Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/d25207b6-ef4d-3c9d-80b8-e06ed46ce10a.roa
File:                     d25207b6-ef4d-3c9d-80b8-e06ed46ce10a.roa (raw, json)
Hash identifier:          +8Kdi0gm9VinSfwDmR9APkQYBC+28SiYq7XWuKnXIMo=
Subject key identifier:   2F:B2:E4:35:4B:E0:9B:63:C3:3E:B5:C5:92:3D:8A:B6:65:7E:9F:40
Certificate issuer:       /CN=f52d9dd2-a206-4694-a550-d6639e33e9f6
Certificate serial:       010D0C9F4328584DAAE0524929CCFBE890589480
Authority key identifier: BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/d25207b6-ef4d-3c9d-80b8-e06ed46ce10a.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     40714
IP address blocks:        75.78.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:52:49:29:cc:fb:e8:90:58:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f52d9dd2-a206-4694-a550-d6639e33e9f6
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=23891fc9-e316-4892-9c7c-7d872c9e059c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:2d:18:88:2b:7c:de:32:10:9a:be:23:28:
                    a1:1d:15:8d:8f:97:4b:04:b3:e9:60:c0:fc:39:89:
                    d1:7b:e8:86:6b:eb:93:ca:4f:bc:5e:8d:4f:8a:e0:
                    41:05:1e:60:fd:70:73:25:44:81:b2:6a:76:3c:69:
                    2b:f5:18:18:9e:18:18:68:29:e2:97:0d:98:70:ac:
                    c0:2e:3d:30:22:66:50:66:c2:17:af:43:84:24:a8:
                    13:50:db:d0:cf:70:a7:0a:c6:16:5d:17:fc:d0:03:
                    1d:82:18:1b:a9:2f:f7:f1:15:87:04:1f:06:d0:04:
                    d0:96:ec:aa:5b:01:65:dd:64:2d:0b:33:30:e1:3a:
                    ff:3f:80:c5:e0:79:20:07:6b:cf:36:a5:e5:70:3e:
                    cd:88:21:bd:55:16:6c:b9:7b:c7:c2:24:e9:dc:fd:
                    68:9d:28:3e:d6:b8:98:82:fb:93:9f:e8:36:ac:22:
                    c0:a1:98:23:33:c6:12:4b:71:11:d6:45:e1:ac:6c:
                    e2:bc:2e:43:7d:44:f2:58:a8:ff:03:4a:55:f0:37:
                    e3:48:15:25:03:ca:a1:6f:39:12:c5:f3:67:45:98:
                    ed:69:f8:53:02:63:88:43:39:2c:3a:ae:62:e6:cc:
                    14:cc:71:45:2e:35:4f:2b:07:06:6a:b2:7c:44:90:
                    e2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B2:E4:35:4B:E0:9B:63:C3:3E:B5:C5:92:3D:8A:B6:65:7E:9F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/d25207b6-ef4d-3c9d-80b8-e06ed46ce10a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl

            X509v3 Authority Key Identifier:
                keyid:BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:0f:e5:0d:0f:dd:b9:18:9b:e0:dd:bd:1e:ae:a0:e4:87:92:
         90:99:6a:c0:18:06:ed:59:08:8f:49:97:fa:bf:ea:a0:3d:50:
         13:99:2e:da:92:b8:72:b7:88:23:3d:7f:45:e1:a2:02:aa:33:
         51:d4:9b:ab:a2:72:af:8d:c1:60:79:44:ff:8d:dd:f4:1f:e0:
         56:44:8e:ba:e7:36:3f:dc:cf:e3:62:fe:51:22:38:f2:9e:85:
         f6:eb:42:71:59:cd:30:bb:40:17:5b:3e:d7:49:2b:a5:c0:2a:
         91:c1:a2:38:67:b6:01:7e:8c:4a:5e:06:06:e9:45:98:4c:e2:
         06:6f:e8:6f:6b:5b:e2:85:26:18:c9:83:19:92:e6:bf:9e:50:
         fc:14:dd:6b:e2:cf:30:da:23:4f:9b:cb:bf:f5:80:f8:9a:01:
         7e:aa:48:78:c5:fb:b0:a3:5b:9c:d4:2d:6b:c0:1c:fc:cd:a1:
         a6:5e:da:0e:07:57:70:51:58:36:16:b2:48:a6:8e:d9:bb:49:
         2b:f1:de:a7:fe:e0:b1:23:5f:7c:bd:bb:da:a2:dc:22:e1:b4:
         a9:e6:c7:0d:d1:d7:46:89:18:ed:0c:a0:9e:92:7a:bf:3e:4e:
         f6:ee:9a:7d:e3:34:a0:07:4c:62:f6:3d:aa:f1:8f:47:58:37:
         c7:c3:82:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:10 2026 by rpki-client