Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/b2d2f2ab-a758-37d5-a1f0-6afe4a9c049e.roa
File:                     b2d2f2ab-a758-37d5-a1f0-6afe4a9c049e.roa (raw, json)
Hash identifier:          qcgWNK69kWkm8Jdqi9wtvyNBd0pOOA/iE1hDKI53t/Y=
Subject key identifier:   EB:FA:2E:0E:5F:FA:CD:0C:F8:FC:3E:F8:B6:B5:7C:00:17:BA:5F:37
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584B3DBA2B775CBF25A4AB3417C0
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/b2d2f2ab-a758-37d5-a1f0-6afe4a9c049e.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     3477
IP address blocks:        2610:20:8c00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:2b:77:5c:bf:25:a4:ab:34:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=94ab45aa-cfd9-427e-ba2c-d518f01fd0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:54:36:2e:33:2a:83:35:1a:ab:c3:ed:c6:
                    72:07:1e:28:65:d8:0b:37:d7:9d:f3:24:05:45:3a:
                    e7:a3:e7:cf:14:d2:72:d5:05:0b:97:a1:53:c1:f6:
                    03:9b:ad:79:f2:0f:86:82:c2:60:53:79:57:c7:d0:
                    e5:7a:7c:19:93:bf:c2:3c:37:0e:a2:f9:a6:49:f5:
                    cb:32:15:e1:65:5a:74:8d:a9:4a:25:d3:dc:49:e4:
                    20:4e:8b:1d:92:a1:21:f1:a4:b2:4c:89:45:4b:cb:
                    0f:f7:6b:68:89:45:b6:9e:2c:bb:06:79:9c:a1:09:
                    06:d8:9b:4c:dd:43:25:b6:5b:ac:08:04:60:b4:cb:
                    2c:bc:79:ff:6f:60:66:7b:86:37:9f:b9:20:15:0c:
                    58:30:c5:31:da:54:54:62:a0:54:e2:0e:bd:05:d2:
                    05:62:73:5d:52:08:5b:4f:f1:80:cb:cb:6f:4c:52:
                    f7:b8:2c:82:57:31:c0:eb:36:82:66:bd:15:1c:ea:
                    f8:50:a5:b1:f9:1e:82:ed:1b:f1:12:f7:8c:18:9f:
                    e5:ed:a5:5c:89:8f:b5:58:32:6f:bb:a0:5d:38:40:
                    76:e7:f0:54:35:10:22:02:d6:1d:22:47:ac:d8:4a:
                    92:8d:85:18:46:8e:4f:bb:64:3b:e6:89:f3:ae:11:
                    e3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FA:2E:0E:5F:FA:CD:0C:F8:FC:3E:F8:B6:B5:7C:00:17:BA:5F:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/b2d2f2ab-a758-37d5-a1f0-6afe4a9c049e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:8c00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b1:6b:bd:e5:bb:ee:3e:f8:a9:44:89:ef:1e:15:52:63:66:
         b0:93:20:b5:29:41:77:22:65:e1:15:71:da:fa:2e:c0:9a:dd:
         e3:15:ea:40:64:63:21:7f:bf:d0:44:66:ba:9c:98:c4:7e:6e:
         45:9a:f0:33:1c:0e:50:f1:96:ac:62:e7:45:73:12:f2:1f:e0:
         02:e8:e5:6d:1e:78:76:d2:81:67:f8:ec:94:e2:00:5f:cb:39:
         54:a7:3b:68:4f:56:ec:4f:6e:03:dd:ad:d4:18:27:a4:36:a1:
         b0:33:bd:15:89:c2:90:b0:96:a4:b0:ce:1a:d6:a3:01:0b:d8:
         3b:f6:61:57:4a:85:a3:ca:9e:9e:99:6f:c8:d5:20:57:a4:ca:
         d6:56:61:65:ef:25:fc:4c:cb:55:61:a7:da:3c:b6:9f:f4:fd:
         09:a6:22:ae:86:eb:95:66:6b:13:02:03:f7:55:9d:52:a9:e2:
         69:15:52:9c:f3:ab:6b:d2:68:78:1f:aa:e7:2e:34:6c:53:ab:
         51:cd:a8:d0:f8:e8:f7:4e:21:98:b7:e1:2d:f6:17:59:58:f3:
         55:84:e0:c1:c8:f9:20:bf:c1:6c:23:f8:cd:7d:24:24:08:58:
         bc:97:70:2c:ef:11:06:3d:f4:c5:a9:2b:a4:cd:aa:41:1c:93:
         76:48:43:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:10:36 2025 by rpki-client