Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa
File:                     a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa (raw, json)
Hash identifier:          gRz9s7+dGTJrZWdu/KgOLiF/hvSvRRZlrmimudkCfsw=
Subject key identifier:   06:91:F8:B0:B4:CC:31:3E:1F:4E:B2:D5:23:3A:61:F2:91:62:1D:C5
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584F0ED23503701BFFB05F51CE00
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     3477
IP address blocks:        2601:a004::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:35:03:70:1b:ff:b0:5f:51:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=94e3c3c8-33f4-4974-adb5-0a01645ae770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d4:99:90:29:d7:5e:9b:75:cc:44:1a:40:1d:
                    e7:d3:77:0f:b1:44:83:5e:5b:0f:d0:8d:d1:81:ee:
                    ab:ab:3e:85:55:70:ed:ab:b6:e2:1c:4a:03:b4:33:
                    e5:b1:a5:11:ea:52:48:8e:11:1c:5e:1a:15:b2:11:
                    d2:96:bb:02:4f:cb:8c:35:d0:03:80:fb:ed:d0:c4:
                    19:f4:c9:c2:21:2c:8c:45:4d:1c:0f:f5:cc:da:00:
                    0b:1e:b3:f2:e2:1a:09:f3:5c:5a:6f:37:d6:79:95:
                    47:13:b0:d7:69:cc:13:fb:26:fd:8d:1e:e5:66:79:
                    63:bf:87:25:8f:96:6c:78:d9:5e:36:2b:6c:d0:27:
                    ae:8c:27:46:28:89:1f:2d:68:7b:a0:73:48:ed:5c:
                    1b:89:16:ab:40:9b:06:3c:c9:36:ba:06:fe:0d:57:
                    2b:04:81:8f:a5:5f:e4:9b:de:38:99:0b:c9:e4:d8:
                    b5:27:b7:f6:a8:8d:a5:6d:2b:f0:67:51:87:b0:d6:
                    d3:9d:da:7a:81:9e:bc:c3:7a:20:8c:12:3d:ae:89:
                    dc:53:c6:20:87:55:06:6d:41:0d:34:79:34:a3:9b:
                    3e:fa:13:6a:e9:1e:52:ab:98:ff:84:ec:36:1d:4f:
                    a0:58:49:ac:b3:a7:93:c9:2b:ae:2a:01:de:bd:39:
                    ec:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:91:F8:B0:B4:CC:31:3E:1F:4E:B2:D5:23:3A:61:F2:91:62:1D:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a854fa6a-8ff2-39cd-bb8a-bf0412672cf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a004::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a2:32:e1:6a:8d:f4:2f:12:4f:70:58:8e:d9:75:2d:29:1e:
         18:89:a0:48:cb:44:c2:67:6c:9f:c9:85:2c:b0:22:8f:3d:50:
         f7:55:5d:6b:63:30:a6:d2:03:e7:3a:8f:bd:bf:bf:a8:00:4b:
         2b:5d:8a:25:3f:90:71:fb:f0:36:fb:15:05:0b:52:4e:38:e9:
         43:c0:da:4b:8d:12:bc:4f:4b:f6:f1:4d:08:af:d0:b8:00:cf:
         7c:53:2b:0a:79:f4:03:6c:3a:dc:f7:f7:48:76:a5:74:2b:ab:
         99:e0:4e:63:34:19:48:fb:14:af:66:11:20:0b:bc:95:a2:52:
         0a:64:49:6e:5c:b1:64:89:94:19:78:26:66:77:f1:f8:81:ba:
         58:6e:2d:49:0d:f9:31:bb:40:c0:a9:ed:d7:b4:6a:f4:ae:bb:
         e7:b7:61:67:a6:df:4e:b9:06:87:de:56:be:4b:dc:20:b1:a6:
         90:93:60:f0:f8:af:3d:d5:4c:e9:f9:6c:e8:e7:e4:62:d5:87:
         19:a7:02:8e:9c:b9:38:f1:02:0d:19:c1:08:f4:3d:bf:5a:fc:
         90:f6:a9:f5:9c:d3:36:e1:6d:01:14:f0:ea:1e:31:f8:54:5f:
         25:06:98:76:8e:c5:d0:0d:75:1f:84:1b:28:74:45:17:48:dd:
         63:fe:4f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:19:05 2026 by rpki-client