Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78f610d3-f733-3ebc-9a63-0923831108b6.roa
File:                     78f610d3-f733-3ebc-9a63-0923831108b6.roa (raw, json)
Hash identifier:          lJqMcTWN3c469ETCRwt+xcoTaFGIP2qoJotnb8R0ZLs=
Subject key identifier:   06:47:B3:8E:73:58:70:20:C1:D6:9A:DB:33:1A:8F:30:9B:9C:7D:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA1989DBB8286DF49660D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78f610d3-f733-3ebc-9a63-0923831108b6.roa
Signing time:             Tue 07 Apr 2026 14:30:17 +0000
ROA not before:           Tue 07 Apr 2026 14:30:17 +0000
ROA not after:            Mon 06 Jul 2026 14:30:17 +0000
asID:                     396545
IP address blocks:        2001:500:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:98:9d:bb:82:86:df:49:66:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:17 2026 GMT
            Not After : Jul  6 14:30:17 2026 GMT
        Subject: CN=b334b7e0-f144-46ec-b876-11f104232c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:09:5e:4e:68:45:d3:8c:e3:bb:86:e0:da:99:
                    d0:1e:9c:ae:85:43:d1:51:30:5c:a8:78:7d:f4:61:
                    91:43:f4:a3:b0:04:aa:0d:b9:6f:d5:41:82:5e:e9:
                    0f:e6:82:20:33:f7:a2:31:98:b2:e8:85:58:86:0c:
                    7d:e6:8c:39:79:89:da:a5:95:b9:76:e3:69:e0:dd:
                    50:7a:25:22:5e:30:dd:5b:9c:fe:01:83:48:4c:67:
                    75:7a:33:01:fc:c0:b8:a8:85:02:d9:fb:b7:82:b2:
                    b5:f7:3e:68:98:6d:8f:ff:8f:a1:bf:be:3f:bb:90:
                    65:6e:e6:08:3e:06:bb:bc:9e:b7:bd:9e:95:e0:cf:
                    72:56:c4:c0:7b:bb:1c:e5:ea:7d:5a:37:35:a9:87:
                    48:05:3a:0f:80:19:f5:a6:6a:f6:e7:23:c3:da:8b:
                    84:d6:f5:44:c4:7f:d9:1d:3f:ab:e6:4b:7b:fd:f2:
                    53:da:90:62:84:6f:27:30:40:1a:7b:e4:e7:9c:31:
                    0e:71:aa:e1:cb:a1:d8:c5:3d:7a:cf:64:84:bd:c1:
                    f2:af:89:c4:9b:03:f9:ee:27:6a:d4:fb:ad:49:19:
                    b2:99:74:38:b8:47:63:69:69:ba:e4:cc:96:c5:52:
                    ba:16:84:f4:c7:7b:d8:d7:31:14:06:25:53:75:d1:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:47:B3:8E:73:58:70:20:C1:D6:9A:DB:33:1A:8F:30:9B:9C:7D:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78f610d3-f733-3ebc-9a63-0923831108b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:e2:fc:c3:7f:31:f0:f6:e1:cb:5c:03:0c:35:f9:18:f1:37:
         01:4a:f2:7c:71:2e:5c:17:94:d7:ba:18:72:98:0b:7a:2a:ef:
         e3:fb:3e:bf:f0:97:85:b2:13:53:35:07:08:6c:6b:34:56:b6:
         73:d8:c9:39:f9:c8:4a:4f:47:12:b8:57:d5:47:38:ad:b3:29:
         ab:f6:9c:d3:5c:00:71:cb:c9:e3:57:96:da:48:b0:4c:0a:ed:
         57:75:72:05:08:35:74:3a:08:8a:3a:b9:eb:b4:a4:ae:17:50:
         aa:ef:6e:c9:d1:63:23:2f:d1:75:5a:23:52:ab:62:96:7f:af:
         54:fa:04:93:28:4a:a4:ff:31:47:b0:22:60:08:f3:af:4c:90:
         33:85:8f:38:ab:92:1a:3f:dd:72:05:8a:0f:8c:f2:93:38:9f:
         8a:18:32:d1:7d:ed:1c:3a:1a:61:bf:ed:b8:17:ed:19:ae:ad:
         07:0a:30:4b:b1:23:09:10:7f:54:8a:20:10:10:58:c1:49:07:
         e1:d4:f0:57:ce:a1:86:31:ee:5a:58:32:3b:bc:8a:e3:bb:89:
         5d:b3:db:f4:2d:e0:7f:2e:43:4a:78:2a:ff:50:db:d1:57:7f:
         98:a0:c6:11:39:9c:7f:37:42:07:3f:ae:b2:fc:1a:fa:91:33:
         e0:f6:c5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:54:55 2026 by rpki-client