Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/95e2b522-9a34-3a35-ad8e-9c7a3a252ebb.roa
File:                     95e2b522-9a34-3a35-ad8e-9c7a3a252ebb.roa (raw, json)
Hash identifier:          5IJByrEp+ethpba0WWPLNgDH5vu63V9d689jg/8qwv8=
Subject key identifier:   E7:78:07:C3:6D:08:71:9D:50:A3:A6:CB:56:DB:E1:A2:56:C4:81:CE
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584F15CCF3A5521D4B2B82E44E00
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/95e2b522-9a34-3a35-ad8e-9c7a3a252ebb.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     6079
IP address blocks:        65.78.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:f3:a5:52:1d:4b:2b:82:e4:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=7d244bff-086c-4654-bbcb-6e9fcc28c989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a8:8b:63:5f:11:9d:12:5f:cf:70:fd:34:4e:
                    86:b3:52:1a:48:7a:d8:ec:06:99:b4:91:54:c2:32:
                    97:ac:7c:3b:62:d3:42:33:e7:d5:99:36:b3:da:20:
                    24:ca:41:68:c1:3a:84:62:47:9b:e6:33:a2:c6:47:
                    18:d8:af:48:3c:c7:54:4c:44:2e:c3:0e:8b:fa:98:
                    13:89:3e:ac:c1:d4:99:74:ef:81:23:46:6e:e1:b6:
                    58:72:59:8c:55:85:46:c1:11:2a:1b:e1:27:6b:92:
                    92:e5:d8:76:1c:dc:44:fa:5d:61:e4:b2:be:65:ed:
                    38:d4:08:c8:ad:16:95:2c:e3:40:d7:33:be:7f:e2:
                    ea:fe:c6:51:70:a8:f5:d4:04:1d:62:bd:6d:0a:1b:
                    47:09:87:2b:08:c5:d6:b3:90:9c:e9:65:c3:7d:59:
                    d2:97:6d:5f:a2:e4:7e:fe:3e:09:e3:3d:82:9e:e4:
                    37:40:e3:e3:e2:5b:f7:0b:01:97:d8:c5:7f:58:79:
                    2a:ba:a5:a6:ff:65:b8:c4:24:89:b7:09:9f:6b:5f:
                    e1:f4:01:b7:db:74:0a:ce:e3:50:95:94:94:86:cd:
                    d9:42:a7:d1:10:e2:de:10:4b:2c:59:05:3e:9c:dd:
                    4c:9e:04:c0:5f:d2:d3:dc:f4:d7:24:26:46:95:b5:
                    43:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:78:07:C3:6D:08:71:9D:50:A3:A6:CB:56:DB:E1:A2:56:C4:81:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/95e2b522-9a34-3a35-ad8e-9c7a3a252ebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.78.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:74:d8:22:a8:df:bf:40:58:a3:3d:62:ef:84:5a:fb:cb:fd:
         e8:c1:e1:61:c5:93:6a:8a:37:7d:0b:2e:79:b3:91:dd:d0:93:
         80:18:9d:07:3d:3a:e7:78:a7:4c:25:43:57:19:38:d0:2d:dc:
         6e:6e:97:16:6f:b3:5f:8a:c9:d5:33:39:da:a0:63:97:00:b3:
         f8:30:ee:19:37:8e:e8:f5:57:eb:95:9b:85:28:65:ed:c9:33:
         01:be:d5:53:ee:3e:2f:66:4c:a9:dd:86:a8:c1:b8:72:1d:84:
         10:4c:4c:fa:e3:c4:a0:05:af:3a:d9:16:fa:dc:01:51:65:33:
         c0:54:b5:72:6d:52:c3:29:5d:e6:5a:ba:02:c4:e6:c5:7f:11:
         b7:12:13:ac:f3:95:8b:e6:aa:5f:e7:77:ba:b3:75:4f:32:7b:
         07:67:f9:26:7c:72:c9:fc:80:57:f2:79:7f:29:98:5a:c2:17:
         84:8c:04:6e:67:bb:02:0f:79:c6:5a:dc:01:45:43:99:9b:92:
         2c:d4:c1:fd:20:19:5b:b9:99:93:53:6a:0c:a1:ef:53:c3:5c:
         b3:7a:78:4b:b2:77:5d:75:05:ca:1a:4c:e1:c0:8a:45:b1:ba:
         7c:de:09:13:59:01:f5:9e:77:19:bd:b9:27:f1:6e:62:df:e7:
         8d:a8:57:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzPOlUh1LK4LkTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2
ODczMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk
N2QyNDRiZmYtMDg2Yy00NjU0LWJiY2ItNmU5ZmNjMjhjOTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KiLY18RnRJfz3D9NE6Gs1IaSHrY7AaZtJFU
wjKXrHw7YtNCM+fVmTaz2iAkykFowTqEYkeb5jOixkcY2K9IPMdUTEQuww6L+pgT
iT6swdSZdO+BI0Zu4bZYclmMVYVGwREqG+Ena5KS5dh2HNxE+l1h5LK+Ze041AjI
rRaVLONA1zO+f+Lq/sZRcKj11AQdYr1tChtHCYcrCMXWs5Cc6WXDfVnSl21fouR+
/j4J4z2CnuQ3QOPj4lv3CwGX2MV/WHkquqWm/2W4xCSJtwmfa1/h9AG323QKzuNQ
lZSUhs3ZQqfREOLeEEssWQU+nN1MngTAX9LT3PTXJCZGlbVDpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOd4B8NtCHGdUKOmy1bb4aJWxIHOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0
NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvOTVlMmI1MjItOWEzNC0z
YTM1LWFkOGUtOWM3YTNhMjUyZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli
MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk
Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw
MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHQU4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE502CKo379AWKM9Yu+EWvvL/ejB4WHFk2qKN30LLnmzkd3Qk4AYnQc9
Oud4p0wlQ1cZONAt3G5ulxZvs1+KydUzOdqgY5cAs/gw7hk3juj1V+uVm4UoZe3J
MwG+1VPuPi9mTKndhqjBuHIdhBBMTPrjxKAFrzrZFvrcAVFlM8BUtXJtUsMpXeZa
ugLE5sV/EbcSE6zzlYvmql/nd7qzdU8yewdn+SZ8csn8gFfyeX8pmFrCF4SMBG5n
uwIPecZa3AFFQ5mbkizUwf0gGVu5mZNTagyh71PDXLN6eEuyd111BcoaTOHAikWx
unzeCRNZAfWedxm9uSfxbmLf542oV4w=
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:09:02 2026 by rpki-client