Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5d142dcc-e71f-37b2-a7a8-23359337603b.roa
File:                     5d142dcc-e71f-37b2-a7a8-23359337603b.roa (raw, json)
Hash identifier:          xr9mSPROnbevSx+2lQE8h9BK9b0NOIlCZg+y91FtJVc=
Subject key identifier:   2D:5E:43:C1:55:11:7E:EC:18:F7:92:1A:1A:CB:FA:C8:33:88:9B:B4
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584EA788C81A7145CFCCC98D3380
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5d142dcc-e71f-37b2-a7a8-23359337603b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3477
IP address blocks:        2610:20:90a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:c8:1a:71:45:cf:cc:c9:8d:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=290ac8cb-c0b0-4f2a-aa2a-91002eaa2bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:af:ee:eb:c3:22:ef:c8:56:87:48:04:41:2b:
                    ad:17:be:9a:6a:70:5b:7c:cc:5b:e4:22:ab:60:26:
                    fb:bf:ad:76:7b:bb:c1:10:b1:33:ba:d5:6e:c1:ac:
                    fa:4c:cd:e4:17:42:dd:13:37:ff:71:f3:2a:56:fd:
                    1e:3c:a7:de:8f:73:8e:c9:a7:77:49:70:fe:56:6b:
                    b9:e3:29:e6:67:03:30:80:7d:4a:29:72:b5:49:1b:
                    80:12:68:16:5a:be:51:d8:e3:d8:59:e6:fe:71:af:
                    76:73:33:36:ad:2c:9f:b2:6c:29:f2:45:1c:ac:8e:
                    9c:0a:c5:46:76:6f:10:be:68:b8:64:9f:45:0a:4e:
                    3a:be:fc:b0:c2:56:14:cf:30:dc:23:40:ab:80:46:
                    a9:01:22:13:af:12:0a:3b:dc:df:7b:c2:a5:e7:77:
                    16:d3:04:5b:73:a7:d7:b1:23:9b:ee:af:8f:b0:05:
                    fe:e3:ac:b9:40:ef:7c:a9:b2:b0:40:21:8d:0e:c3:
                    97:46:3b:f6:9b:df:39:24:3d:87:76:29:8d:3f:19:
                    e3:ec:14:7e:47:34:68:37:21:4e:b2:46:a9:51:39:
                    1b:db:a9:b9:de:52:f9:85:a6:84:5c:2a:ac:4e:03:
                    9e:8a:0e:a8:1c:95:9f:74:33:36:46:66:6e:1c:57:
                    8a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5E:43:C1:55:11:7E:EC:18:F7:92:1A:1A:CB:FA:C8:33:88:9B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5d142dcc-e71f-37b2-a7a8-23359337603b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:90a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:f4:7e:6b:7e:c1:a7:01:23:a2:1b:e1:5f:18:62:6e:ed:1c:
         61:98:b6:39:cf:12:c2:1b:65:fb:4d:88:37:b7:b6:3d:da:ac:
         72:71:94:4c:6e:37:5d:30:9b:97:50:7a:51:2c:f8:97:0a:0d:
         57:09:ca:de:80:25:e4:9e:b3:1c:da:78:c5:b1:78:7b:ff:de:
         77:7f:31:6c:ca:04:6c:89:f3:d9:44:af:bf:73:9b:86:ce:76:
         6e:ea:38:92:19:69:da:74:ef:d8:b2:8e:ba:f1:cd:1f:c8:f2:
         1f:11:bf:d5:e6:48:24:0b:10:b9:89:30:36:63:e7:b3:36:c6:
         75:b9:99:ac:93:6d:2d:2a:f9:8a:34:21:d5:b6:4c:ec:67:12:
         42:91:83:82:91:9d:52:2e:70:0b:5f:9d:7a:4b:0b:6c:53:92:
         5a:e5:e8:c9:5e:76:b2:44:40:74:64:fc:cc:61:46:11:b2:1a:
         df:cc:dd:91:89:f2:d0:01:b9:90:21:49:33:13:9f:ac:b3:a2:
         15:36:ef:7c:e5:c0:c6:8f:fa:9e:77:b8:b2:f1:90:be:36:41:
         5f:1d:05:1e:55:77:ec:f6:f0:ff:53:e2:68:81:54:77:92:55:
         5e:ab:66:84:19:1c:19:30:35:59:2a:cd:0b:ae:17:39:32:a9:
         4f:c1:7f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:04:36 2026 by rpki-client