Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/ba25f5e4-05de-3e9a-bcc1-6b8d4e070e2d.roa
File:                     ba25f5e4-05de-3e9a-bcc1-6b8d4e070e2d.roa (raw, json)
Hash identifier:          ZS/EkoCsvQiE6+Il0fCuMqp9dVMEOcsCaXndNqKZxpc=
Subject key identifier:   0F:70:F9:81:9B:E7:7A:A5:47:D4:0F:66:4B:82:2C:29:71:B0:7A:B5
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584CFDEAA745532403349A16F170
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/ba25f5e4-05de-3e9a-bcc1-6b8d4e070e2d.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     3477
IP address blocks:        2610:20:90e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:ea:a7:45:53:24:03:34:9a:16:f1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=8a032d5c-b3f3-4a04-86df-92f1c48a3602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:59:74:02:d6:72:72:d8:14:1e:30:17:00:
                    db:3d:e7:fe:06:6b:8e:e9:13:00:0c:d1:6d:b3:cf:
                    aa:ea:da:29:c4:7f:bc:c6:8d:76:3c:2f:ad:4f:a5:
                    7d:01:bf:72:2f:04:87:cd:cd:9d:55:c2:10:a8:6f:
                    8c:9b:e3:a5:c7:58:0a:e8:d0:8a:72:ba:d8:6a:4e:
                    00:07:5d:6f:9c:65:5f:a6:24:d6:59:ae:85:a7:e8:
                    f3:56:64:a9:11:4e:f8:68:d4:ba:78:92:b9:c8:c1:
                    3f:d6:fa:10:a4:56:8d:8c:81:ad:40:4c:bb:81:37:
                    5d:98:d3:f5:36:75:12:10:f7:86:1b:78:5f:95:19:
                    c5:d7:6f:f8:e3:9d:5f:9a:f7:92:c0:d8:98:6b:a4:
                    94:77:26:87:3f:6b:b8:44:92:b4:c5:54:57:7f:58:
                    ae:91:4f:38:0d:98:68:71:68:93:a7:ef:51:fb:4f:
                    de:90:5a:13:35:20:90:2e:29:39:97:f1:62:1d:91:
                    73:14:cc:32:f4:0c:b5:b9:06:e6:b9:53:c2:69:be:
                    bf:a8:2b:6d:39:12:f8:3c:c0:90:24:1c:58:5d:7a:
                    64:de:ec:83:74:dd:a3:f8:cd:f3:00:44:ea:5a:99:
                    52:92:91:b8:ff:c6:e3:9f:cc:b5:87:50:ed:40:7f:
                    a7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:70:F9:81:9B:E7:7A:A5:47:D4:0F:66:4B:82:2C:29:71:B0:7A:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/ba25f5e4-05de-3e9a-bcc1-6b8d4e070e2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:90e0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:9e:1b:f5:d0:44:8e:10:00:7d:02:be:95:b5:46:90:4a:a8:
         07:c0:3f:56:c4:54:69:ed:16:78:e0:3a:da:97:1a:ee:1d:84:
         46:5c:af:b3:67:78:ab:40:b3:87:41:76:f5:7b:af:49:09:8e:
         03:15:ef:60:09:1e:00:af:eb:af:20:fb:a8:47:17:a0:1a:37:
         f9:78:92:85:a5:c2:ee:5f:ac:60:03:2a:3a:43:4a:40:3d:96:
         34:da:42:35:ea:d3:5e:ea:8f:c8:bd:98:8f:71:65:c7:14:f2:
         57:c0:0f:f8:3b:92:2d:96:e8:bf:3b:19:74:97:54:de:15:93:
         7f:2c:2f:e4:f2:67:f5:e8:22:9f:92:9c:9b:c9:c9:47:9e:86:
         67:d7:09:75:6e:37:1b:e3:0a:ff:06:7d:ca:29:8f:c8:36:a2:
         c9:63:6c:e7:88:c5:f9:49:c5:eb:e5:d7:1b:69:80:c0:9d:10:
         3c:26:2e:80:bd:43:fb:d3:64:5f:6e:a1:dd:75:3e:80:66:c2:
         17:56:ed:ca:cc:f0:2b:25:a0:b0:ac:68:f9:bd:6b:e4:e2:d1:
         11:5f:cc:f5:6b:9d:a5:76:0c:69:bd:f2:07:14:52:f1:bf:df:
         12:c4:3e:ad:34:1c:0f:ce:45:d7:85:b9:7d:5d:60:90:1d:af:
         22:25:ec:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:57:28 2026 by rpki-client