Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a68e4148-cf1e-3897-950d-73b1670f964c.roa
File:                     a68e4148-cf1e-3897-950d-73b1670f964c.roa (raw, json)
Hash identifier:          /Y66JDWTM0Metlp0RX9TOKPMoER2noF83WXGTSg1DRU=
Subject key identifier:   66:7B:A9:4F:29:D5:B2:5C:61:40:4E:03:CD:4D:78:3A:76:3F:A8:2A
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584CFDEAAA83DE6AA960A9FE0900
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a68e4148-cf1e-3897-950d-73b1670f964c.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     3477
IP address blocks:        2610:20:8040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:aa:83:de:6a:a9:60:a9:fe:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=c37477ae-57ac-4596-a473-cb6d0faed514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:44:02:31:24:c5:4d:a3:72:82:de:46:cc:b7:
                    42:4c:3a:76:d0:85:97:85:41:6b:db:c1:e1:f9:39:
                    18:cb:4c:80:22:67:2e:b5:b0:04:71:06:4d:35:fa:
                    00:b1:bc:26:ad:59:78:b9:53:e2:99:a4:d5:66:22:
                    70:fa:e3:b5:56:cf:bf:df:01:83:c7:9a:0d:9f:29:
                    46:29:f8:b4:56:38:30:58:ab:97:77:e4:23:f3:14:
                    d7:69:68:b9:c9:70:b2:3d:52:49:b6:9e:38:3b:c1:
                    6c:4d:7a:b9:c5:f6:54:a9:b3:d8:9a:bc:1f:70:8d:
                    1b:21:a9:78:e3:84:d9:ca:0f:f2:e0:17:1f:3b:aa:
                    af:d9:2f:a2:e5:a4:99:cd:d7:8f:c9:9e:9b:48:4e:
                    02:9e:e7:18:d3:50:dd:d2:09:a7:cc:46:c9:c8:e1:
                    3f:0a:43:85:e8:cd:09:44:55:c6:ec:b7:d3:1e:2b:
                    2a:fd:83:18:ae:1a:fe:0e:da:dd:bb:7d:63:f9:3b:
                    b3:be:60:80:a9:90:f4:b2:f3:25:f1:6b:cf:ce:fc:
                    a6:63:55:b2:e8:8d:9e:38:7e:98:ac:b2:0e:ca:93:
                    7e:f2:42:fb:75:10:a7:66:df:64:91:23:e1:02:bd:
                    0e:c8:10:60:79:04:e6:d5:f6:94:41:52:a2:10:46:
                    14:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7B:A9:4F:29:D5:B2:5C:61:40:4E:03:CD:4D:78:3A:76:3F:A8:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a68e4148-cf1e-3897-950d-73b1670f964c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:8040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:10:de:ab:c2:53:c6:bc:b3:95:c3:cd:ad:49:60:c5:12:59:
         b4:cf:b6:30:b0:9d:01:8a:48:b5:a9:1d:b4:a1:0f:d2:62:6d:
         5e:80:5c:46:bf:bc:56:62:4c:d4:a5:03:7d:e8:7f:88:e7:e2:
         ac:93:1e:88:3b:e7:d0:d9:0c:0b:bb:60:f4:ef:67:25:09:51:
         c2:c0:55:06:04:a7:c6:66:0f:49:48:63:72:e8:59:cd:a6:fc:
         4f:9b:1a:cb:eb:95:5c:46:9d:4c:38:c3:b4:a5:71:ad:b5:63:
         ce:cd:8d:1f:6c:12:4a:14:e5:4d:55:ab:34:57:4c:35:8c:61:
         5e:3d:01:bb:22:a4:0f:d0:a1:47:b1:06:02:dc:b2:54:4f:f3:
         84:0f:d1:3f:9b:8c:44:08:4b:6c:05:04:a0:2a:0f:9b:e3:be:
         9a:e6:73:0a:aa:f3:cc:53:86:60:0f:d8:3a:c2:e2:70:be:29:
         a8:a2:8b:5b:07:c2:a2:59:a2:e3:df:78:8e:ca:d5:6e:b7:36:
         c4:b5:bd:73:91:0f:6a:12:bc:86:80:db:22:90:19:7b:65:90:
         15:69:fa:da:94:f6:50:b2:b2:27:44:13:ff:e8:e7:50:89:84:
         3b:7d:f4:69:f0:36:5f:43:41:8d:91:c2:21:f7:31:b8:9f:dd:
         66:26:56:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:21 2026 by rpki-client