Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/95de26fa-af65-3b81-9d3f-b389e1800c8e.roa
File:                     95de26fa-af65-3b81-9d3f-b389e1800c8e.roa (raw, json)
Hash identifier:          2soG69XIYAvazSHuxRa5VTMtSmh5ITOgl2kztnOEgF8=
Subject key identifier:   C5:4C:8B:3F:8F:A2:64:81:50:6E:F0:5A:31:E4:84:50:2C:41:5D:59
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584DEDE0B525CA62C73F7A2AA780
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/95de26fa-af65-3b81-9d3f-b389e1800c8e.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     834
IP address blocks:        207.210.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:b5:25:ca:62:c7:3f:7a:2a:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=ff10d764-f0f4-4634-9839-3ee7e94c6a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ac:89:7f:fa:12:63:b3:de:cc:62:56:9b:34:
                    e4:9c:3a:12:a3:ff:0c:4c:2c:d4:25:36:0f:83:33:
                    1e:93:b6:3e:de:17:bb:62:4d:12:41:f5:a5:5c:4f:
                    51:89:b1:da:cf:3e:b9:ce:67:cb:c0:6f:90:05:05:
                    2f:5c:6f:63:f5:fc:03:4f:75:44:dd:d6:3c:b6:e2:
                    23:c5:1a:43:e8:a6:52:2e:30:57:10:04:93:d1:28:
                    07:2d:5f:1e:32:8e:38:d6:87:81:95:51:83:99:87:
                    cf:be:7c:8e:5c:2f:c8:18:be:18:24:20:7a:3d:95:
                    98:85:3b:6d:04:7d:76:eb:7d:f5:82:03:de:1b:23:
                    8e:26:f0:39:51:e2:f8:5e:3c:37:0a:e9:ca:eb:3f:
                    95:1e:d5:d4:83:7e:4c:3a:b2:14:b0:a1:a2:f3:51:
                    dc:55:38:6d:b7:b7:6f:4d:d2:39:2a:f0:bb:81:fd:
                    38:f8:6f:b4:53:3e:a3:04:22:6d:76:2f:56:e9:2f:
                    a6:92:2c:0b:fd:1c:a4:db:58:c8:03:62:a2:90:13:
                    a0:54:31:c2:09:cc:d8:5f:16:c9:a3:75:02:03:e1:
                    6f:dd:bc:b6:9b:7b:78:a8:0c:7e:e6:f1:98:43:1f:
                    c6:3a:b5:8c:fb:63:b2:5f:4c:ef:9a:a9:b6:c9:28:
                    7c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4C:8B:3F:8F:A2:64:81:50:6E:F0:5A:31:E4:84:50:2C:41:5D:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/95de26fa-af65-3b81-9d3f-b389e1800c8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.210.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b2:55:d6:2c:ed:39:82:22:56:71:5c:45:6e:f6:02:a3:7f:
         ab:2e:c6:f0:61:f2:dc:fd:02:fe:05:11:ac:b6:58:0b:c7:d4:
         30:0e:f0:7e:af:e8:33:0c:20:b1:dc:d5:86:d8:72:e1:33:04:
         10:6d:f0:ee:a7:7e:3f:b4:9f:2d:46:d1:92:bc:2f:04:7a:f5:
         7e:ce:a4:a4:6e:b5:f1:a3:d9:9b:87:c6:dc:c4:d9:3c:d4:91:
         06:ed:e5:46:cc:84:77:93:3d:79:18:4a:02:d9:52:50:6a:d4:
         76:0c:9f:c6:a1:80:72:60:89:d4:b0:b2:a2:05:ea:2d:61:9c:
         67:bc:ce:60:ff:8a:ab:d2:4e:96:b0:35:90:99:c5:fd:02:da:
         9f:d2:4f:37:fd:fd:96:14:5a:56:5a:f5:d8:89:1e:26:72:f9:
         bf:70:71:ea:a8:1e:b3:d1:c1:b1:f9:82:2d:8c:2a:82:ee:de:
         68:06:e6:03:4d:89:88:68:30:68:6b:bd:dc:9b:68:2a:7d:13:
         bf:13:b7:ec:b4:86:28:57:c1:17:7a:75:16:36:cf:2f:b1:93:
         46:d1:a4:c8:49:07:2e:43:75:79:e5:67:7e:49:0b:3f:b4:a6:
         65:23:e2:5e:ff:b7:e2:03:76:ea:4c:ff:88:0b:38:9a:1c:5c:
         d3:82:bf:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4LUlymLHP3oqp4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk
ZjgwMB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk
ZmYxMGQ3NjQtZjBmNC00NjM0LTk4MzktM2VlN2U5NGM2YTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KyJf/oSY7PezGJWmzTknDoSo/8MTCzUJTYP
gzMek7Y+3he7Yk0SQfWlXE9RibHazz65zmfLwG+QBQUvXG9j9fwDT3VE3dY8tuIj
xRpD6KZSLjBXEAST0SgHLV8eMo441oeBlVGDmYfPvnyOXC/IGL4YJCB6PZWYhTtt
BH126331ggPeGyOOJvA5UeL4Xjw3CunK6z+VHtXUg35MOrIUsKGi81HcVThtt7dv
TdI5KvC7gf04+G+0Uz6jBCJtdi9W6S+mkiwL/Ryk21jIA2KikBOgVDHCCczYXxbJ
o3UCA+Fv3by2m3t4qAx+5vGYQx/GOrWM+2OyX0zvmqm2ySh8XwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMVMiz+PomSBUG7wWjHkhFAsQV1ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh
NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvOTVkZTI2ZmEtYWY2NS0z
YjgxLTlkM2YtYjM4OWUxODAwYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj
NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0
ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5
MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz9JOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAECyVdYs7TmCIlZxXEVu9gKjf6suxvBh8tz9Av4FEay2WAvH1DAO8H6v
6DMMILHc1YbYcuEzBBBt8O6nfj+0ny1G0ZK8LwR69X7OpKRutfGj2ZuHxtzE2TzU
kQbt5UbMhHeTPXkYSgLZUlBq1HYMn8ahgHJgidSwsqIF6i1hnGe8zmD/iqvSTpaw
NZCZxf0C2p/STzf9/ZYUWlZa9diJHiZy+b9wceqoHrPRwbH5gi2MKoLu3mgG5gNN
iYhoMGhrvdybaCp9E78Tt+y0hihXwRd6dRY2zy+xk0bRpMhJBy5DdXnlZ35JCz+0
pmUj4l7/t+IDdupM/4gLOJocXNOCv3s=
-----END CERTIFICATE-----
Generated at Tue May 26 08:36:02 2026 by rpki-client