Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/78c3a0b8-8048-3bdd-bd47-1cd57e587bd0.roa
File:                     78c3a0b8-8048-3bdd-bd47-1cd57e587bd0.roa (raw, json)
Hash identifier:          YLVfjXF1emxI/Pc/3A4qScphjMBwZR7lD7kES9cVp/o=
Subject key identifier:   77:5F:87:BA:0E:8F:80:9B:96:58:9F:2B:A1:11:3C:15:63:E2:6E:8C
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D0895B6EBDC2F2C6F7C5D8B00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/78c3a0b8-8048-3bdd-bd47-1cd57e587bd0.roa
Signing time:             Mon 02 Mar 2026 09:49:42 +0000
ROA not before:           Mon 02 Mar 2026 09:49:42 +0000
ROA not after:            Sun 31 May 2026 08:49:42 +0000
asID:                     11059
IP address blocks:        65.86.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:08:95:b6:eb:dc:2f:2c:6f:7c:5d:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar  2 09:49:42 2026 GMT
            Not After : May 31 08:49:42 2026 GMT
        Subject: CN=9fcca8e1-f056-44f2-95e4-4d146b28e224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0f:ce:02:c7:8a:98:63:ba:66:df:a5:0e:5c:
                    35:e1:db:e8:13:20:1d:02:bb:6e:ee:29:4d:9a:2c:
                    af:76:72:0f:6a:2a:30:56:91:a5:79:d6:7e:ba:48:
                    f2:07:17:1e:71:a6:13:47:13:ae:2c:58:52:c8:d3:
                    7d:8d:db:4e:1f:7c:ad:a6:b5:5b:be:59:93:41:8e:
                    f9:32:47:db:c0:4d:f6:5a:f4:b0:a0:46:dd:35:b5:
                    25:4f:13:5e:ef:39:67:3a:e7:35:64:61:4f:00:78:
                    59:bc:22:13:da:09:8b:77:f3:4c:68:a5:8c:7b:1a:
                    6e:02:e2:43:a5:c0:fd:98:5d:5e:cb:0a:a4:75:bf:
                    27:de:78:21:16:54:1f:49:ad:0e:0d:48:f8:34:49:
                    79:51:88:b9:a8:7d:14:45:fe:2a:e6:eb:ad:9e:d2:
                    48:a1:84:5a:b2:ff:3d:cd:de:b8:85:23:f4:82:28:
                    41:64:ab:02:54:89:7d:2d:db:ac:00:37:ea:ae:d2:
                    fe:4f:db:a5:64:d7:f1:ae:c3:85:ed:21:dd:cf:a3:
                    6c:f7:08:74:ee:9d:71:71:c3:ce:be:4e:d7:b7:a5:
                    c4:e0:e8:7d:df:8e:31:1d:fc:6c:e3:57:dd:67:10:
                    c5:21:78:1e:fe:3f:41:9f:12:ef:33:fc:12:e6:df:
                    ab:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5F:87:BA:0E:8F:80:9B:96:58:9F:2B:A1:11:3C:15:63:E2:6E:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/78c3a0b8-8048-3bdd-bd47-1cd57e587bd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.86.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b5:68:3f:82:0b:24:f1:91:19:be:0b:05:3a:36:f1:11:6c:
         9e:41:33:71:be:fd:5b:41:f5:c9:42:c4:f5:1e:29:da:b3:56:
         13:08:73:2b:52:ef:42:05:1f:e8:fe:dd:55:59:9c:04:37:8a:
         12:5a:88:b0:c1:a4:c6:a0:e5:a7:fd:f1:d6:44:b5:97:31:ae:
         75:58:62:f9:52:48:95:cc:dc:09:f3:f7:45:73:a0:12:63:46:
         36:3a:06:29:b5:c8:c8:9c:a3:93:c1:f4:64:bf:be:39:d8:8c:
         27:8a:6c:db:7f:22:78:f2:5f:e0:d9:0c:34:bc:62:9a:d7:52:
         2d:8e:c3:2f:e4:92:8c:ba:0b:7d:b4:13:63:ef:e5:a7:54:53:
         4e:97:30:c2:43:69:ea:95:25:8b:b5:6f:d5:7d:63:e3:a8:01:
         19:99:2c:90:e6:00:32:fa:62:e0:7b:88:d5:2a:c5:4c:84:1f:
         71:20:ff:26:1c:dd:29:84:19:14:f1:6c:13:fd:38:0d:4e:b8:
         d5:dd:88:c8:4a:fc:1e:84:f7:6e:1a:b5:f2:7b:5c:41:d1:2c:
         8c:8f:7a:67:ae:43:e6:1c:fc:f7:07:e9:6a:dc:d4:42:2d:76:
         04:55:4c:86:17:46:20:39:6d:8b:74:ed:79:07:cf:fa:be:e5:
         14:35:7c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 22:21:33 2026 by rpki-client