Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/78cc1441-32e2-314e-b44f-e81f2f3644ee.roa
File:                     78cc1441-32e2-314e-b44f-e81f2f3644ee.roa (raw, json)
Hash identifier:          ExUwH7iT8dn7oVAXfkPkirE62lWSU+uOc3O3+Zpcv48=
Subject key identifier:   36:2F:05:F4:D9:15:A9:3E:41:0A:AF:6D:F9:3E:52:0F:89:0B:65:4D
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584F1B623FA69B3D8642DB5CF2A0
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/78cc1441-32e2-314e-b44f-e81f2f3644ee.roa
Signing time:             Tue 08 Sep 2026 13:00:12 +0000
ROA not before:           Tue 08 Sep 2026 13:00:12 +0000
ROA not after:            Mon 07 Dec 2026 14:00:12 +0000
asID:                     54994
IP address blocks:        153.43.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:62:3f:a6:9b:3d:86:42:db:5c:f2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Sep  8 13:00:12 2026 GMT
            Not After : Dec  7 14:00:12 2026 GMT
        Subject: CN=604267ff-8467-4280-af2b-dfe9dcd33769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a2:51:8a:67:0c:4e:9b:3a:f7:e4:d3:50:7f:
                    fe:3b:9f:7d:dc:07:75:74:9b:63:a1:da:76:51:ee:
                    2a:35:3c:ac:a1:25:53:47:d0:a2:5e:2f:86:40:0d:
                    84:0b:04:3a:e1:00:00:28:dc:f5:a3:91:e5:9b:50:
                    25:ab:58:ba:c6:29:c8:fd:be:c0:a4:78:40:9b:20:
                    54:5f:b8:c6:d6:e5:e4:fc:12:2c:09:fe:5b:fe:7f:
                    7e:a2:ad:56:23:28:1c:55:52:dc:4e:12:45:a9:1f:
                    25:68:a8:2f:98:69:78:d7:89:97:5f:a8:7f:38:2c:
                    5e:75:3a:db:79:b9:24:b8:45:00:64:35:ec:8f:ed:
                    7a:dd:c0:82:2a:96:21:8d:69:16:5e:14:2b:b6:65:
                    c2:1a:83:ab:83:ac:da:46:22:4e:c3:10:db:67:81:
                    ce:bc:36:0d:9e:a0:b1:f4:c9:54:d2:db:53:9c:b8:
                    00:ad:8c:1e:e1:6c:b4:ec:e1:c6:a0:2e:ae:47:29:
                    a5:70:dd:fa:af:5e:bf:fa:d6:f7:3f:3e:39:b6:bc:
                    55:e8:c2:41:a6:1c:bf:ee:12:de:0e:10:67:7a:35:
                    24:13:a7:69:b7:1a:70:81:c1:13:bb:a4:4c:5f:40:
                    b2:f2:3e:45:95:f8:b5:ec:74:28:da:82:9f:25:96:
                    b3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2F:05:F4:D9:15:A9:3E:41:0A:AF:6D:F9:3E:52:0F:89:0B:65:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/78cc1441-32e2-314e-b44f-e81f2f3644ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:63:89:4f:15:b0:ae:e3:00:d3:0b:61:2c:03:af:67:89:4c:
         92:a7:f3:e9:ff:f1:c3:61:7b:06:a1:37:f5:37:07:45:8a:50:
         72:b7:a4:07:36:30:a7:64:25:75:c3:1c:de:fc:91:70:7d:f1:
         95:0a:1a:ff:a0:c9:47:78:f8:54:89:25:e8:09:23:33:cd:6f:
         19:94:b0:95:5a:fb:1d:15:dd:17:c6:28:88:58:ae:c3:c4:64:
         ee:fe:ee:76:dd:78:69:ed:cd:78:55:5c:22:f4:a1:53:b7:ec:
         d6:06:31:79:b1:55:49:7e:83:33:9a:19:74:45:c9:7d:a5:f3:
         7e:2f:10:d2:61:84:5d:4e:62:d8:96:a9:fb:94:15:83:c0:91:
         f3:66:20:7b:5c:40:64:5f:ad:1d:35:24:a1:10:8c:a0:3d:ab:
         a8:06:3f:07:fd:9e:61:30:25:92:9b:49:25:75:54:d5:da:03:
         fd:a2:a6:05:4a:c2:09:7b:73:b6:b9:9b:48:a7:b1:65:dc:5c:
         53:4b:af:24:c2:ca:34:0d:de:f4:08:7c:78:be:e2:f1:90:16:
         9a:87:52:94:2d:40:51:8e:9a:ab:e4:1d:ca:ed:5a:95:00:25:
         9d:47:18:c1:14:ea:7e:11:98:d6:fe:c1:87:3f:5e:71:cc:f1:
         b1:f9:13:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:17:26 2026 by rpki-client