Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef8e4524-39b1-3509-a757-ab745d827804.roa
File:                     ef8e4524-39b1-3509-a757-ab745d827804.roa (raw, json)
Hash identifier:          6JdY9QTU4SJwC/+RkVD7dJjUuABo/j6BIRWWRfoOiDk=
Subject key identifier:   35:C4:74:EE:6C:7E:B7:AB:30:D5:0C:EC:60:45:C0:44:C3:20:52:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA79334C2D41BB0F0A109D300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef8e4524-39b1-3509-a757-ab745d827804.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     17119
IP address blocks:        216.5.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:34:c2:d4:1b:b0:f0:a1:09:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9440fef1-c66e-4bdd-985b-3b091d220ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:e0:89:73:55:c2:eb:34:a3:87:f3:fd:db:
                    34:5c:55:40:c9:f6:23:19:06:22:ac:7b:99:9d:f2:
                    ab:cb:30:52:bc:36:7c:ac:68:47:21:4c:42:f8:15:
                    96:78:20:01:ea:6d:bc:a7:97:3a:4a:00:0f:8c:d6:
                    52:47:7d:15:83:d8:49:32:af:75:91:24:16:81:45:
                    e6:2e:f9:2f:80:80:69:1e:e5:2c:1f:fd:9b:87:cb:
                    49:d9:96:2f:26:e1:77:9c:03:c2:b2:c6:7f:29:ae:
                    e3:60:8a:00:ea:22:a9:72:ba:70:d2:75:c3:f2:55:
                    ae:70:2b:42:19:b8:41:9f:1e:09:b7:69:e0:6e:fb:
                    ab:5f:9d:eb:80:be:77:be:90:b6:9d:67:99:9d:a1:
                    86:d0:0c:25:ef:f1:99:39:cb:02:92:99:fb:bc:85:
                    be:e6:8a:6a:8d:d6:1a:8b:e4:0c:79:39:50:d2:a1:
                    00:ae:6a:2e:e8:08:11:ed:d2:63:c7:2a:c9:2d:92:
                    47:2c:cb:29:c7:db:c5:1a:c8:8a:85:74:f8:8d:21:
                    ea:36:de:fc:5c:ca:96:58:62:13:09:9c:e8:02:81:
                    cd:ad:4e:da:b0:07:cb:e3:0d:f6:21:f8:64:db:54:
                    96:4d:19:30:3b:ad:ac:59:aa:52:ff:07:a7:b6:75:
                    2f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C4:74:EE:6C:7E:B7:AB:30:D5:0C:EC:60:45:C0:44:C3:20:52:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef8e4524-39b1-3509-a757-ab745d827804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.5.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:7e:ce:cc:0b:40:32:85:7e:f1:48:e4:ee:f0:c8:25:33:fc:
         27:80:88:e2:76:28:d8:8d:63:da:7a:01:09:c3:7c:e0:8b:ea:
         25:05:3d:c8:65:de:52:fc:29:cb:62:d1:7a:50:ac:5b:b3:92:
         42:38:87:47:2a:dd:f3:c8:96:71:27:9e:b9:40:0b:09:e1:ec:
         b5:5a:46:67:22:8f:cc:8a:88:cd:e2:14:70:32:21:26:73:cf:
         b1:ce:a3:70:8f:02:d5:04:5a:9c:a9:12:a5:dc:9b:5e:5a:77:
         82:cc:24:1f:44:3a:71:4a:ef:0a:5a:5d:e1:6c:30:bf:09:cd:
         75:c0:3b:ee:f2:10:48:47:62:46:8f:e3:0c:24:c4:2c:a4:8b:
         2c:d5:c1:39:a3:67:9c:46:e8:e4:32:ba:ba:d9:68:c7:dc:81:
         19:4d:f5:34:1f:04:02:69:fc:28:b0:14:79:2b:0b:17:16:6e:
         55:3c:c2:93:e4:e2:ad:e1:c1:a0:f4:90:e6:fd:51:03:6c:15:
         42:21:d2:e0:03:c1:38:76:2b:ce:6d:5a:cd:67:f0:8f:e7:3d:
         2a:60:ea:e8:be:6a:90:47:ea:0e:5d:1a:c2:40:d3:ab:38:f0:
         5e:a6:f1:a0:9c:e8:0e:04:04:3f:d2:8c:eb:c1:21:e4:fb:5d:
         3e:e8:df:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 00:44:08 2026 by rpki-client