Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/5c50b9ad-51dd-3267-9d0e-02b92dd96535.roa
File:                     5c50b9ad-51dd-3267-9d0e-02b92dd96535.roa (raw, json)
Hash identifier:          4LN3OzZjPeLxg1mEoU/jWkFyG42CHTry8AXvMHkB1Bc=
Subject key identifier:   85:74:05:B3:9C:BD:FB:F6:17:2A:52:49:95:35:E7:F7:D2:51:90:D9
Certificate issuer:       /CN=78108340-c24e-45fa-a787-5578ce17c653
Certificate serial:       010D0C9F4328584D09125DDE7249C9D4D3252FC0
Authority key identifier: 96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/5c50b9ad-51dd-3267-9d0e-02b92dd96535.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     11796
IP address blocks:        172.82.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:5d:de:72:49:c9:d4:d3:25:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78108340-c24e-45fa-a787-5578ce17c653
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=2deefa9b-0fa8-47df-801d-bcc99d5b671d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ac:eb:b3:70:fd:95:fe:f9:ce:94:85:5f:14:
                    31:9d:40:69:b0:0e:a7:9c:e0:67:4c:5a:f5:a2:18:
                    52:4c:bc:8e:1d:f8:38:82:93:81:ac:17:05:48:48:
                    f9:19:95:e8:3c:d1:c0:be:69:2d:88:b9:08:5a:ca:
                    e2:2d:43:67:bf:66:ba:9e:ed:94:02:d5:b2:65:ed:
                    7e:95:a0:45:07:ce:c9:13:34:13:9e:4f:78:6c:56:
                    ca:30:a3:79:95:2d:e1:88:03:81:aa:25:d7:03:2e:
                    43:01:54:fc:99:aa:77:f1:60:d0:10:1c:08:27:ca:
                    10:22:5b:c8:97:96:21:55:ca:79:a7:1e:5d:0b:32:
                    14:3d:21:e8:2c:3e:c3:96:fa:0f:6e:5e:c1:24:70:
                    a7:6d:47:2b:98:4b:7a:68:44:0d:ee:25:71:dd:b2:
                    35:33:96:f3:a9:32:d1:a7:59:a5:d0:92:24:92:13:
                    d6:c0:24:e6:3c:b5:b1:00:a1:a9:74:a0:99:fc:2d:
                    c2:d8:fa:55:68:98:1b:b3:0b:49:45:ed:29:f4:cb:
                    e6:c8:bd:4c:a5:cc:f8:06:4c:20:d6:42:d7:2d:1f:
                    dc:fc:af:ca:15:60:e3:13:6f:41:88:93:95:c7:ed:
                    ca:e3:bd:a1:b0:71:ab:74:6d:1c:80:52:3f:98:47:
                    58:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:74:05:B3:9C:BD:FB:F6:17:2A:52:49:95:35:E7:F7:D2:51:90:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/5c50b9ad-51dd-3267-9d0e-02b92dd96535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl

            X509v3 Authority Key Identifier:
                keyid:96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d2:e5:6f:5e:a6:6a:9e:43:24:04:10:59:22:c5:de:ad:5e:
         a7:91:19:4f:26:3c:1f:c7:45:81:15:ac:9e:7f:30:bf:16:31:
         b1:a2:99:93:5d:59:ea:c1:c8:73:b5:73:a1:b3:0f:b7:02:7d:
         14:69:f2:bd:8e:48:59:4c:a5:9a:f1:ef:58:68:fa:b3:96:1f:
         1a:ce:00:41:67:42:02:4e:2a:4e:a4:09:d8:66:8c:3d:1f:3f:
         8d:28:d8:60:4c:90:21:bb:43:24:1d:33:c5:5c:ce:ae:df:49:
         9c:47:ec:47:9c:71:ab:a4:58:c9:f8:78:d6:68:66:25:17:f5:
         74:d2:ce:7b:95:85:8e:3e:fd:4a:ad:da:47:45:dd:ea:ec:95:
         4f:15:6e:85:fe:a7:a0:d9:c8:34:72:6f:34:6e:82:e2:f6:94:
         5e:79:36:59:ad:19:83:09:aa:e7:e1:c2:34:46:fb:09:08:dd:
         9a:40:b0:32:27:6f:63:2e:81:7c:6d:f6:c2:6e:61:44:2f:0f:
         62:1a:aa:c0:39:4b:e8:4f:a8:4a:d9:c6:09:be:01:bc:6b:31:
         96:b1:b8:34:52:c5:da:30:37:02:95:49:60:59:a7:90:11:9c:
         fd:46:d3:92:28:70:9e:74:d3:4f:b9:46:90:61:ec:80:8f:bf:
         a3:4b:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 15:27:55 2026 by rpki-client