Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/d18c8c5a-b60b-3f8c-87cd-1167886890b3.roa
File:                     d18c8c5a-b60b-3f8c-87cd-1167886890b3.roa (raw, json)
Hash identifier:          wf69mxKTk9Dlg7JmnFrznN0L8ByWd134wu5V+d7KBt4=
Subject key identifier:   5F:FF:0B:C0:C6:B5:3D:D3:36:22:A0:7D:CB:37:4E:EA:15:9C:FA:9E
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584D7B6A7F83D25173E30412BF80
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/d18c8c5a-b60b-3f8c-87cd-1167886890b3.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     23059
IP address blocks:        2607:f4e8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:7f:83:d2:51:73:e3:04:12:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=1c17a86d-deda-4e46-944f-b2f1dab2d5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:24:34:9e:a0:8e:ca:ef:71:67:8d:5d:7e:77:
                    94:b0:c0:46:1b:47:98:40:13:74:1c:21:ac:95:a4:
                    8f:83:2a:a9:b3:ec:b2:8d:a6:4d:de:48:55:77:17:
                    ea:35:9f:b1:14:f6:45:55:7f:8f:a8:cd:22:63:ce:
                    ce:17:6f:66:03:2e:fe:1e:dc:92:9c:8b:80:ad:22:
                    4a:5a:0a:42:f2:b9:25:56:83:8b:3d:25:60:e5:a3:
                    37:61:c6:cb:79:18:3e:ae:a2:0c:e2:9d:9b:0d:42:
                    00:31:d1:7b:28:31:e6:c4:8f:8d:1d:00:ef:d1:29:
                    be:cc:49:22:16:73:7e:e0:19:1e:d1:37:b9:a7:7b:
                    f6:0d:46:d3:71:16:34:79:0d:68:33:50:1a:e8:91:
                    7a:a4:6d:97:0a:84:79:a8:4b:63:36:bd:ae:9c:53:
                    7c:f8:7b:05:b5:78:08:99:9d:88:57:1e:50:c2:f9:
                    ce:24:2c:72:9b:d5:76:23:4b:bb:ea:be:ad:eb:d6:
                    1f:71:cc:ab:38:bc:fe:e5:39:bf:26:84:ed:ca:9f:
                    ec:44:80:01:43:39:5f:32:27:e0:30:eb:f3:6e:f4:
                    0f:c0:cf:c4:d8:10:2b:c2:a3:94:67:a4:a3:2e:39:
                    22:4d:b7:ac:a3:cb:0b:69:09:73:cb:73:4e:ed:d4:
                    9e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FF:0B:C0:C6:B5:3D:D3:36:22:A0:7D:CB:37:4E:EA:15:9C:FA:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/d18c8c5a-b60b-3f8c-87cd-1167886890b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:52:00:c1:bc:c8:26:75:6f:a4:ee:f7:25:33:22:f7:b7:30:
         f7:a0:af:a2:b1:6e:36:f5:33:09:87:c9:b0:ca:36:ab:60:45:
         ae:9a:98:89:88:fc:ed:24:4d:28:94:12:3d:79:fd:38:29:34:
         09:95:3d:af:4b:32:28:b6:8c:60:d2:af:e8:e4:b0:f4:7f:f1:
         41:6a:98:6e:7a:77:ab:1a:cd:2d:26:8d:f1:cf:b9:69:5c:68:
         43:53:bd:40:71:2e:0e:fe:86:9d:fa:37:66:62:dd:67:b4:27:
         16:33:dd:c8:24:e2:9d:9e:d7:95:1c:98:44:ff:b4:1c:f4:56:
         a4:3b:b8:c1:35:c6:db:05:3e:b0:7f:a7:40:f2:2d:aa:9f:f1:
         e3:8b:95:d5:49:97:94:45:85:0d:cd:9a:2a:21:41:29:22:cb:
         f0:37:92:96:86:ca:46:11:c6:99:02:ed:08:ad:3e:56:fe:2c:
         6d:07:aa:7e:71:38:db:d4:76:a4:3b:f4:5c:97:e7:6f:e4:95:
         8a:69:25:03:7b:b9:9e:20:ef:26:c0:19:ce:f9:2c:31:06:fc:
         a4:d0:9f:ee:9c:91:38:c3:ad:ea:fd:84:16:8f:77:33:06:23:
         15:29:20:7e:02:27:a9:17:f5:65:5f:b9:c9:b0:4a:25:a3:d9:
         cd:24:7a:76
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE17an+D0lFz4wQSv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw
MDdjMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk
MWMxN2E4NmQtZGVkYS00ZTQ2LTk0NGYtYjJmMWRhYjJkNWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SQ0nqCOyu9xZ41dfneUsMBGG0eYQBN0HCGs
laSPgyqps+yyjaZN3khVdxfqNZ+xFPZFVX+PqM0iY87OF29mAy7+HtySnIuArSJK
WgpC8rklVoOLPSVg5aM3YcbLeRg+rqIM4p2bDUIAMdF7KDHmxI+NHQDv0Sm+zEki
FnN+4Bke0Te5p3v2DUbTcRY0eQ1oM1Aa6JF6pG2XCoR5qEtjNr2unFN8+HsFtXgI
mZ2IVx5QwvnOJCxym9V2I0u76r6t69YfccyrOLz+5Tm/JoTtyp/sRIABQzlfMifg
MOvzbvQPwM/E2BArwqOUZ6SjLjkiTbeso8sLaQlzy3NO7dSeBQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFF//C8DGtT3TNiKgfcs3TuoVnPqeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2
OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvZDE4YzhjNWEtYjYwYi0z
ZjhjLTg3Y2QtMTE2Nzg4Njg5MGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk
MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk
MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0
ZjFmZDAwN2MuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf06DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAxUgDBvMgmdW+k7vclMyL3tzD3oK+isW429TMJh8mwyjarYEWumpiJ
iPztJE0olBI9ef04KTQJlT2vSzIotoxg0q/o5LD0f/FBaphuenerGs0tJo3xz7lp
XGhDU71AcS4O/oad+jdmYt1ntCcWM93IJOKdnteVHJhE/7Qc9FakO7jBNcbbBT6w
f6dA8i2qn/Hji5XVSZeURYUNzZoqIUEpIsvwN5KWhspGEcaZAu0IrT5W/ixtB6p+
cTjb1HakO/Rcl+dv5JWKaSUDe7meIO8mwBnO+SwxBvyk0J/unJE4w63q/YQWj3cz
BiMVKSB+AiepF/VlX7nJsEolo9nNJHp2
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:33:32 2026 by rpki-client