Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/78b57014-1aa5-3718-9292-533882360efc.roa
File:                     78b57014-1aa5-3718-9292-533882360efc.roa (raw, json)
Hash identifier:          O2AZImcBJs7WEKuK5gg5DnbV8kf1RcW99rAALhMtQhI=
Subject key identifier:   0F:23:73:37:77:AA:3C:70:17:93:8E:B0:59:56:8C:08:D5:4F:BB:3E
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584D948AA4199776A5A664FCEC80
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/78b57014-1aa5-3718-9292-533882360efc.roa
Signing time:             Tue 21 Apr 2026 13:00:31 +0000
ROA not before:           Tue 21 Apr 2026 13:00:31 +0000
ROA not after:            Mon 20 Jul 2026 13:00:31 +0000
asID:                     23470
IP address blocks:        96.43.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:8a:a4:19:97:76:a5:a6:64:fc:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Apr 21 13:00:31 2026 GMT
            Not After : Jul 20 13:00:31 2026 GMT
        Subject: CN=54ab9a6f-3830-4efb-bfb8-6eb19d8bd24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:78:cf:16:85:ad:58:69:c9:48:1e:2f:d7:
                    30:4d:75:0e:2a:3a:72:16:34:25:fa:cf:b2:dc:5d:
                    b3:1b:7f:ed:6a:99:88:ae:6a:b3:24:43:e8:94:56:
                    9b:6b:76:bd:a7:ef:ae:fd:6d:85:49:ab:22:be:3c:
                    00:2c:ef:47:29:fb:bf:93:fd:8f:51:22:63:50:64:
                    77:e2:cb:75:d2:27:f4:ab:ba:b1:f2:19:9c:af:20:
                    0c:68:23:af:74:93:d4:4a:f8:f1:22:25:1f:7c:a5:
                    32:b0:98:4f:5e:0e:68:9c:55:b5:37:78:5a:e5:79:
                    4c:12:ea:99:f9:83:08:fa:c7:f2:d0:f8:ac:d0:3c:
                    46:db:82:09:e5:41:b3:2f:07:71:2d:9a:31:b9:c8:
                    97:5c:d4:cb:b2:15:f4:86:9c:98:9c:0c:35:a7:d0:
                    8e:06:44:2b:80:9c:ef:93:ef:76:77:5f:6c:c7:85:
                    b3:52:4c:ef:41:37:11:7e:99:14:3c:5f:ce:1c:c2:
                    36:d7:72:e2:a2:df:aa:30:a5:52:82:2e:5f:60:aa:
                    f4:c5:75:d4:34:d5:4c:1c:04:ab:af:18:64:4b:3c:
                    f2:c4:97:4f:88:10:70:86:ed:87:fc:6f:4e:23:cd:
                    38:41:c1:7d:9b:c7:e1:a6:42:df:c8:b6:f9:93:3f:
                    d0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:23:73:37:77:AA:3C:70:17:93:8E:B0:59:56:8C:08:D5:4F:BB:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/78b57014-1aa5-3718-9292-533882360efc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.43.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e3:f8:e5:5b:99:37:c0:ec:d8:46:35:00:7b:fe:9a:08:aa:
         dd:b1:a1:7a:57:b4:3a:61:7e:6b:f0:3b:cf:99:68:8b:91:22:
         d4:05:16:4b:b8:f4:da:68:cf:e2:d0:ae:b2:66:5a:a4:ad:4a:
         51:89:bd:3e:e8:ab:c6:6b:86:a5:c5:e0:3e:e4:bb:16:71:28:
         bd:9c:0c:71:40:3d:d8:9e:11:6a:e2:89:4f:9b:3d:9c:25:02:
         ed:2e:56:87:81:36:1d:62:ee:f9:24:14:5a:d5:27:b7:5f:0b:
         6e:e1:2e:21:1b:c8:b4:85:90:53:bb:f6:16:d4:25:64:a6:79:
         6f:64:18:4d:a8:9c:25:d3:b1:e9:32:e8:ef:26:20:74:3d:b2:
         c2:af:af:41:40:1b:a8:1f:11:ed:1c:12:aa:ae:7c:f9:f9:8a:
         ae:7b:be:3c:a9:02:0b:73:71:ef:17:f7:7b:01:53:d7:94:e8:
         08:ee:3a:6a:a0:d4:42:98:4e:bb:96:a2:d7:da:e9:dc:c2:37:
         cd:25:fc:f6:9b:1c:b7:8a:0d:a6:12:14:a2:ff:87:d9:e2:06:
         e6:b5:4a:4a:8f:8e:0f:e1:25:70:db:fe:6d:44:ca:cb:f9:50:
         21:a9:4b:c2:e0:ef:ed:dc:f3:a1:33:77:35:db:e5:c8:59:36:
         c2:33:f2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:31:58 2026 by rpki-client