Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/78a6b278-a386-3ab9-ae89-23d472527cd2.roa
File:                     78a6b278-a386-3ab9-ae89-23d472527cd2.roa (raw, json)
Hash identifier:          p5YmeRq7rZ1h5QMrsFrSlPVnlfr82X48WaJh0R0kUus=
Subject key identifier:   BF:AB:3A:49:F9:90:91:A3:AD:23:3C:0A:37:53:69:D6:A5:51:65:F9
Certificate issuer:       /CN=917f98c2-cbd2-43de-a8cf-7091ad719621
Certificate serial:       010D0C9F4328584EEEB755BC9CF3A27A31BACE00
Authority key identifier: 5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/78a6b278-a386-3ab9-ae89-23d472527cd2.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     6939
IP address blocks:        2605:3ac0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:55:bc:9c:f3:a2:7a:31:ba:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917f98c2-cbd2-43de-a8cf-7091ad719621
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=5ce747c6-817d-4f41-bb36-62223d7eebdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:03:32:f0:86:93:12:03:5f:b0:02:be:10:71:
                    55:0c:5f:c4:13:19:45:d7:5e:84:0f:7c:6a:86:e3:
                    d4:20:b9:40:80:71:94:44:72:6e:bf:04:21:b7:77:
                    fb:9e:93:d5:01:1d:0c:5e:e1:40:6c:70:40:2b:b2:
                    96:40:2c:44:9f:88:35:22:68:a4:4e:23:97:d4:18:
                    a8:c4:4d:95:68:fc:47:a9:5e:a7:0e:ed:3d:e9:8a:
                    ac:72:9c:d4:8a:ce:73:b7:ac:68:db:03:cc:34:fb:
                    b5:c0:4c:17:55:54:48:eb:06:e6:18:b4:80:1e:54:
                    6f:cb:af:13:7f:f9:da:62:44:40:e3:ad:5c:1c:cb:
                    a8:65:ba:2b:a4:b6:e0:fb:11:04:0d:9b:a3:4a:03:
                    ed:ac:0d:36:56:4c:bf:a3:7e:c5:a3:76:98:de:7c:
                    25:d2:c3:6c:af:9c:8c:81:b7:20:93:b7:e1:20:6d:
                    d0:49:61:de:0b:af:2a:f9:11:fc:17:76:83:5a:96:
                    8e:e1:a2:6c:8a:27:b9:71:69:95:3d:13:5f:7f:3f:
                    ee:23:95:3b:4c:13:43:c4:c5:84:a7:d3:ff:7c:84:
                    f6:38:41:84:de:37:fa:c9:d8:ee:f2:a9:3a:1a:0b:
                    aa:85:1e:50:9f:f6:04:c5:9c:06:62:e8:4e:25:77:
                    2d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AB:3A:49:F9:90:91:A3:AD:23:3C:0A:37:53:69:D6:A5:51:65:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/78a6b278-a386-3ab9-ae89-23d472527cd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl

            X509v3 Authority Key Identifier:
                keyid:5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:3ac0:1000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f7:b9:56:5e:c5:cd:71:66:7b:6c:4c:de:dd:1c:ff:81:bf:
         23:c4:dd:15:bf:88:b7:47:01:18:b1:0c:4c:91:86:a2:0e:59:
         1d:ce:1d:b1:46:95:c3:e4:bf:1a:1a:75:8b:cc:c0:1e:11:cd:
         87:70:18:71:cb:f1:42:a7:54:e7:20:75:92:82:d7:94:c4:6b:
         84:7c:39:f9:e1:2e:b3:d2:3b:64:5e:fd:27:15:f1:45:63:38:
         4e:54:1b:6d:f0:56:12:cc:67:c4:05:47:70:ac:eb:f4:4e:f8:
         77:cc:75:e6:39:aa:94:89:08:3b:17:34:90:98:55:fc:d4:47:
         ca:f4:51:86:7a:ac:fc:06:75:4c:10:a1:60:50:60:3f:7f:44:
         4c:a5:b6:5e:26:8a:7b:2c:be:98:56:ff:00:d1:4d:aa:b0:53:
         ec:7d:cb:31:72:0a:e1:b7:40:df:62:7e:74:3b:6d:56:26:cc:
         c3:d1:4f:9c:da:81:28:cd:51:42:77:c0:7c:a0:8a:ff:b6:11:
         42:d2:82:2e:c4:27:b2:9e:aa:68:53:8e:96:cf:b1:bc:65:7b:
         0d:2b:3f:21:f7:d5:3c:94:8d:d4:38:4e:9f:b7:9b:7d:7a:4e:
         1f:90:c9:1a:67:52:10:04:19:5a:f6:ec:e3:f3:aa:c8:dd:2e:
         59:14:34:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:01:56 2026 by rpki-client