Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78faa5a1-84ab-3174-a7fe-63a1519aafb3.roa
File:                     78faa5a1-84ab-3174-a7fe-63a1519aafb3.roa (raw, json)
Hash identifier:          SVRwzRmkVrW3oCXwWgzn33fkGhWn5reJKZs4Imcsy9E=
Subject key identifier:   75:44:36:F8:72:8D:FC:98:8D:DC:EC:C7:4F:01:09:D9:36:CB:7D:52
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584D7B6A7F5BA8AB2CCF2EA6CE8F
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78faa5a1-84ab-3174-a7fe-63a1519aafb3.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     22822
IP address blocks:        2001:504:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:7f:5b:a8:ab:2c:cf:2e:a6:ce:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=59bc20e0-5aa9-4610-8be8-67724ab271e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f3:58:70:b5:28:53:db:d8:e1:c7:d4:0a:6c:
                    e2:67:b5:49:85:44:35:f8:75:63:a8:4d:d8:25:c9:
                    bb:93:0e:e6:70:b6:f8:c0:be:c2:8a:99:7c:c5:f2:
                    f3:c3:da:a8:de:8f:d2:74:3c:18:f7:a7:2d:92:b7:
                    c8:fe:8d:8a:00:02:5d:99:71:00:af:28:52:b9:95:
                    d5:aa:da:4c:83:1b:c1:aa:f5:29:9c:7a:c5:d4:2d:
                    ac:b7:91:74:b1:e0:7e:da:40:ff:29:fd:b7:42:1a:
                    bd:6a:de:4e:35:5e:e9:b9:4d:d7:86:16:19:33:a8:
                    1d:ed:a2:79:6c:23:25:68:03:11:b3:7c:52:4e:d9:
                    2a:ac:24:bb:ad:85:37:bb:42:53:ae:1f:9d:9e:cf:
                    c8:62:58:8a:34:28:66:9b:5f:7c:38:76:05:74:3f:
                    5d:4d:a4:7e:5d:ff:e9:6c:a6:35:88:01:7a:4c:18:
                    79:16:31:9e:dc:7f:4a:a4:69:c9:2f:fa:76:13:3f:
                    4e:3a:c1:f8:6b:8b:66:fb:0b:9d:a1:0b:8e:8b:b4:
                    da:4e:ff:18:48:fa:a6:20:d9:54:56:ce:38:8e:7b:
                    fe:b2:ec:78:99:67:a5:2b:e7:fa:f5:c3:67:80:5a:
                    2d:a4:bc:2d:5f:66:d7:d0:c1:3d:9e:53:9b:50:24:
                    c3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:44:36:F8:72:8D:FC:98:8D:DC:EC:C7:4F:01:09:D9:36:CB:7D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78faa5a1-84ab-3174-a7fe-63a1519aafb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:2d:c2:be:b9:a4:98:71:e8:4f:9a:27:35:c8:72:e2:22:26:
         e5:9a:f6:10:01:47:7b:15:74:39:3a:d4:1a:6b:5a:8c:1a:ec:
         04:bf:cb:06:7b:43:e6:9c:41:5a:a1:fa:6c:81:46:f0:d8:59:
         ce:64:11:5c:41:20:5e:03:0b:02:d3:fa:05:4f:27:ed:e1:a4:
         e5:3c:33:8d:76:52:9c:5b:2b:b1:06:fa:6f:60:cf:25:28:dc:
         37:74:b5:12:7b:d4:f3:18:94:82:9c:d7:0d:ec:f9:36:ad:1b:
         4b:a8:ba:40:6b:72:8d:ff:19:74:7e:09:10:79:29:4e:7b:16:
         b0:2c:e0:e3:f6:10:22:89:6d:11:ab:8f:73:ec:14:b0:f8:ea:
         eb:f2:9f:b6:5c:69:0c:9d:04:c0:f2:14:26:96:89:ba:d8:72:
         c2:fb:30:4d:fb:e9:81:c2:d5:43:c5:24:e0:92:31:f1:46:ce:
         1d:8e:94:94:6d:56:ee:af:fd:58:25:fc:50:c8:34:3f:dd:31:
         89:e7:26:50:8c:7d:a5:ab:74:37:a7:3f:4d:dd:87:2e:80:6b:
         90:58:87:63:64:9d:30:93:5f:c3:8f:b3:7b:1a:6a:49:d4:9c:
         17:04:8c:fc:45:45:60:e5:87:20:72:13:d1:e5:39:29:30:dd:
         26:e8:93:58
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE17an9bqKsszy6mzo8wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw
MDdjMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk
NTliYzIwZTAtNWFhOS00NjEwLThiZTgtNjc3MjRhYjI3MWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fNYcLUoU9vY4cfUCmziZ7VJhUQ1+HVjqE3Y
Jcm7kw7mcLb4wL7Cipl8xfLzw9qo3o/SdDwY96ctkrfI/o2KAAJdmXEAryhSuZXV
qtpMgxvBqvUpnHrF1C2st5F0seB+2kD/Kf23Qhq9at5ONV7puU3XhhYZM6gd7aJ5
bCMlaAMRs3xSTtkqrCS7rYU3u0JTrh+dns/IYliKNChmm198OHYFdD9dTaR+Xf/p
bKY1iAF6TBh5FjGe3H9KpGnJL/p2Ez9OOsH4a4tm+wudoQuOi7TaTv8YSPqmINlU
Vs44jnv+sux4mWelK+f69cNngFotpLwtX2bX0ME9nlObUCTDtwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHVENvhyjfyYjdzsx08BCdk2y31SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2
OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvNzhmYWE1YTEtODRhYi0z
MTc0LWE3ZmUtNjNhMTUxOWFhZmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk
MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk
MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0
ZjFmZDAwN2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAAc
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG0twr65pJhx6E+aJzXIcuIiJuWa9hABR3sVdDk61BprWowa7AS/
ywZ7Q+acQVqh+myBRvDYWc5kEVxBIF4DCwLT+gVPJ+3hpOU8M412UpxbK7EG+m9g
zyUo3Dd0tRJ71PMYlIKc1w3s+TatG0uoukBrco3/GXR+CRB5KU57FrAs4OP2ECKJ
bRGrj3PsFLD46uvyn7ZcaQydBMDyFCaWibrYcsL7ME376YHC1UPFJOCSMfFGzh2O
lJRtVu6v/Vgl/FDIND/dMYnnJlCMfaWrdDenP03dhy6Aa5BYh2NknTCTX8OPs3sa
aknUnBcEjPxFRWDlhyByE9HlOSkw3Sbok1g=
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:07:09 2026 by rpki-client