Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/5a7d536a-75e2-3fe4-bcf3-39be580ae546.roa
File:                     5a7d536a-75e2-3fe4-bcf3-39be580ae546.roa (raw, json)
Hash identifier:          lelyC/Rxe5OVL0bdLPQcZNp7kVgGccgbgmSyhjKfJ98=
Subject key identifier:   28:4C:5C:26:99:59:C5:5D:2F:AC:F3:3E:8D:D5:B5:19:DD:EC:77:1D
Certificate issuer:       /CN=a78600ec-48a2-4f1a-8904-302418a38c57
Certificate serial:       010D0C9F4328584E2D9F0AC3C9707F825F39DD00
Authority key identifier: 01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/5a7d536a-75e2-3fe4-bcf3-39be580ae546.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        167.124.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:0a:c3:c9:70:7f:82:5f:39:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a78600ec-48a2-4f1a-8904-302418a38c57
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=103f31eb-1931-48fb-a5f3-1d8622d9b36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7b:8e:07:1f:61:05:9a:84:e4:c6:c5:dd:84:
                    4a:06:79:a1:b5:c4:7c:a3:e0:98:ef:58:68:d1:c8:
                    47:04:2a:ed:5a:52:df:23:2d:0e:f6:0a:90:04:2d:
                    56:78:8e:aa:b8:42:60:da:8f:2b:6a:c5:fe:03:b6:
                    c4:2b:7e:8d:9a:58:9d:bb:93:68:9f:e3:e9:15:52:
                    17:2a:7f:78:8d:cc:a2:70:b5:11:38:5f:b1:f6:17:
                    3a:99:21:c4:e2:2a:9b:fd:7f:5b:f9:6d:8e:45:c4:
                    e9:be:45:fa:55:78:12:4b:81:93:f2:99:e2:9d:76:
                    4a:ee:55:c6:36:d9:9e:ce:a5:b2:57:7b:91:d8:cb:
                    e8:5a:07:e2:c6:1a:84:ad:7d:2e:02:8e:c5:40:59:
                    c5:b7:e6:79:c7:e3:f5:13:ac:7a:18:57:1b:af:63:
                    bf:c2:41:55:1f:26:38:a1:c5:93:a5:64:82:c5:47:
                    08:c4:e4:9d:6c:99:3a:0c:6e:61:c8:98:56:4d:46:
                    c1:c6:10:27:47:77:35:f8:94:ad:2d:65:b7:96:a2:
                    10:b5:78:37:f2:13:a1:a9:28:25:f9:0f:6e:ca:c6:
                    81:ea:35:a9:c6:3b:92:e5:31:37:a2:c4:28:32:57:
                    0e:4e:c6:f1:2e:02:4c:3c:0f:f3:5d:87:f9:07:7d:
                    5a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4C:5C:26:99:59:C5:5D:2F:AC:F3:3E:8D:D5:B5:19:DD:EC:77:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/5a7d536a-75e2-3fe4-bcf3-39be580ae546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl

            X509v3 Authority Key Identifier:
                keyid:01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.124.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a7:e7:83:4e:a7:ad:17:71:17:c8:c0:76:cf:1d:33:c9:b7:
         7f:06:ab:35:01:91:b8:a2:f4:45:70:16:a6:85:b7:0d:a5:5f:
         d1:64:78:73:6d:0a:49:d9:8b:5d:e0:a5:3f:7c:fb:c8:80:1a:
         46:a3:13:fb:94:39:bb:db:47:b6:d9:65:e1:af:95:80:3f:f4:
         4c:76:e1:68:5e:6b:58:02:ef:c6:bd:e7:e5:70:95:aa:43:76:
         b2:be:eb:50:24:a8:a7:c9:27:3c:59:17:2a:df:df:5b:d4:71:
         c8:6d:3f:80:b8:3e:8f:eb:d9:1e:63:d4:f0:5b:32:3e:45:8b:
         c9:9f:d5:cb:14:52:c3:0b:51:2d:da:f1:77:b2:e5:da:21:1a:
         2b:5c:d0:98:f7:ce:b9:09:87:7a:1f:0e:34:48:5a:6b:10:93:
         4a:3f:a7:9b:79:32:e3:24:b6:4d:99:87:a9:4c:90:d6:ab:c2:
         26:c7:b4:58:e0:a1:f9:1c:a9:9b:25:33:44:cc:02:cf:4f:0a:
         67:fb:55:bc:1d:53:5f:e3:d2:52:fb:83:3c:31:8a:ab:9d:14:
         45:3e:e7:af:aa:34:fa:bd:1c:c3:6b:93:86:3a:f9:29:f9:e3:
         a9:ab:54:4d:81:ee:16:f2:34:ed:c6:40:b3:8e:80:07:bd:9f:
         20:c0:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:55:31 2026 by rpki-client