Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7acb58bc-b9ac-3d38-b68d-661cd6f2bc81.roa
File:                     7acb58bc-b9ac-3d38-b68d-661cd6f2bc81.roa (raw, json)
Hash identifier:          RB/E6Qgco5Jqqg7bQ5HdM2UZcRlJ9AEmuyy7CA5OhdM=
Subject key identifier:   5A:B6:99:DC:AF:69:04:A8:0F:FA:E1:C8:A8:71:83:90:51:9A:B9:4E
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584D8EF567A578A1ABF9321EA640
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7acb58bc-b9ac-3d38-b68d-661cd6f2bc81.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     25804
IP address blocks:        68.142.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:67:a5:78:a1:ab:f9:32:1e:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=6472d26b-736f-4e63-9806-88d6269f5ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:43:63:36:8b:4a:03:38:56:8c:b5:17:ea:c4:
                    00:cb:86:55:4a:dd:cf:8a:58:ff:46:03:6b:a1:81:
                    e0:40:fe:38:b9:72:70:59:85:ac:00:3e:6d:d4:18:
                    0f:ba:42:dc:6b:84:c0:af:45:75:5a:61:9d:0a:22:
                    56:fb:f2:38:1c:73:77:7b:8d:90:bc:7f:cc:02:3b:
                    69:cf:ec:c4:ed:fd:5b:27:86:a7:fa:cd:5b:f1:42:
                    e5:07:4d:9b:10:0f:b3:0f:89:73:75:0b:c5:37:38:
                    63:ee:35:80:17:6b:01:f1:df:5c:dc:ad:82:58:8e:
                    18:1b:80:03:26:03:c4:1b:31:03:e5:c3:ba:a2:b5:
                    29:dc:e0:83:52:98:49:52:62:bb:cb:15:d3:c0:f3:
                    d2:60:72:46:60:ff:5a:68:85:8c:4f:61:58:40:06:
                    a9:54:da:ae:91:7e:13:fb:f5:36:a8:42:98:6b:ae:
                    2d:19:6e:d3:0d:5b:bd:25:b2:e5:0a:8a:80:8f:b9:
                    c0:dd:3f:4d:52:16:68:a5:1b:4e:53:7e:63:62:aa:
                    6d:98:b0:34:29:8d:e9:a8:1c:4d:88:3b:a3:89:e3:
                    65:42:b4:03:96:3f:05:28:91:91:c8:c4:90:f6:41:
                    6b:48:11:f1:a2:7b:74:a8:41:f7:6a:47:86:49:ef:
                    b1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B6:99:DC:AF:69:04:A8:0F:FA:E1:C8:A8:71:83:90:51:9A:B9:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7acb58bc-b9ac-3d38-b68d-661cd6f2bc81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.142.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b9:e4:b6:79:33:99:2a:d6:28:68:69:ce:9e:c7:f6:23:33:
         f5:68:10:25:71:28:f7:ad:46:25:3c:92:56:4f:6b:1c:79:63:
         55:fb:01:82:0c:b8:30:a3:7b:16:07:a8:a5:93:c3:ac:cc:97:
         5d:88:15:ad:86:1d:d8:b9:08:e6:d7:6b:55:ee:5e:cc:78:fc:
         70:4a:cc:f7:f6:96:8b:ff:60:89:58:21:2a:c8:17:96:ac:49:
         bd:32:8c:68:77:cd:be:71:80:1d:8c:72:5d:c3:30:c8:38:b9:
         ce:c8:4c:c3:0f:8f:e3:5b:24:36:86:96:20:78:37:36:a0:f8:
         a8:6b:1e:1a:16:8f:41:8f:b0:ee:a1:ff:69:38:c0:d9:72:6f:
         0b:4e:c8:2b:97:5a:99:34:07:aa:43:b5:af:2a:22:cb:78:b5:
         44:89:f3:ed:8d:be:17:ec:ba:c9:e8:86:ae:ea:71:c6:01:52:
         dc:1d:17:cc:bc:78:5b:fc:89:e1:fc:65:25:89:91:61:e6:57:
         36:5e:3e:05:e8:b8:74:9b:22:dc:d2:75:ca:2c:d3:65:f5:7e:
         6a:7f:d4:e8:5c:5a:11:a3:04:f1:53:7c:61:20:e1:0f:9b:4a:
         bc:90:5d:cd:80:49:7d:f1:7d:73:13:17:2e:f2:ad:0a:f1:67:
         de:32:71:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:14:10 2026 by rpki-client