Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35/aa95133f-5eee-348f-a518-2a30f4e6d60c.roa
File:                     aa95133f-5eee-348f-a518-2a30f4e6d60c.roa (raw, json)
Hash identifier:          qk5Gc+gxpXC2/CVtg1oDnDxgua5Ec9i9WzMoKrhfahY=
Subject key identifier:   75:ED:7E:A5:77:D3:6A:8E:7A:E5:E2:2F:88:1D:7C:06:22:7C:8B:ED
Certificate issuer:       /CN=48cceee9-c5df-4d1e-92c9-804653987f35
Certificate serial:       010D0C9F4328584F4972B5C204D217D8BC7F3C00
Authority key identifier: 63:93:74:06:F5:F7:AE:2B:2B:E9:DF:72:BD:88:55:F0:84:57:4D:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35/aa95133f-5eee-348f-a518-2a30f4e6d60c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     4922
IP address blocks:        104.251.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35/48cceee9-c5df-4d1e-92c9-804653987f35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35/48cceee9-c5df-4d1e-92c9-804653987f35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:b5:c2:04:d2:17:d8:bc:7f:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cceee9-c5df-4d1e-92c9-804653987f35
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6c645bed-6536-44d5-a778-9e32812aa1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:72:33:65:19:6c:23:e5:db:0d:19:7c:a9:fc:
                    90:cc:17:d8:c0:3b:ac:0b:d9:af:21:8a:95:2a:d7:
                    7f:17:42:68:fd:5e:da:e5:c8:f6:24:5c:8d:c3:38:
                    0d:17:68:de:7b:f9:11:76:9b:9b:8a:40:bd:ce:2a:
                    35:22:7c:e2:1d:c2:22:8f:d8:d3:4f:9b:ed:40:b9:
                    45:ab:4f:34:b4:a5:c9:30:1b:0b:48:23:49:ed:e5:
                    39:07:32:94:d8:53:60:fe:95:a0:74:d0:36:33:30:
                    b1:5f:32:47:b1:b9:70:66:4e:0a:5b:72:90:01:ac:
                    37:c1:2a:0f:d3:43:c2:c4:ac:82:99:89:6a:f7:d9:
                    d2:67:a4:ae:c5:c8:a3:7a:a7:0a:9b:90:81:bc:34:
                    8e:ab:49:1c:de:ae:7a:48:1e:a7:82:21:4d:1b:2b:
                    a6:4b:e7:3d:19:6d:3e:49:ec:08:25:f4:b4:63:e9:
                    16:f6:5e:ac:57:1f:89:d1:71:22:6e:9b:90:e8:0f:
                    ba:bd:f8:9d:bf:87:78:40:b3:06:ff:83:3c:79:01:
                    76:87:5f:5d:70:15:0f:0d:99:b7:c3:f9:bc:68:23:
                    ac:fe:e4:39:cf:73:72:b5:01:47:8a:2b:4a:47:5c:
                    5e:cf:1b:8b:ab:37:c7:7e:1b:37:67:fd:36:3f:95:
                    6d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:ED:7E:A5:77:D3:6A:8E:7A:E5:E2:2F:88:1D:7C:06:22:7C:8B:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35/aa95133f-5eee-348f-a518-2a30f4e6d60c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35/48cceee9-c5df-4d1e-92c9-804653987f35.crl

            X509v3 Authority Key Identifier:
                keyid:63:93:74:06:F5:F7:AE:2B:2B:E9:DF:72:BD:88:55:F0:84:57:4D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48cceee9-c5df-4d1e-92c9-804653987f35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:65:08:d6:65:5e:e4:61:5b:cc:fe:a1:05:df:35:ad:a2:7d:
         90:f2:03:c1:fe:1a:47:50:29:2f:83:2e:62:0b:a5:f6:02:e2:
         7c:12:33:b2:3f:37:13:63:6b:cc:12:b9:66:69:9d:ea:48:81:
         8d:c9:2f:19:2d:d5:3b:02:e9:41:de:f8:0c:dd:67:93:7f:55:
         6e:d3:de:ab:40:6f:6e:da:08:14:46:8b:90:d2:3e:69:bc:98:
         97:f4:95:d7:a3:be:2c:74:a2:55:f2:ce:d1:e0:20:42:c0:1d:
         74:9d:6e:08:d0:2a:6b:35:1f:dd:fa:a2:2c:29:e5:41:3d:6e:
         ae:31:e6:8c:99:c8:68:c5:de:1c:65:d2:6f:21:08:f9:f6:58:
         cf:8f:bb:c2:4e:1c:81:96:83:a5:f6:b3:19:93:75:49:75:32:
         29:49:2f:df:99:8c:3c:76:2c:04:47:a9:8d:41:82:a3:cc:64:
         27:14:da:b4:6d:a5:31:51:dc:56:8b:92:a3:38:7b:00:28:45:
         fa:9c:a9:7c:a8:a2:ec:f1:86:91:7e:09:af:42:1b:9e:26:b5:
         be:a5:36:26:a4:c5:30:7a:33:f5:5b:63:da:e6:1b:f2:95:c5:
         53:69:a9:f3:52:8b:f5:78:1e:dd:c9:3f:63:81:ea:e0:e2:66:
         9c:05:65:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:06:15 2026 by rpki-client