Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cd78512c-1940-3b10-8cf5-ca4732a4834d.roa
File:                     cd78512c-1940-3b10-8cf5-ca4732a4834d.roa (raw, json)
Hash identifier:          FvJNYgJkTluVC2rxwGlkNPTOSf8k6fqtC2YgdaQxpuU=
Subject key identifier:   3E:2D:41:F2:EB:BC:50:FE:A5:BC:18:3C:13:0D:DC:76:35:3B:D2:79
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F497461B085FC3A8F08EFF770
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cd78512c-1940-3b10-8cf5-ca4732a4834d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        156.19.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:61:b0:85:fc:3a:8f:08:ef:f7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5736e1af-d093-42b3-99d5-a4f059f000db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8a:ef:1a:f9:48:ae:7d:4e:b2:90:22:fb:eb:
                    69:e5:2c:02:9c:45:80:cf:ef:c7:ec:e8:f3:aa:f0:
                    61:d3:7b:4e:da:44:34:7a:54:f4:d3:fb:dd:85:cf:
                    5f:b2:cc:4d:10:21:b7:ed:ae:05:6b:87:76:ec:4e:
                    ca:5e:17:84:c4:9f:3b:ef:2c:f7:62:68:47:1e:b6:
                    16:d0:56:6e:b0:1e:27:9a:34:85:ad:9d:83:fd:15:
                    5f:c5:f8:e6:a7:ca:4c:f4:9f:be:50:a8:38:2d:20:
                    53:06:d2:ef:c2:56:28:2b:9c:c3:b9:39:1f:0f:f3:
                    ff:80:1f:47:5c:37:e3:2f:48:4e:a5:76:86:8e:f7:
                    6b:ec:02:22:ff:0c:f5:4b:1d:ed:05:74:05:df:28:
                    3a:50:20:49:d6:08:82:3b:1a:1e:e0:04:2c:83:b5:
                    d2:88:20:97:ee:a5:97:75:40:b2:8f:77:58:20:2e:
                    e7:64:dd:46:dd:44:02:17:b9:ce:04:c0:55:76:99:
                    73:f3:a1:38:e1:97:70:0c:86:77:81:9c:db:ce:3f:
                    e9:d5:6c:c3:4b:bd:02:9c:39:1d:46:8e:3a:e4:32:
                    90:a8:a0:31:aa:e0:ac:4a:59:de:f3:d0:dc:b1:4e:
                    bb:a8:de:84:ad:94:55:f3:4c:4f:d2:db:01:7d:c9:
                    72:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2D:41:F2:EB:BC:50:FE:A5:BC:18:3C:13:0D:DC:76:35:3B:D2:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/cd78512c-1940-3b10-8cf5-ca4732a4834d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.19.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:13:8e:d1:e4:78:87:36:92:91:dd:3a:81:12:75:e4:ef:51:
         f8:6a:5e:7f:17:8c:41:c2:77:3e:81:53:c6:1e:98:97:b2:da:
         46:57:89:5f:06:aa:b2:60:8b:5f:35:d9:c6:42:af:0e:ec:45:
         b0:05:8f:e0:c9:86:80:96:d9:09:5c:fe:92:ac:a1:e5:81:38:
         ec:51:3e:52:e6:d4:40:7a:77:b4:40:32:1d:94:9a:54:02:3b:
         f4:1d:e8:53:2e:79:f9:2f:50:fc:96:ed:38:e8:0e:b0:58:3c:
         01:cf:5e:ae:54:ac:a7:79:0d:ed:1d:5c:fb:f7:44:82:ff:b5:
         58:1c:04:1c:b2:ff:81:98:93:28:23:b8:c2:43:1e:93:b5:6a:
         5b:4c:d9:1d:84:35:8b:e9:5f:0f:41:af:32:f7:3e:42:a7:15:
         8d:06:6b:a6:c9:a7:9c:0d:93:9d:9e:b0:b9:7d:9f:71:89:d5:
         5d:01:fd:62:04:50:1f:0c:90:b7:d9:55:56:a4:13:b7:23:16:
         bc:2f:8f:9c:3c:b7:00:36:b1:2d:91:57:08:8f:cd:c8:12:d3:
         cd:95:36:d3:bf:01:89:82:ef:92:c8:c1:83:63:4e:6c:aa:2e:
         b0:3b:8b:52:82:ff:cd:26:fc:a5:18:1a:55:a0:80:ae:ab:8e:
         07:c9:07:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:41:34 2026 by rpki-client