Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/78ba76c7-dfdf-310f-93a4-2a303552b2f8.roa
File:                     78ba76c7-dfdf-310f-93a4-2a303552b2f8.roa (raw, json)
Hash identifier:          oqFncN/E4+jmhDXjsWBk8SoP+xFtvOENXO7A9dflTZU=
Subject key identifier:   67:63:12:CF:0C:64:60:1B:2B:46:F2:7C:67:FB:32:67:C6:92:84:AA
Certificate issuer:       /CN=4b78045f-821f-4ce4-95e9-c06dec8a1a7b
Certificate serial:       010D0C9F4328584DF3BF6062BE3C271569D62DC0
Authority key identifier: 30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/78ba76c7-dfdf-310f-93a4-2a303552b2f8.roa
Signing time:             Mon 25 May 2026 15:28:36 +0000
ROA not before:           Mon 25 May 2026 15:28:36 +0000
ROA not after:            Sun 23 Aug 2026 15:28:36 +0000
asID:                     399955
IP address blocks:        68.232.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f3:bf:60:62:be:3c:27:15:69:d6:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b78045f-821f-4ce4-95e9-c06dec8a1a7b
        Validity
            Not Before: May 25 15:28:36 2026 GMT
            Not After : Aug 23 15:28:36 2026 GMT
        Subject: CN=78a84556-4e30-4a58-9869-08b932c13648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d0:27:52:39:69:5a:ca:d3:19:fb:1d:74:8f:
                    9b:5d:c4:eb:61:dc:53:28:fa:d0:e1:39:05:ba:4f:
                    45:3f:d5:b4:f4:c9:5b:44:b6:5b:5e:8c:a2:25:dc:
                    7f:47:5b:90:18:32:2c:2f:4b:1c:66:5b:3b:9c:17:
                    b1:1a:e7:fc:6d:2c:76:95:bb:bd:a9:2f:e6:f7:33:
                    d2:6d:0c:ba:e0:47:92:e9:1d:be:4c:2a:ae:fd:c0:
                    4a:ed:9a:04:d2:03:32:5c:f1:cf:d9:81:8d:08:d0:
                    33:6e:46:f3:be:4e:7b:a6:6c:18:61:bd:5f:14:0a:
                    96:41:28:6e:d5:0e:4b:02:da:ef:a7:91:c8:ca:0d:
                    55:64:86:a2:d8:53:91:ad:4f:70:e3:94:8d:ac:37:
                    f9:35:2d:dd:48:de:cd:12:58:2c:36:b8:9b:c8:a7:
                    96:02:c0:de:c4:27:8a:a8:73:19:a0:17:4e:4f:13:
                    cf:53:13:d3:b8:4a:29:7a:15:d4:55:e7:eb:88:d5:
                    03:89:9f:f3:f2:39:5d:60:2a:9e:12:89:38:c7:6b:
                    c9:36:d5:e5:24:f5:a5:1b:79:15:77:60:ff:e4:ce:
                    46:af:8d:5a:27:cf:1c:c0:45:90:f0:95:fc:cf:bf:
                    b8:6e:83:60:e6:5d:43:be:5d:cd:da:11:e8:e7:09:
                    4f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:63:12:CF:0C:64:60:1B:2B:46:F2:7C:67:FB:32:67:C6:92:84:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/78ba76c7-dfdf-310f-93a4-2a303552b2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.crl

            X509v3 Authority Key Identifier:
                keyid:30:4A:5B:F5:4E:32:09:7F:19:A7:26:E7:09:68:7F:AD:E3:63:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4b78045f-821f-4ce4-95e9-c06dec8a1a7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.232.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:58:34:92:fa:69:e7:5c:5a:af:56:2d:69:3a:a1:c8:c6:2c:
         6c:96:cf:f5:fb:bf:a4:e1:8f:10:c9:3d:f3:ba:8d:ad:c7:49:
         4a:62:fd:67:4d:16:de:1b:dc:89:f6:49:6c:60:2d:0e:9e:b6:
         af:37:65:a8:c6:48:a1:52:47:f5:fd:7f:43:00:53:db:51:52:
         cf:87:04:6f:46:88:fb:24:93:26:18:22:ac:90:57:de:11:1c:
         85:48:eb:41:b4:41:18:0e:6a:ea:c3:ad:c9:5b:f4:d7:34:a7:
         db:b1:7e:dd:be:63:d3:2b:88:82:2e:90:ea:18:87:c0:b2:cd:
         a8:57:8d:c7:16:ec:6c:64:18:b5:3c:77:f0:e2:4b:1b:86:94:
         a7:40:2c:65:a3:de:33:7d:ac:3f:12:63:b0:aa:3c:5f:9b:38:
         5a:be:d3:3e:e8:40:69:f0:d7:63:9a:bd:e6:0f:cb:81:c7:d9:
         9b:47:95:27:f8:f7:d8:08:65:65:88:2f:16:cb:54:4c:2d:d8:
         8d:b3:bd:95:18:f3:25:a4:b5:e5:00:71:22:96:66:0d:37:c2:
         8d:e8:29:1a:70:8c:84:02:5c:dd:5d:6b:84:da:f5:e2:97:f5:
         aa:7a:c7:c2:f1:a4:1a:c4:dd:90:78:36:07:55:46:58:d1:f0:
         43:45:fc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 13:32:45 2026 by rpki-client