Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/78119901-a0c5-355d-8302-369b799c631b.roa
File:                     78119901-a0c5-355d-8302-369b799c631b.roa (raw, json)
Hash identifier:          fljxXUlDo9NxCtYAol9eVtf3MqfFzsseiW5s0KHXn7w=
Subject key identifier:   1E:94:7D:C8:CD:71:FC:53:C4:FD:D2:36:27:6B:FB:95:10:A9:A9:52
Certificate issuer:       /CN=9d167629-63e9-440b-9a9f-22a4570f0d78
Certificate serial:       010D0C9F4328584D40CA422F7FB160DAA4C3C0A0
Authority key identifier: 21:0F:F1:11:A9:9B:01:49:A9:3E:6C:C9:D3:0D:28:93:1C:8E:9E:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/78119901-a0c5-355d-8302-369b799c631b.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        198.17.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/9d167629-63e9-440b-9a9f-22a4570f0d78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/9d167629-63e9-440b-9a9f-22a4570f0d78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:42:2f:7f:b1:60:da:a4:c3:c0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d167629-63e9-440b-9a9f-22a4570f0d78
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=2bac7b2f-6f13-4d68-a3c8-05aea727e2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:09:50:fe:63:55:0a:c5:f3:d6:89:0e:a1:32:
                    67:c7:e9:49:7c:a6:bb:2f:cd:70:58:5a:e5:7a:e4:
                    f0:8c:dd:e6:c6:e2:4d:f8:43:69:90:65:f2:2a:ca:
                    33:61:8f:70:c3:97:30:e5:66:08:35:ff:6d:0a:58:
                    05:e1:a2:2a:d5:bb:65:55:0d:24:b2:09:d9:46:40:
                    0e:c3:ca:2b:78:be:b3:f4:47:e4:4d:19:fd:f0:33:
                    3d:9c:39:9b:e1:68:1f:ff:d1:bf:51:dd:02:91:07:
                    77:91:3f:7f:45:15:ae:e3:7a:d1:19:45:39:88:32:
                    76:17:ca:e5:39:d1:3b:ac:e5:91:6f:ae:2d:03:d5:
                    9e:a3:ed:e4:73:c3:ea:f4:2b:ec:23:58:15:cf:7b:
                    29:25:02:ad:bd:37:e1:59:2b:d0:ca:fb:77:47:08:
                    63:dd:9e:00:4d:19:12:1f:95:0e:1e:f8:9f:85:a5:
                    a4:4a:31:30:03:48:d9:59:06:4f:5b:4a:c2:70:80:
                    1e:6b:2d:e8:44:d3:a5:e8:b4:8e:22:52:da:22:82:
                    bc:5b:a7:87:31:4a:b5:39:74:07:ae:26:9b:d2:5e:
                    c9:63:17:3c:a2:bc:17:6d:c4:3a:e2:16:f9:65:37:
                    a7:c3:25:80:fc:8a:a8:15:fb:88:a6:2e:aa:dd:db:
                    56:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:94:7D:C8:CD:71:FC:53:C4:FD:D2:36:27:6B:FB:95:10:A9:A9:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/78119901-a0c5-355d-8302-369b799c631b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78/9d167629-63e9-440b-9a9f-22a4570f0d78.crl

            X509v3 Authority Key Identifier:
                keyid:21:0F:F1:11:A9:9B:01:49:A9:3E:6C:C9:D3:0D:28:93:1C:8E:9E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9d167629-63e9-440b-9a9f-22a4570f0d78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:74:d1:c4:99:55:df:3f:aa:99:d6:b6:c6:43:09:42:cb:1b:
         1c:99:68:a5:1b:0f:44:b6:17:a0:6b:a3:03:31:c7:93:92:d5:
         73:73:e8:83:11:a6:0a:6b:b7:95:a8:de:6e:ce:63:39:e5:84:
         1a:b5:43:87:8b:47:ac:5b:57:1b:2b:e1:00:3e:69:1a:f1:c0:
         20:ab:5c:91:5a:af:7f:f2:97:de:e3:44:4a:1f:e2:9e:b4:aa:
         ad:0a:34:27:95:2c:11:55:a1:7b:cd:af:2c:b7:a9:06:a2:6e:
         e6:f3:91:52:ef:dd:a3:f3:bd:9f:f0:75:5f:0a:21:3f:78:03:
         a4:cf:2d:23:36:34:94:16:42:d1:73:5d:79:ee:d4:b6:e9:ce:
         d2:85:89:1a:a1:d6:c3:04:69:a1:09:42:08:6a:67:5d:fc:80:
         9c:7a:71:b2:1b:03:68:5d:88:1d:e2:39:93:ae:cc:0d:b8:c8:
         dd:7e:fa:7a:0b:d3:0e:a0:5b:ef:b4:5d:76:32:f1:22:7e:f8:
         f6:fb:71:74:e4:ce:3b:0f:06:bd:0c:0f:da:2f:7c:da:08:53:
         37:05:95:0c:07:24:69:dc:e7:6d:ff:b5:23:18:bc:62:19:fa:
         b2:3c:27:44:e5:94:ce:f6:48:bd:6c:b2:43:a9:e2:2a:d8:97:
         34:ec:22:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:58 2026 by rpki-client