Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/87f357b6-545a-36a2-99f6-f9dab2a5e5d8.roa
File:                     87f357b6-545a-36a2-99f6-f9dab2a5e5d8.roa (raw, json)
Hash identifier:          aCfef8XYxf0crvXIAUDTHHQc4gPZWmcs7KPNEZcm03o=
Subject key identifier:   19:23:87:FC:67:1B:29:CC:5C:1E:E1:DA:F2:58:FD:4D:DF:76:D7:F5
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584CE62CC3E13F10F91B9C0B8400
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/87f357b6-545a-36a2-99f6-f9dab2a5e5d8.roa
Signing time:             Wed 18 Feb 2026 02:00:31 +0000
ROA not before:           Wed 18 Feb 2026 02:00:31 +0000
ROA not after:            Tue 19 May 2026 01:00:31 +0000
asID:                     0
IP address blocks:        2620:2f:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e6:2c:c3:e1:3f:10:f9:1b:9c:0b:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Feb 18 02:00:31 2026 GMT
            Not After : May 19 01:00:31 2026 GMT
        Subject: CN=3dd3b53d-34dd-4ec5-88ba-f14483b50d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ed:f2:c5:3e:9f:68:c5:90:56:e8:9c:ae:28:
                    11:2c:da:14:9a:58:2c:9b:19:03:30:8d:bc:3c:fe:
                    03:37:ef:a8:ce:00:d7:a7:3a:92:bf:9d:b6:bb:13:
                    97:06:0c:3b:f1:3e:82:46:c4:24:60:cd:03:8b:d7:
                    04:f9:88:46:47:ec:05:da:3d:21:63:3a:0c:ae:19:
                    be:08:12:47:38:ae:10:d9:5b:5a:30:f6:37:ec:36:
                    e0:a1:c4:d0:f2:bf:91:49:ec:94:33:b3:bb:ed:94:
                    0b:26:c8:4b:07:fd:fa:6d:21:f9:33:ed:a1:c5:17:
                    f9:cc:b4:a5:39:48:7c:bd:4d:3c:45:64:01:27:2e:
                    af:00:2b:a8:ac:c0:3f:54:31:a2:6b:2d:1b:72:14:
                    e0:bf:df:eb:a5:8d:98:64:ae:7d:ac:34:2b:a3:97:
                    82:15:d9:75:84:bd:a2:97:0a:3f:9c:47:dd:d3:05:
                    12:92:6c:e8:6a:5e:fc:eb:d5:d5:ef:de:11:a6:1e:
                    70:d4:91:1c:b2:1e:53:54:fc:f3:4b:8c:a8:12:a5:
                    b1:e9:8f:1c:84:7a:6d:08:cd:dc:8c:65:78:c6:a8:
                    9c:ff:4b:0a:09:f0:e6:b5:45:5a:79:47:89:20:cb:
                    94:94:db:5b:4c:36:90:e6:19:72:c2:eb:77:b7:09:
                    39:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:23:87:FC:67:1B:29:CC:5C:1E:E1:DA:F2:58:FD:4D:DF:76:D7:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/87f357b6-545a-36a2-99f6-f9dab2a5e5d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:2f:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:97:6b:5a:bf:c1:28:12:9f:aa:5d:c7:12:0b:1e:08:ea:f7:
         ea:09:bc:46:ab:78:47:96:1a:ab:c1:6f:02:b3:5f:89:62:c6:
         45:f7:63:d5:d2:e7:e8:8e:4c:14:9b:6f:c7:20:5e:15:96:c3:
         b0:dd:df:83:0d:dc:93:d3:de:41:07:05:5d:06:f4:9a:1b:02:
         98:49:80:81:01:b2:79:ae:10:b4:c4:ad:e5:de:be:40:10:85:
         b5:b7:08:80:9d:57:4f:4a:9b:67:77:91:52:25:22:60:43:5d:
         ea:ee:8f:43:66:03:84:a6:ae:1e:18:28:ef:e4:7a:e9:34:28:
         d8:37:af:75:13:73:aa:fb:54:af:74:97:d0:50:98:af:ce:7c:
         17:a9:89:9e:43:2b:ff:62:0c:ee:3f:23:8d:0b:aa:c3:f4:ba:
         42:e5:f2:9a:9d:c2:ed:df:28:fc:89:6a:3f:24:04:36:37:a9:
         6d:fd:a3:bb:35:73:43:76:2c:04:73:4a:bd:4b:52:93:0f:27:
         e1:22:a8:2c:86:6c:b6:99:e8:4e:3d:50:7a:8d:18:69:8c:67:
         bd:a3:0c:1e:18:84:32:a3:09:76:6b:dd:05:90:e6:1d:d6:20:
         4d:b6:a0:60:55:66:29:1e:26:1a:27:c0:9f:e0:7c:ff:4b:15:
         a7:27:fa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:08:27 2026 by rpki-client