Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5146ad4a-6c4f-34b3-bc85-cb32117489d4.roa
File:                     5146ad4a-6c4f-34b3-bc85-cb32117489d4.roa (raw, json)
Hash identifier:          XnaYFyFgFXRq1XthNkGlzY1YNR2A+W+kjqAV4x1QzxU=
Subject key identifier:   FA:16:CF:FC:B5:49:C1:79:D1:5C:10:4B:DB:7F:CD:2A:03:3A:8E:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D3F64F876A9519AA2034F17C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5146ad4a-6c4f-34b3-bc85-cb32117489d4.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     0
IP address blocks:        207.78.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:f8:76:a9:51:9a:a2:03:4f:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=a49708a2-3167-4a8a-98ce-61757222cdbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f3:6f:71:30:70:0a:ec:55:a0:28:a6:3a:31:
                    ae:9c:c2:2a:a7:25:aa:13:7d:30:82:fa:e6:11:6c:
                    98:55:3e:d4:86:f9:f3:dc:53:b7:3b:8f:81:da:66:
                    10:0b:f6:60:71:76:77:69:00:da:fa:c8:70:13:92:
                    8c:62:bf:40:a4:9f:66:ce:e3:73:53:26:ad:20:75:
                    db:34:4a:31:10:7b:cd:51:25:b8:68:e2:f6:2c:5c:
                    84:d3:8f:93:b5:7e:2b:77:fc:c2:8f:32:5f:e1:48:
                    33:71:cb:23:09:78:75:2e:5a:da:91:eb:d1:64:5b:
                    de:cf:c3:3b:9f:13:67:60:04:43:1b:76:cf:a1:a6:
                    59:10:52:09:31:35:23:1b:32:44:1e:31:b4:53:81:
                    2b:5b:06:bd:15:84:31:b0:52:e6:df:63:db:53:ea:
                    3b:c3:b6:59:c6:c8:71:db:8b:bf:a7:7d:c2:ad:1f:
                    b5:f0:b6:34:54:d9:e5:35:7f:df:94:36:12:7b:f1:
                    0c:db:61:39:70:e3:13:e3:21:10:fb:ae:6a:2e:c4:
                    fc:8a:d3:69:3b:60:a4:f2:e5:06:87:79:08:5c:b7:
                    c4:94:00:94:76:8d:a5:23:3b:1a:31:9f:65:ed:7e:
                    7e:4a:74:c0:80:3c:be:b3:9a:13:aa:d6:d7:84:b3:
                    ec:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:16:CF:FC:B5:49:C1:79:D1:5C:10:4B:DB:7F:CD:2A:03:3A:8E:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5146ad4a-6c4f-34b3-bc85-cb32117489d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.78.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:0e:ab:6d:a3:54:b5:57:8c:26:5f:79:09:96:7f:80:8b:d3:
         86:81:ba:11:fe:6a:bb:10:14:bf:2f:83:62:70:75:ae:67:a2:
         66:65:a7:e5:af:f5:a1:7a:74:8f:69:24:cf:c5:b7:31:88:ed:
         4b:23:c9:86:0e:10:ba:3c:62:0b:65:85:9e:ba:9e:60:1e:8d:
         d8:f7:2c:49:bf:9f:83:d6:b1:2c:be:ba:91:93:fa:33:e9:c1:
         62:74:78:21:f5:79:0f:52:db:cd:4a:e9:64:28:85:56:a8:de:
         45:a1:db:62:1a:9c:a1:45:6d:e4:f5:ea:b9:8e:ca:4a:17:86:
         0a:37:09:2f:da:d7:26:31:54:d0:11:77:80:e5:19:29:57:22:
         3b:f0:1d:78:37:53:11:51:7a:6c:66:a7:7c:d7:f1:7c:dc:0d:
         eb:d2:b3:e6:63:71:9a:96:4a:45:5d:e7:c7:27:c8:39:cb:2e:
         30:1a:7b:64:e8:68:65:6c:58:82:b8:59:8c:08:6f:b5:1f:63:
         4e:35:d2:3c:90:1c:4a:34:04:21:81:60:8f:c8:be:10:d8:3e:
         f4:3d:47:93:d3:85:ca:09:48:85:25:f1:29:8c:75:0c:6f:a7:
         22:57:bb:be:ac:01:51:88:f9:ec:2a:ec:dc:d6:8d:cb:13:b9:
         4e:0c:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:51:26 2026 by rpki-client