Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/f001cb0f-d761-3d0e-ba31-74ffb3b855c4.roa
File:                     f001cb0f-d761-3d0e-ba31-74ffb3b855c4.roa (raw, json)
Hash identifier:          4CKlu0T6pg7vH3PVbWKqQhvtqJQfJC2D3EgliwErhd0=
Subject key identifier:   B6:F0:4E:8A:66:F3:CD:E7:54:66:D4:71:5B:2D:3B:34:C9:1E:53:89
Certificate issuer:       /CN=2e78bb85-c387-4ef5-a2b3-647636da166a
Certificate serial:       010D0C9F4328584F49738BD4228D12EAE9FDA480
Authority key identifier: 0A:84:42:F9:E6:92:B2:32:2E:9E:46:28:90:E2:E2:08:C1:24:DA:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/f001cb0f-d761-3d0e-ba31-74ffb3b855c4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     57624
IP address blocks:        208.78.36.0/24 maxlen: 24
                          208.78.37.0/24 maxlen: 24
                          208.78.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:8b:d4:22:8d:12:ea:e9:fd:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e78bb85-c387-4ef5-a2b3-647636da166a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5abf5cd2-5482-4103-9dfe-e9545e1a2a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0c:5d:de:39:4b:b4:02:20:32:57:8b:03:3f:
                    5b:22:d4:e8:ab:9a:60:a3:49:fd:ab:25:0b:67:c9:
                    0d:27:39:be:5e:77:5f:74:02:12:d1:77:76:49:92:
                    a5:a4:de:9f:c2:cf:ac:1a:57:92:c5:73:52:d6:b6:
                    91:63:2c:eb:b7:90:92:67:2c:0f:d2:d6:ef:d9:5e:
                    e1:2a:ea:e9:83:f7:de:eb:8d:5a:15:66:f2:46:cd:
                    0d:e2:7d:14:21:52:54:51:89:fd:03:9e:f1:0d:21:
                    ee:81:af:02:70:4b:f8:32:c4:50:73:59:25:49:f8:
                    b7:a6:7b:29:61:04:fa:9f:b0:db:ff:23:0e:3c:d6:
                    c3:da:21:a5:f1:84:7e:b7:ec:9b:eb:9e:a0:49:03:
                    6a:1c:7f:48:d5:84:61:7d:89:40:51:0b:39:35:4f:
                    1d:b2:20:4f:55:8e:07:b6:2f:70:74:a5:d9:1b:4e:
                    95:a8:11:69:bf:79:dd:a9:a0:63:43:8d:2f:59:dd:
                    2e:c9:13:01:65:21:65:41:38:5b:fd:a3:fe:b4:1e:
                    d1:c4:21:c5:f8:4c:80:22:75:74:83:73:e1:b8:8e:
                    68:ba:c5:b2:f0:0e:b6:04:7b:b1:54:35:48:02:b0:
                    1f:8f:ef:ef:a8:8e:59:09:1f:c0:74:03:e4:d4:a2:
                    cf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F0:4E:8A:66:F3:CD:E7:54:66:D4:71:5B:2D:3B:34:C9:1E:53:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/f001cb0f-d761-3d0e-ba31-74ffb3b855c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a/2e78bb85-c387-4ef5-a2b3-647636da166a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:84:42:F9:E6:92:B2:32:2E:9E:46:28:90:E2:E2:08:C1:24:DA:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e78bb85-c387-4ef5-a2b3-647636da166a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.78.36.0/23
                  208.78.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:4a:f6:1a:95:9c:ce:36:f6:8d:c7:b1:29:0f:49:b4:15:fe:
         c4:33:18:99:c4:e1:a4:54:a4:66:35:e7:6c:7c:6c:e8:7a:2a:
         60:51:23:44:33:9f:09:0b:f5:23:b6:3f:f9:27:3f:fb:f7:32:
         b0:e8:b4:7e:f1:5c:00:39:07:af:8d:62:51:0b:17:54:a6:6e:
         73:0c:7e:72:ec:0f:b9:19:49:4d:f1:c6:06:31:07:39:64:5f:
         96:51:8a:ae:72:d6:67:d6:31:68:df:c5:23:62:f5:46:b2:e4:
         ff:d3:9e:f0:12:e9:b9:52:7e:9c:2d:23:f2:86:98:41:79:ad:
         d9:37:81:7e:1f:55:db:e9:1f:c0:2d:39:d9:cb:5e:60:9d:92:
         e6:9f:30:28:52:ef:82:da:00:00:ac:f2:a6:20:bf:74:ad:99:
         b7:21:7c:1c:55:98:dc:6f:4f:db:19:27:6f:2f:81:19:e9:60:
         ca:a3:a6:96:c8:64:13:3f:a6:38:ac:22:2f:42:4f:9b:91:c4:
         0d:7d:1b:29:88:2d:07:7d:8c:bc:d0:70:d5:78:73:45:20:20:
         7c:61:97:70:0f:bb:c8:e1:91:dd:df:4d:67:64:d5:77:9c:16:
         d5:ce:2e:4b:97:d8:7e:5a:2f:1a:e3:ce:dc:de:7c:ab:16:6c:
         70:8e:bc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:34:56 2026 by rpki-client