Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78b6754e-4666-3a27-9222-718140c42054.roa
File:                     78b6754e-4666-3a27-9222-718140c42054.roa (raw, json)
Hash identifier:          2LQX4L/oG6PSW0QQ8vWvpmVsEcQblTPF25Eb+nBurtA=
Subject key identifier:   27:44:44:45:43:7C:84:15:6A:47:F6:0D:E2:E6:8B:CA:1F:3E:6F:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D81286B0DC6C43DC7B1CD0E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78b6754e-4666-3a27-9222-718140c42054.roa
Signing time:             Tue 14 Apr 2026 14:22:17 +0000
ROA not before:           Tue 14 Apr 2026 14:22:17 +0000
ROA not after:            Mon 13 Jul 2026 14:22:17 +0000
asID:                     396606
IP address blocks:        2001:500:124::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:28:6b:0d:c6:c4:3d:c7:b1:cd:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 14 14:22:17 2026 GMT
            Not After : Jul 13 14:22:17 2026 GMT
        Subject: CN=fa4443a2-2ed8-46a3-98d9-9a2053801126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:29:f4:f9:1f:fe:6f:5d:ad:28:76:7e:28:
                    86:c3:65:7e:76:d0:ba:d4:af:74:8a:cf:47:80:9f:
                    a5:9e:31:f0:77:d4:fa:e8:58:cf:fd:f8:dc:08:d4:
                    58:02:75:bd:53:ab:b9:1c:21:81:a6:43:1b:b7:d1:
                    0b:69:0a:3e:b6:b6:03:b4:c8:1a:74:d5:9a:24:33:
                    10:79:b9:fe:61:b3:d7:09:a6:26:a7:74:e7:a9:c7:
                    2e:4c:2e:20:85:00:af:41:83:0d:11:46:fd:82:ed:
                    f8:2c:2e:19:e0:b7:21:3f:f3:1a:43:dd:ee:56:98:
                    7f:5b:25:a3:93:77:a7:02:f8:8a:cb:67:13:7e:fd:
                    2d:f7:b5:8f:31:42:d0:fe:37:6a:37:c3:20:f5:4e:
                    78:4d:a5:31:53:c7:6d:8f:06:55:ca:d2:02:8b:2c:
                    60:93:2d:87:df:91:34:09:32:08:a2:d9:92:63:e3:
                    42:a0:d2:bb:08:58:06:61:da:92:85:e8:63:fd:54:
                    c4:e4:81:34:97:f4:0d:b4:e1:ca:6e:51:df:0a:2c:
                    8d:4a:b5:22:db:f4:5d:7b:15:a6:37:a6:e9:80:9a:
                    27:56:90:a5:00:00:53:33:07:75:c8:f5:c5:d0:16:
                    bb:15:3e:3b:4c:af:23:09:e1:92:20:38:75:e3:1e:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:44:44:45:43:7C:84:15:6A:47:F6:0D:E2:E6:8B:CA:1F:3E:6F:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78b6754e-4666-3a27-9222-718140c42054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:c9:76:7f:b1:78:8a:a1:61:61:3f:9b:d0:1d:1c:e6:5f:86:
         29:73:81:23:1d:b2:21:4b:cc:98:10:bc:23:58:a0:2a:a6:fe:
         59:18:31:62:a8:f1:d2:48:81:ed:8f:29:7c:31:17:fe:51:aa:
         49:8d:2c:14:2a:8a:58:3d:3e:94:55:df:f6:7d:42:47:e0:4f:
         a9:57:75:f6:d1:47:2e:8a:a9:66:f6:91:29:56:c0:74:e1:bc:
         93:e3:ab:43:6b:ac:60:03:00:7e:c5:86:9f:0d:3b:a9:31:cd:
         6b:d8:54:52:2d:aa:c3:38:48:e4:20:e3:84:c9:5d:b0:7c:52:
         18:13:55:89:f1:c7:d9:38:66:67:ce:c1:17:ee:be:d0:22:16:
         5f:74:fe:d2:23:df:9b:42:fd:30:67:80:4b:cf:09:c7:b0:48:
         36:2a:f2:f9:5c:10:e4:0e:ea:24:37:3f:94:6a:6a:1e:c4:d1:
         00:8b:45:8e:e2:f6:5c:d3:42:fc:cc:2c:4f:83:71:fb:1a:6e:
         55:d5:4e:3b:a8:53:d1:10:21:3c:6f:d0:aa:4c:21:73:b4:90:
         55:0d:bb:1c:06:8f:29:b7:28:1d:f7:a5:2d:b6:48:aa:b6:24:
         1b:8b:36:3e:99:2f:63:86:b4:62:c2:ea:07:b7:a1:be:ab:ce:
         ae:27:6d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:27 2026 by rpki-client