFCLfkJJmQGkGuc1NVMcaAQFSguw=
Subject key identifier:   09:22:32:52:8A:36:60:8A:02:28:B4:CE:7C:9B:3F:72:24:F2:AA:70
Certificate issuer:       /CN=a78600ec-48a2-4f1a-8904-302418a38c57
Certificate serial:       010D0C9F4328584ED001D7C7BE89B62700839290
Authority key identifier: 01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/5a7d536a-75e2-3fe4-bcf3-39be580ae546.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        167.124.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:d7:c7:be:89:b6:27:00:83:92:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a78600ec-48a2-4f1a-8904-302418a38c57
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=ea7e12b7-73fb-4686-8d65-2b78e2f878fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c6:9e:05:17:71:9c:b4:1c:93:00:47:5a:97:
                    ed:be:35:f2:2e:d3:47:60:44:d6:b2:0b:59:2f:c5:
                    b4:79:0e:bc:b6:98:9a:41:7c:53:cf:bc:29:c8:fd:
                    b8:6a:9a:fa:c2:fd:ad:c8:dc:74:75:be:4c:7e:eb:
                    ff:b1:53:ba:5e:03:cb:e8:cd:3d:13:56:41:41:71:
                    6e:68:4d:4f:c0:e0:57:54:30:22:44:84:4d:f6:74:
                    47:79:b0:84:f5:1f:aa:04:28:0a:df:90:50:7d:5e:
                    82:4f:06:d0:03:77:1c:9a:3e:26:1f:19:e9:34:36:
                    0c:c9:0a:0b:56:17:07:fc:bb:2f:97:68:74:ba:f4:
                    9f:ec:b2:25:8b:20:89:0b:ef:fd:5d:ab:96:33:6c:
                    ae:0d:34:88:e6:9f:e1:bc:94:5c:ce:50:1e:76:62:
                    3e:12:3c:6d:f2:d3:f0:10:25:c0:07:08:80:0d:1d:
                    9c:75:67:9a:21:00:66:02:7d:21:5e:bb:59:9d:4d:
                    73:90:8c:96:0a:b6:e7:64:92:a3:b9:8a:b3:91:ae:
                    4f:d8:77:51:90:d4:d3:61:56:21:eb:fc:51:a9:33:
                    6d:39:69:13:8a:22:84:8d:41:41:4d:ff:d7:a3:51:
                    0d:2e:25:7b:2c:2f:e2:4c:ab:e4:01:ec:e5:83:3d:
                    ce:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:22:32:52:8A:36:60:8A:02:28:B4:CE:7C:9B:3F:72:24:F2:AA:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/5a7d536a-75e2-3fe4-bcf3-39be580ae546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl

            X509v3 Authority Key Identifier:
                keyid:01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.124.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:b1:8f:9e:b2:0e:d2:b1:60:e1:8d:2f:76:cf:c7:c5:99:49:
         dc:44:bb:30:74:99:f4:31:57:dc:6a:4e:49:46:db:a4:c5:05:
         5d:13:0d:11:88:24:5c:cb:30:36:71:09:cf:11:21:90:28:c0:
         3f:00:6a:f6:57:b8:5e:38:b9:34:e6:74:78:7a:97:25:07:df:
         a7:32:f2:84:89:a0:30:d6:66:1a:52:03:c2:ef:62:0d:94:0e:
         aa:8f:56:7a:2d:f0:a5:b9:87:46:31:f8:4e:41:e9:e7:e6:67:
         50:1e:9d:49:60:de:c7:aa:6a:bc:34:40:2f:ce:fd:7e:3e:ff:
         ee:71:97:71:7e:7c:6a:b0:91:00:10:c3:d8:fa:76:1a:ec:48:
         5a:18:ce:33:85:4b:22:94:5b:84:76:6c:df:4e:8b:54:e8:63:
         37:f7:e3:3d:d4:fc:1d:90:b6:f3:ec:6f:82:90:95:48:2d:d6:
         56:09:3f:b6:4e:87:66:f6:91:96:fe:84:80:e9:c8:11:b3:a9:
         e1:56:f6:3e:49:d6:c1:56:a7:34:f5:9e:4e:b8:25:0c:e1:df:
         07:66:47:45:59:dd:eb:bf:70:07:7e:a0:c4:61:c3:ba:b2:e5:
         c0:d2:ab:04:fe:d6:40:e6:eb:5b:0f:8a:4f:12:6c:37:e9:cd:
         64:cb:dd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:38:22 2026 by rpki-client