Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/78744ab8-279b-3c8d-bd0c-0ee3e4d38d42.roa
File:                     78744ab8-279b-3c8d-bd0c-0ee3e4d38d42.roa (raw, json)
Hash identifier:          WxFMRXhm31c/mLfMti4EPa1aBk2gmyqpyHXtxKaSKpk=
Subject key identifier:   55:81:22:F1:6D:F9:38:48:26:23:FD:CC:36:DC:5E:87:7E:54:84:4E
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E42B11C0B4B21DB6E0FF00280
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/78744ab8-279b-3c8d-bd0c-0ee3e4d38d42.roa
Signing time:             Mon 22 Jun 2026 22:08:43 +0000
ROA not before:           Mon 22 Jun 2026 22:08:43 +0000
ROA not after:            Sun 20 Sep 2026 22:08:43 +0000
asID:                     397924
IP address blocks:        208.16.20.224/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:b1:1c:0b:4b:21:db:6e:0f:f0:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jun 22 22:08:43 2026 GMT
            Not After : Sep 20 22:08:43 2026 GMT
        Subject: CN=f13d10b4-55b2-493f-8a3e-a3af2c2a089b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7d:8b:c0:d5:7d:87:b4:17:8d:5f:d4:93:79:
                    a9:e5:f5:3f:74:d4:6e:bf:4f:a1:bd:4d:40:fd:9b:
                    ee:6a:e4:2c:d4:ce:12:17:0e:df:8e:a2:6f:23:f6:
                    39:6d:68:78:5a:7d:6c:e3:03:74:55:79:25:36:70:
                    25:4f:30:7b:39:30:52:d6:c9:b4:2c:03:c0:a4:b9:
                    52:6b:d7:15:8b:39:5e:a5:ae:4e:23:ce:c1:83:83:
                    d7:50:8a:d0:53:fa:ab:ed:24:00:a0:4a:d3:d6:36:
                    97:cd:40:d7:55:46:7f:2a:5d:dd:0e:ad:e9:d1:8f:
                    68:4d:27:b1:16:7d:c1:4e:7e:67:68:eb:6c:18:00:
                    a5:f8:79:08:5e:9f:4f:6d:3b:c6:4b:96:0b:38:b4:
                    8f:fb:43:53:05:93:33:80:4a:77:12:0a:c4:65:ec:
                    51:39:ec:67:42:ea:37:94:ac:4e:85:16:a0:8a:01:
                    cd:dd:11:fd:a4:3a:8b:f9:5b:1b:2b:30:9e:e9:75:
                    97:0f:7a:9d:6d:ce:cc:b5:a8:82:8f:23:b4:c5:06:
                    8a:d4:41:24:77:33:0a:95:aa:73:e5:24:19:13:04:
                    df:96:c9:ec:1f:66:3f:b8:2a:22:5f:f8:14:7b:dd:
                    d7:50:b6:fe:e5:51:40:df:39:fe:02:ea:1c:f8:b2:
                    78:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:81:22:F1:6D:F9:38:48:26:23:FD:CC:36:DC:5E:87:7E:54:84:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/78744ab8-279b-3c8d-bd0c-0ee3e4d38d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.16.20.224/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:69:d3:de:f1:dc:88:2f:04:1f:cf:e8:59:5b:68:80:ad:00:
         0e:d0:ed:b4:fa:e7:f8:3e:7e:8b:0b:cf:d8:46:60:33:9c:9a:
         34:65:5c:ed:28:99:4a:2d:63:cb:b1:6a:5f:9c:b7:07:65:cf:
         1d:18:ec:3f:c1:50:68:03:38:d6:0a:33:36:e4:dc:de:23:26:
         8c:21:c6:f7:b5:5f:69:02:fa:bc:47:06:f7:bb:0d:ba:d0:23:
         b2:79:33:29:c8:92:35:79:c6:f8:c1:22:49:54:7e:7b:7d:16:
         10:57:0d:38:6f:eb:86:87:fc:e4:88:bd:28:26:8b:68:de:bb:
         90:fa:2b:ac:eb:4e:4d:ee:d6:8f:f0:6a:ed:f0:bf:c6:0f:b5:
         3b:11:e5:a4:53:7c:ca:a3:ca:41:cf:b6:dd:92:52:8a:ae:cb:
         a9:da:81:77:82:8f:81:a0:e8:96:46:b7:8d:5b:b9:1e:73:2c:
         b0:b3:d4:e3:48:54:ba:67:53:e6:4f:32:43:a3:87:02:d8:de:
         f3:37:61:f8:97:35:0e:1a:f1:a9:42:49:e1:35:30:e1:3d:7d:
         51:73:00:b5:31:22:48:9f:9d:41:2f:e3:f8:83:5c:dc:27:c6:
         11:b3:01:32:d3:2d:a7:1d:d5:70:df:25:f4:d8:4a:df:16:49:
         5b:8f:77:a9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5CsRwLSyHbbg/wAoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDYyMjIyMDg0M1oXDTI2MDkyMDIyMDg0M1owLzEtMCsGA1UEAxMk
ZjEzZDEwYjQtNTViMi00OTNmLThhM2UtYTNhZjJjMmEwODliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin2LwNV9h7QXjV/Uk3mp5fU/dNRuv0+hvU1A
/ZvuauQs1M4SFw7fjqJvI/Y5bWh4Wn1s4wN0VXklNnAlTzB7OTBS1sm0LAPApLlS
a9cVizlepa5OI87Bg4PXUIrQU/qr7SQAoErT1jaXzUDXVUZ/Kl3dDq3p0Y9oTSex
Fn3BTn5naOtsGACl+HkIXp9PbTvGS5YLOLSP+0NTBZMzgEp3EgrEZexROexnQuo3
lKxOhRagigHN3RH9pDqL+VsbKzCe6XWXD3qdbc7MtaiCjyO0xQaK1EEkdzMKlapz
5SQZEwTflsnsH2Y/uCoiX/gUe93XULb+5VFA3zn+Auoc+LJ4iwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFWBIvFt+ThIJiP9zDbcXod+VIROMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNzg3NDRhYjgtMjc5Yi0z
YzhkLWJkMGMtMGVlM2U0ZDM4ZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUF0BAU4DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAoadPe8dyILwQfz+hZW2iArQAO0O20+uf4Pn6LC8/YRmAznJo0ZVzt
KJlKLWPLsWpfnLcHZc8dGOw/wVBoAzjWCjM25NzeIyaMIcb3tV9pAvq8Rwb3uw26
0COyeTMpyJI1ecb4wSJJVH57fRYQVw04b+uGh/zkiL0oJoto3ruQ+ius605N7taP
8Grt8L/GD7U7EeWkU3zKo8pBz7bdklKKrsup2oF3go+BoOiWRreNW7kecyyws9Tj
SFS6Z1PmTzJDo4cC2N7zN2H4lzUOGvGpQknhNTDhPX1RcwC1MSJIn51BL+P4g1zc
J8YRswEy0y2nHdVw3yX02ErfFklbj3ep
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:20:00 2026 by rpki-client