Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/d25207b6-ef4d-3c9d-80b8-e06ed46ce10a.roa
File:                     d25207b6-ef4d-3c9d-80b8-e06ed46ce10a.roa (raw, json)
Hash identifier:          EIYsIWdRM4OKhHDmuF0Qf3TlqbApSjb7YpmXSaTLjkQ=
Subject key identifier:   A8:D3:27:AE:C4:56:D2:52:4D:DE:B8:A9:10:AC:1D:63:C4:70:C1:96
Certificate issuer:       /CN=f52d9dd2-a206-4694-a550-d6639e33e9f6
Certificate serial:       010D0C9F4328584E8B25128D74ECACA92AF5E9C0
Authority key identifier: BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/d25207b6-ef4d-3c9d-80b8-e06ed46ce10a.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     40714
IP address blocks:        75.78.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:25:12:8d:74:ec:ac:a9:2a:f5:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f52d9dd2-a206-4694-a550-d6639e33e9f6
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=d824907f-ce9d-42ca-9c38-745fac9ffd1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:63:2f:09:4e:cb:ac:a8:21:fd:8c:38:21:f9:
                    c2:86:26:50:73:99:c2:48:71:ac:cc:04:7c:50:60:
                    19:ba:04:c4:84:72:4b:4a:92:13:8b:99:db:ff:17:
                    66:ee:dd:3d:64:a0:f4:2d:93:f3:53:50:98:4b:8c:
                    92:98:49:59:b7:ba:bd:2c:8a:4f:0e:eb:5e:e0:c8:
                    78:b3:33:a4:01:0a:93:b4:ab:fa:32:91:6c:fa:a5:
                    73:9a:e4:63:da:9d:26:05:1a:3f:1f:e2:71:f2:2c:
                    f4:f6:95:ca:d9:7b:1f:a1:ad:40:2d:c2:6e:01:1e:
                    f7:45:a1:45:5c:7d:20:ed:61:67:8c:b9:cc:3f:ec:
                    76:a5:8c:5b:ee:83:08:f9:7c:2a:7c:4d:e6:b7:e0:
                    11:71:b6:66:9d:8b:94:55:fa:0d:16:77:72:96:59:
                    3b:d5:11:7e:fd:fa:ed:56:76:a2:51:50:9e:77:cb:
                    54:73:11:fc:99:d6:74:05:81:7f:a7:ab:94:c2:e5:
                    b1:ae:c7:09:2b:fa:0f:cc:40:56:81:24:77:25:55:
                    fb:d0:9e:77:50:ed:cc:6b:16:93:5d:37:97:5e:07:
                    5f:9c:ec:20:ed:19:b4:52:6b:81:fd:a5:26:69:82:
                    32:70:f0:0d:75:46:ab:3c:c7:8e:46:5c:f6:c0:12:
                    35:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D3:27:AE:C4:56:D2:52:4D:DE:B8:A9:10:AC:1D:63:C4:70:C1:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/d25207b6-ef4d-3c9d-80b8-e06ed46ce10a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl

            X509v3 Authority Key Identifier:
                keyid:BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:51:6d:ea:91:bd:60:95:be:03:21:96:eb:31:e3:9c:a3:e0:
         9d:a8:a5:2e:b2:10:23:03:b2:8d:99:be:13:7a:cb:cf:1a:44:
         65:50:02:bf:bb:b6:ac:df:07:50:30:e8:a8:89:fa:0a:42:4f:
         d2:dd:98:ee:26:bd:49:c8:3b:24:d1:69:20:6d:e6:b2:6a:e2:
         f2:dc:99:a9:97:10:7c:cb:92:c8:59:7d:4b:30:54:d9:f5:05:
         ce:3d:c2:0d:39:f4:95:f8:41:57:df:14:fd:c9:d6:b1:18:4c:
         42:10:b4:e4:43:3c:a4:a6:42:6e:4b:2d:30:f5:80:8a:e3:7b:
         71:c4:0f:d5:30:9e:16:fb:9c:86:57:19:5f:11:3f:10:51:f6:
         7b:5a:71:15:21:3b:b4:69:81:62:21:b3:29:b5:e8:f2:1b:f1:
         26:e1:d1:55:b7:0d:4b:65:4e:02:aa:fc:cb:47:8d:13:fa:d7:
         7a:0d:5b:80:a2:fd:66:9c:76:8e:de:45:83:0d:1b:04:26:dd:
         fa:3b:eb:7c:ff:2e:56:6a:9f:8d:6e:ce:3f:81:76:88:b4:85:
         1d:e2:4e:9e:66:a8:bc:9f:4b:6e:8e:31:41:ea:79:05:4e:b8:
         58:9e:1b:2c:78:bb:35:6e:c7:c2:9d:f1:1f:f3:50:a8:1b:f4:
         9e:d9:c1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:32 2026 by rpki-client