Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa
File:                     5e197e82-6568-36db-8744-a92186db0276.roa (raw, json)
Hash identifier:          OIKTw0SL9ZcwHg271MBs4Id3OAHwxuSux0WF0fkF64w=
Subject key identifier:   A5:03:CD:AA:70:40:38:AD:0B:57:2B:0D:15:3C:AA:FB:FB:30:23:23
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584DF0AB3F8516D6235C1C8EC320
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     40623
IP address blocks:        2610:20:8020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:3f:85:16:d6:23:5c:1c:8e:c3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=09e8df4a-b27b-4ac6-9d7c-4b451a3ae055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:5d:86:f0:57:a6:5f:1b:ca:97:7f:df:d0:
                    84:41:65:a4:a7:be:cb:7a:45:10:a5:42:54:30:09:
                    6a:a9:73:1d:d3:b2:ec:a7:63:f6:ed:e9:64:d2:59:
                    63:44:69:29:3e:95:66:61:d8:34:9e:e3:68:29:13:
                    10:cc:4b:63:a5:38:2e:f3:95:7f:29:64:97:4a:cd:
                    1f:0d:49:d8:41:98:0f:b9:48:44:8e:5a:5b:b0:c6:
                    3d:93:fb:68:62:ea:f5:83:dc:4f:73:14:52:b4:f3:
                    af:ad:6d:4d:c9:3d:7b:5a:72:cd:c8:0d:b4:b9:61:
                    af:7d:65:0b:37:54:b6:33:9b:1d:ce:21:c9:41:fc:
                    dc:c6:1b:2c:ec:19:46:b3:e0:4e:f6:73:60:65:67:
                    c6:37:56:14:e4:aa:6a:ca:8b:52:19:1d:cd:ee:18:
                    22:ab:0b:dd:07:1d:33:60:bf:e1:98:00:ae:56:eb:
                    af:6c:f0:d0:db:b6:87:32:27:99:9d:be:1f:8b:08:
                    6a:72:11:ca:34:95:f7:6d:0d:ec:2c:f5:46:b0:f0:
                    5b:30:c8:d3:55:00:ad:3e:63:41:cb:9f:6b:1b:dd:
                    c3:15:dc:ca:ae:0f:8d:0a:76:0d:82:91:14:48:65:
                    40:2c:25:27:4b:18:71:fd:a9:8f:78:9f:f2:79:16:
                    23:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:03:CD:AA:70:40:38:AD:0B:57:2B:0D:15:3C:AA:FB:FB:30:23:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:8020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b8:45:fb:ae:bd:e3:7c:75:31:0a:49:87:ab:78:ee:6f:38:
         89:25:ad:a4:64:42:a8:7a:d0:d9:41:78:d7:b1:22:4e:ac:38:
         ff:dc:46:fe:be:4d:75:e6:fa:cc:9c:d8:38:17:5d:4e:6e:15:
         44:39:24:20:df:60:52:59:9b:b0:ea:c5:0f:aa:83:95:a3:94:
         cd:86:bb:f4:0d:7c:46:61:dd:1a:2d:c3:c0:e3:89:55:ca:84:
         81:ee:93:97:35:3d:4a:93:2f:96:38:fd:bb:67:33:63:11:b2:
         6b:ee:f0:e2:88:4b:39:de:b6:51:9b:2d:b2:c6:cd:f9:74:f8:
         15:35:54:04:6a:1b:cc:ad:6e:2b:b9:76:99:a7:35:03:21:86:
         b0:89:d2:f8:68:33:7d:49:4b:20:52:f8:37:95:38:bc:9b:00:
         b2:b9:64:96:a2:fe:0e:aa:9b:8a:7d:f4:0f:30:cc:b4:74:03:
         f9:81:b2:04:3c:c2:89:91:59:84:83:0b:97:f5:13:3f:45:8f:
         de:f7:5a:3b:5a:45:ba:23:9f:c7:f8:7e:d9:53:3c:5a:95:12:
         10:f8:50:4f:f9:7f:20:f0:76:a1:c8:f9:9a:ce:37:db:7b:f2:
         3c:c6:03:53:d5:d5:66:69:31:2a:3b:10:c5:26:83:88:d2:9e:
         e8:f4:72:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:58 2026 by rpki-client