Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7c9c9646-d5ca-3240-9561-0c054d33ec52.roa
File:                     7c9c9646-d5ca-3240-9561-0c054d33ec52.roa (raw, json)
Hash identifier:          p/1dHN4tvaFdIUUv/EmslJJja72wGeKBq1GaRPTPcjQ=
Subject key identifier:   6B:64:2C:67:60:DC:70:F4:37:19:05:5B:61:85:F4:9C:EC:B8:4A:14
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F86DD953809B850B71B376B80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7c9c9646-d5ca-3240-9561-0c054d33ec52.roa
Signing time:             Sat 17 Oct 2026 01:00:13 +0000
ROA not before:           Sat 17 Oct 2026 01:00:13 +0000
ROA not after:            Fri 15 Jan 2027 02:00:13 +0000
asID:                     264288
IP address blocks:        149.78.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:dd:95:38:09:b8:50:b7:1b:37:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Oct 17 01:00:13 2026 GMT
            Not After : Jan 15 02:00:13 2027 GMT
        Subject: CN=85ca7613-a2e1-47b9-9c92-0e48eac706d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:02:5f:ec:1a:d3:11:44:04:e4:24:68:18:12:
                    8a:91:d8:e0:0e:49:d5:7b:4e:cd:49:ff:97:dc:65:
                    a6:6d:f0:67:06:74:bd:dc:30:a4:3d:c3:0f:9f:33:
                    02:72:9f:db:0c:86:3b:01:a8:56:1d:9a:31:48:11:
                    3b:48:f1:94:16:58:1e:9f:73:c1:ef:3e:89:4c:b3:
                    01:9c:36:a9:26:4d:da:bc:8a:5c:ff:54:d9:64:6b:
                    14:f5:c3:c0:9f:e1:2d:de:35:f7:70:48:71:71:7d:
                    a3:22:a0:b4:98:a7:c4:27:ec:6d:29:11:83:1e:69:
                    3a:dd:67:17:0a:a9:9b:9e:68:0b:ef:da:08:cb:c4:
                    f1:9c:0c:82:30:bc:3e:0c:ac:7a:96:c9:25:7b:93:
                    db:4a:a7:f0:c8:d1:13:b5:b6:0e:99:ed:73:6d:3e:
                    86:5d:15:5e:ac:25:c5:e2:d6:34:1c:cd:9d:72:28:
                    39:67:33:95:46:0b:54:ad:d3:99:e6:2a:ee:cf:12:
                    d3:47:7b:23:90:ef:b8:9b:39:87:1a:61:0e:c5:c1:
                    18:ef:33:11:ca:c7:61:b6:81:45:0a:7d:6b:22:98:
                    21:da:72:d9:86:a9:ad:e3:6c:79:58:0d:80:42:e7:
                    62:a1:28:ff:12:97:78:30:84:90:14:58:55:e7:b4:
                    5e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:64:2C:67:60:DC:70:F4:37:19:05:5B:61:85:F4:9C:EC:B8:4A:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7c9c9646-d5ca-3240-9561-0c054d33ec52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.78.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:85:8f:be:15:a0:9f:8e:2e:d6:c0:56:35:10:72:4d:b0:60:
         5a:db:b2:4f:fa:23:75:2e:48:f0:50:a7:eb:96:e6:0f:b4:0a:
         a7:16:12:ff:3d:09:de:81:12:ae:25:f2:4b:2e:27:7e:a3:30:
         03:00:c8:4e:57:fc:91:0f:19:53:f0:08:6e:59:2b:1e:ea:c1:
         63:92:80:6c:99:e8:44:0b:21:41:92:bf:b9:69:47:e6:ed:df:
         6c:0d:19:d5:7a:af:61:d3:9b:89:c5:1f:67:db:22:67:66:4f:
         83:6d:de:96:9b:aa:f2:0e:4e:d6:e2:83:6d:81:90:2b:f1:59:
         20:b5:04:6c:78:2e:90:e4:fc:90:4d:ce:6e:a6:d8:40:ef:5c:
         77:e6:19:20:32:fb:08:55:71:ca:2e:3b:4f:a6:c5:a7:46:21:
         a1:0a:8b:59:83:9b:7d:c8:09:cf:29:ad:ab:0f:c1:e6:34:9a:
         e7:99:74:77:e6:28:34:0b:a1:16:81:83:34:e1:5f:b6:8a:68:
         f9:10:1b:d4:e1:70:f6:7f:09:04:ae:9a:0a:e1:6c:be:cc:3b:
         71:31:cd:aa:ad:63:80:8a:5a:a9:ca:20:ca:f1:43:33:76:13:
         04:ce:4d:49:e7:07:50:2a:7f:e6:43:e8:55:fe:9e:c6:2e:0f:
         a1:d9:08:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:33:21 2026 by rpki-client