Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa
File:                     b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa (raw, json)
Hash identifier:          p+xw1aneocbVNMwuSCHxO9vVqpge5BZ6LMLe6HlrwzQ=
Subject key identifier:   4B:F3:AC:B1:8E:02:5A:5D:D1:5E:2B:C9:56:84:D4:DA:0C:29:3B:E7
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584DEF45DCD2B729736FFA13DBA0
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     397090
IP address blocks:        209.143.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:dc:d2:b7:29:73:6f:fa:13:db:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=35f789a2-850d-4d55-a749-a62276cdda72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:21:47:6d:14:9d:fc:80:2e:df:16:99:8a:
                    5d:68:0d:45:64:ff:f9:ba:fd:48:8b:68:68:79:be:
                    f3:a2:b9:fc:80:f2:03:1c:4c:5a:47:0d:4f:a5:4e:
                    77:db:20:c0:8d:88:ea:73:93:24:bc:57:b0:ab:7a:
                    78:44:c1:ec:a0:50:06:7c:08:fb:f9:a1:c9:1d:c3:
                    ed:c7:47:3e:02:eb:d7:5c:a7:03:2b:9d:4a:03:62:
                    c1:62:9f:6e:5b:13:4c:c6:5c:b8:74:c5:50:df:1f:
                    75:fa:11:d9:6f:d4:d9:f2:61:ec:4e:d7:25:c9:a9:
                    93:7c:aa:45:c1:95:0a:e7:c3:fd:b4:4a:17:d6:57:
                    a0:e8:bb:1b:6c:c9:00:02:64:0a:66:a5:9e:d2:58:
                    51:e5:ad:82:7a:2f:dc:f9:41:40:5c:28:8e:62:cf:
                    dd:e3:83:82:9d:e8:c6:41:60:18:e3:3e:cd:be:d1:
                    c7:f6:b2:ad:e8:23:9a:f5:74:69:60:47:d3:30:f1:
                    29:f4:89:83:9e:b6:1f:cf:81:1d:f9:9e:9e:be:47:
                    09:dc:dd:62:1b:9e:f5:81:05:95:fb:2d:88:ca:9d:
                    43:b4:45:81:19:8a:58:97:68:38:74:bc:6c:a4:56:
                    66:47:89:44:fb:fb:68:78:cd:b2:b5:46:96:32:23:
                    fa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F3:AC:B1:8E:02:5A:5D:D1:5E:2B:C9:56:84:D4:DA:0C:29:3B:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.143.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:c0:ee:79:e8:fd:68:4e:58:38:86:8a:c9:99:da:c1:66:bb:
         2e:6d:c2:cb:d7:51:f1:8e:cc:5c:f7:34:3d:ee:a3:05:cf:b9:
         8e:61:d2:4e:86:c7:03:96:1c:74:70:da:d6:b8:5d:03:cb:e0:
         ff:af:78:ad:b4:c2:46:b8:41:29:3c:7b:63:2d:b8:fa:57:22:
         a5:c3:9b:54:44:25:c6:1c:54:bb:31:ab:7f:f6:85:49:b4:24:
         a7:78:9e:ea:4f:15:8b:59:55:a3:21:82:07:4b:b8:b1:1a:66:
         b5:e4:e6:fa:74:27:9a:66:9f:58:ac:b6:7c:6d:20:1d:4c:a0:
         d8:13:a8:ac:3d:0b:ce:1b:17:48:e5:20:7a:fd:ac:90:49:a3:
         19:1f:03:e1:1f:77:b2:89:21:07:d2:cf:05:56:17:40:b0:4e:
         36:ce:9a:7e:b8:7f:a5:9e:d4:e5:1f:3d:ca:d5:1c:3c:08:76:
         47:4f:e1:00:70:f7:de:a0:1b:e9:4f:0a:d5:62:11:ed:54:44:
         be:d2:b6:d0:45:33:e0:05:ca:c9:06:10:09:79:d3:f8:28:13:
         96:a5:c7:f8:09:5e:e2:f5:2b:17:c9:c7:b4:90:60:c1:cd:a8:
         88:95:c9:e2:e2:0f:92:f8:d0:e7:2c:bf:e6:01:51:31:05:ab:
         01:d2:87:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:40:29 2026 by rpki-client