Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70/462ed36a-b481-3dfa-834c-37e6b4e22264.roa
File:                     462ed36a-b481-3dfa-834c-37e6b4e22264.roa (raw, json)
Hash identifier:          4ezGvHcJgZXf8JMqgszjBGF0iNtrFVqI4Zcw8buQtr0=
Subject key identifier:   F9:38:03:3A:E5:09:F1:80:D3:1E:8B:8D:ED:BC:C0:E6:B5:85:86:77
Certificate issuer:       /CN=781d7bd5-5a41-4dfd-a4b9-0b12af4cae70
Certificate serial:       010D0C9F4328584DADAAEBE56AF97AD7A45F1CC0
Authority key identifier: E5:8F:57:CE:14:F0:B3:C9:85:E4:32:74:5D:5D:A2:EC:8C:58:CD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70/462ed36a-b481-3dfa-834c-37e6b4e22264.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     395112
IP address blocks:        170.76.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:eb:e5:6a:f9:7a:d7:a4:5f:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781d7bd5-5a41-4dfd-a4b9-0b12af4cae70
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=97878158-611a-4069-bdc7-b9dc5b154d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:09:79:fe:6f:99:e2:c9:2a:9d:7a:4e:94:83:
                    dd:48:09:99:c5:f8:2d:99:f6:ea:ec:f5:15:a7:35:
                    18:2a:77:3f:5c:5a:7f:45:ee:d5:a1:81:e7:80:07:
                    db:67:62:d9:3e:d4:17:95:48:56:dc:d3:09:9c:4e:
                    dc:76:81:b3:cf:06:da:f1:dc:60:90:9d:a7:1c:10:
                    7f:6c:dd:e5:7b:53:c7:cb:ee:49:02:e9:d6:8d:4e:
                    46:37:e4:95:3d:83:b4:15:3b:d4:49:4c:04:81:cd:
                    92:a9:c5:d3:81:b9:55:cc:59:af:a4:5d:2d:ff:f1:
                    7f:63:79:01:7b:2e:b9:37:4d:fa:5f:71:de:7d:8d:
                    f4:b3:bb:9d:b6:53:db:ec:ea:fb:1d:a6:e8:c0:47:
                    34:ef:1d:80:a5:9a:a2:74:23:9d:e3:b6:d0:60:a9:
                    a0:d5:a8:5c:69:5e:32:c9:8b:c8:e5:5c:3b:e2:48:
                    d7:11:a2:07:6b:e4:c1:bf:c2:63:28:81:ba:50:09:
                    d5:a6:5d:d6:31:85:dd:86:66:81:71:fb:88:bd:8d:
                    05:a4:dd:17:6c:e9:56:9b:54:32:12:25:69:70:1d:
                    eb:8c:c8:5b:d2:62:bf:c3:63:66:c8:fd:a3:b1:d1:
                    32:b0:d2:04:34:45:96:60:f9:92:fe:56:67:c7:16:
                    ae:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:38:03:3A:E5:09:F1:80:D3:1E:8B:8D:ED:BC:C0:E6:B5:85:86:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70/462ed36a-b481-3dfa-834c-37e6b4e22264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70.crl

            X509v3 Authority Key Identifier:
                keyid:E5:8F:57:CE:14:F0:B3:C9:85:E4:32:74:5D:5D:A2:EC:8C:58:CD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/781d7bd5-5a41-4dfd-a4b9-0b12af4cae70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.76.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:2c:38:81:57:be:b2:fc:52:71:54:d7:9a:58:08:fb:2a:2e:
         95:c7:c5:c8:2f:65:ca:0b:b5:5c:25:f0:12:a0:31:8f:a0:72:
         30:d1:39:01:b5:6a:9f:e8:20:12:31:30:96:62:70:ed:1d:d0:
         99:64:08:ba:39:0f:56:5c:48:f4:9b:52:02:b8:73:23:ff:2a:
         91:04:2d:68:4a:40:17:e4:86:7b:0d:78:fa:bc:1b:03:d8:44:
         92:e9:27:50:0d:1c:6b:71:fe:95:a6:39:74:16:38:3a:85:f8:
         67:82:7d:f5:94:68:c6:a0:bf:22:a9:cc:7f:9d:8b:47:17:77:
         89:39:78:66:33:c4:a9:8e:81:5d:e6:64:54:4a:60:9e:08:ad:
         e2:9f:2b:84:4b:ef:95:1c:ec:7e:be:b5:04:6f:4c:cd:34:16:
         fb:f4:26:a7:de:98:ef:a1:e8:29:67:7b:a1:7e:13:0f:02:32:
         96:52:c9:22:db:43:3a:cc:ef:e4:0a:5f:52:43:82:2d:61:33:
         55:58:67:e3:40:e7:34:e0:32:f7:7e:ce:27:1f:71:98:8f:7a:
         a1:80:1b:1f:85:24:18:29:d9:24:b3:3c:d3:ab:06:3f:1b:25:
         17:42:b7:bf:3d:b1:58:3d:43:75:21:60:76:75:2f:0b:88:a5:
         78:31:4d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:17:41 2026 by rpki-client