Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/310804c1-01af-337f-80a0-918fb584def0.roa
File:                     310804c1-01af-337f-80a0-918fb584def0.roa (raw, json)
Hash identifier:          SYjx+UbJBHltt1CQuAqKDlgpVflWJY08OaknZ2CYgAk=
Subject key identifier:   3A:95:19:CD:25:CC:98:84:D1:C4:DA:D0:33:DD:96:D7:F2:E6:51:A1
Certificate issuer:       /CN=f6666624-f7c3-4ff6-ac71-f4d940ccf093
Certificate serial:       010D0C9F4328584D4F7EC16C7CCB785BA4852F00
Authority key identifier: E4:C7:7F:E8:62:71:0E:FB:A5:9A:70:46:0F:3C:D4:BF:BD:96:EB:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/310804c1-01af-337f-80a0-918fb584def0.roa
Signing time:             Fri 27 Mar 2026 19:25:50 +0000
ROA not before:           Fri 27 Mar 2026 19:25:50 +0000
ROA not after:            Thu 25 Jun 2026 19:25:50 +0000
asID:                     36086
IP address blocks:        192.235.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4f:7e:c1:6c:7c:cb:78:5b:a4:85:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6666624-f7c3-4ff6-ac71-f4d940ccf093
        Validity
            Not Before: Mar 27 19:25:50 2026 GMT
            Not After : Jun 25 19:25:50 2026 GMT
        Subject: CN=c7d70911-7787-4335-a86a-5e57fc774bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1c:0f:19:70:1b:83:c9:20:86:b9:e5:04:3b:
                    ac:a8:24:d6:dc:63:82:07:0f:a2:b9:2f:bd:fc:e7:
                    cd:91:4e:bb:a4:19:f0:29:fd:f1:ad:bb:bd:90:fc:
                    43:b0:2d:d1:23:86:18:37:70:36:4b:7c:c2:b1:d3:
                    80:4c:18:70:fb:e4:61:bf:53:38:5e:6c:41:52:d4:
                    19:60:f8:d0:f8:a1:f8:c7:f8:dd:d9:f8:1f:80:e5:
                    19:20:bb:51:66:a1:49:b7:58:2a:e8:1b:d5:0c:c9:
                    50:27:5e:c0:26:91:49:e2:c0:ff:04:c0:35:63:cb:
                    24:92:6f:ca:27:c7:ee:22:7f:30:4f:1e:fa:14:da:
                    69:23:8e:9f:d2:ae:85:f6:ee:0f:0c:6d:13:2a:93:
                    e2:34:e1:37:9d:a6:f7:fa:5a:b6:da:00:8d:64:ec:
                    a6:5b:c1:16:a7:89:d4:00:75:e8:6f:73:31:ea:f2:
                    e2:c3:ea:3d:3a:a4:4a:81:b4:c3:ac:81:0d:d2:88:
                    03:73:be:2a:ef:13:0e:50:c4:07:24:15:b5:ed:9c:
                    16:6c:6e:c0:34:62:a7:ea:cf:43:40:a5:8e:52:23:
                    6d:0a:24:99:18:6d:7c:6e:32:25:5c:81:6d:1b:35:
                    50:67:b7:4d:18:9d:c9:fd:fd:f5:f6:ca:b6:9f:f6:
                    1b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:95:19:CD:25:CC:98:84:D1:C4:DA:D0:33:DD:96:D7:F2:E6:51:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/310804c1-01af-337f-80a0-918fb584def0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093/f6666624-f7c3-4ff6-ac71-f4d940ccf093.crl

            X509v3 Authority Key Identifier:
                keyid:E4:C7:7F:E8:62:71:0E:FB:A5:9A:70:46:0F:3C:D4:BF:BD:96:EB:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6666624-f7c3-4ff6-ac71-f4d940ccf093.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.235.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:bf:32:47:fc:25:14:19:91:94:00:fe:1c:5f:95:b1:c8:ee:
         c7:ed:be:27:86:d1:99:be:77:97:6d:7a:fd:28:87:7a:52:67:
         f4:89:c8:dc:17:6d:eb:75:b2:40:59:b6:4c:b3:42:dc:1a:69:
         79:08:c8:41:12:e6:3b:a0:f9:17:d8:f4:30:5e:54:b7:fc:ca:
         6c:8e:49:51:7b:ea:f8:1d:c3:21:9a:d1:95:fc:da:c1:63:00:
         ce:59:dd:cd:1a:21:72:33:de:6c:60:f9:3d:48:e0:05:ff:1b:
         74:8b:a4:e6:39:3c:b4:56:53:a0:8b:32:10:96:9c:aa:e6:4c:
         98:19:28:66:d1:1a:4a:9e:32:aa:9e:a0:f1:df:86:4b:89:93:
         c6:ee:b4:a7:2c:d6:ca:e5:8f:4d:42:f2:c1:fa:2a:b6:e8:8f:
         fd:88:ac:04:48:3a:73:b5:0c:13:da:27:5d:af:91:bd:7e:9b:
         47:0e:e1:8c:83:ee:a3:88:a1:08:33:ca:62:c8:aa:08:d3:97:
         f8:79:70:b2:c5:34:cf:c9:79:28:57:64:39:e6:84:34:fb:ea:
         c0:b6:10:b7:ae:8f:77:4c:ff:80:e6:57:f3:99:83:9d:56:ff:
         8d:93:18:a7:be:d5:af:a4:e8:13:54:21:01:b8:58:80:eb:d2:
         3c:cf:56:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:23 2026 by rpki-client