Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/b2df31ce-94e7-3fbc-b58a-5411178685f7.roa
File:                     b2df31ce-94e7-3fbc-b58a-5411178685f7.roa (raw, json)
Hash identifier:          SJ3z+70SqJc4BKrefRRfA9zL27YkOOec9paPBZNql7Y=
Subject key identifier:   D6:68:9C:C0:80:0C:04:14:15:A6:7B:AD:35:B5:72:40:99:72:6F:7A
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584B3DBA2BDCBE60564D0702F140
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/b2df31ce-94e7-3fbc-b58a-5411178685f7.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     3477
IP address blocks:        2610:20:900e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:2b:dc:be:60:56:4d:07:02:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=6d3ed0ad-8998-4665-ba6d-58106dc3f9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2f:32:88:39:a9:39:76:7b:06:fa:87:f2:15:
                    b1:7d:c3:a4:ea:71:df:a4:86:bb:91:42:7c:d4:8e:
                    66:52:5f:b5:33:9e:c6:91:c6:de:08:de:55:e5:c8:
                    ef:5d:75:32:ff:a5:3a:99:63:a7:8c:d6:11:32:ba:
                    3d:75:b7:86:ff:bf:b4:97:0e:03:bf:1e:dd:47:c9:
                    d9:b6:aa:b3:3d:4c:6b:59:95:dc:b0:2c:f6:1d:06:
                    f4:13:f8:40:ca:c2:ec:2c:6c:11:f0:c5:4a:10:04:
                    ff:c3:11:8d:e4:eb:c1:bc:92:5b:92:56:f6:9c:df:
                    d7:ac:fe:1b:8b:27:77:8d:9e:55:0b:d4:8a:0d:87:
                    08:27:00:3b:31:46:a6:dd:d1:d7:05:a2:65:32:1e:
                    c7:c7:6c:74:8a:1f:87:13:37:ed:76:72:05:58:81:
                    12:f9:a9:44:03:20:5e:c7:7f:fd:01:0e:a5:04:14:
                    e6:52:de:d2:aa:87:6d:b5:b1:e1:ce:44:a6:da:4b:
                    9c:84:a5:18:db:f3:af:8d:3f:d5:f3:86:d3:5a:62:
                    d7:77:fd:f5:aa:4c:a3:84:30:83:9d:18:79:ed:a2:
                    61:d7:36:79:30:1d:98:7e:0e:bd:56:76:79:56:83:
                    4a:03:a9:18:ae:b9:16:c6:11:32:39:3b:5f:fe:b9:
                    fc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:68:9C:C0:80:0C:04:14:15:A6:7B:AD:35:B5:72:40:99:72:6F:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/b2df31ce-94e7-3fbc-b58a-5411178685f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:900e::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:6d:ef:62:d7:d1:61:7b:50:87:50:1e:53:7d:ac:d6:6b:ad:
         7d:3f:27:c4:4d:02:29:02:6e:5b:38:e8:60:bf:9f:43:75:16:
         b1:ba:ec:10:2f:f9:6c:ac:3c:3c:c9:fc:19:8b:86:84:72:06:
         44:d2:4a:c3:c1:88:02:04:11:0c:f2:d9:67:39:5c:68:a2:18:
         07:07:95:7e:3e:89:76:e2:19:e9:ff:28:b3:7a:fa:ca:a8:8a:
         83:b0:1e:29:6c:0f:92:7b:19:7a:8a:4e:a7:ec:8c:79:c7:92:
         1b:f8:a4:f0:c9:46:6d:c3:0a:2f:c1:81:21:c3:0c:1e:9d:f4:
         ad:0c:b2:3f:0e:46:91:e2:57:cc:8f:ea:a8:94:23:1a:c6:78:
         25:65:22:b6:d8:56:cc:e3:ee:2d:79:12:c4:f4:f3:f5:f7:61:
         02:2b:84:2b:a7:ea:b5:11:b4:23:dc:3a:03:db:c6:b5:8e:88:
         a6:8a:02:34:5a:b0:cf:28:b9:14:09:4c:05:02:c7:f9:0b:94:
         79:f2:d9:46:8a:16:6f:c5:4d:aa:11:1a:d4:93:3e:5f:69:f4:
         d1:2a:a2:47:80:50:ba:6e:84:3a:9c:55:5b:3b:69:61:80:15:
         1b:eb:1c:dc:e3:e7:a4:10:e6:1d:bb:28:07:89:53:64:bc:2f:
         06:5c:67:ce
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uivcvmBWTQcC8UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk
MDRlMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
NmQzZWQwYWQtODk5OC00NjY1LWJhNmQtNTgxMDZkYzNmOWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi8yiDmpOXZ7BvqH8hWxfcOk6nHfpIa7kUJ8
1I5mUl+1M57GkcbeCN5V5cjvXXUy/6U6mWOnjNYRMro9dbeG/7+0lw4Dvx7dR8nZ
tqqzPUxrWZXcsCz2HQb0E/hAysLsLGwR8MVKEAT/wxGN5OvBvJJbklb2nN/XrP4b
iyd3jZ5VC9SKDYcIJwA7MUam3dHXBaJlMh7Hx2x0ih+HEzftdnIFWIES+alEAyBe
x3/9AQ6lBBTmUt7SqodttbHhzkSm2kuchKUY2/OvjT/V84bTWmLXd/31qkyjhDCD
nRh57aJh1zZ5MB2Yfg69VnZ5VoNKA6kYrrkWxhEyOTtf/rn8VQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNZonMCADAQUFaZ7rTW1ckCZcm96MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz
ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvYjJkZjMxY2UtOTRlNy0z
ZmJjLWI1OGEtNTQxMTE3ODY4NWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5
NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3
ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk
NTNkN2QwNGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJhAAIJAO
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKNt72LX0WF7UIdQHlN9rNZrrX0/J8RNAikCbls46GC/n0N1FrG6
7BAv+WysPDzJ/BmLhoRyBkTSSsPBiAIEEQzy2Wc5XGiiGAcHlX4+iXbiGen/KLN6
+sqoioOwHilsD5J7GXqKTqfsjHnHkhv4pPDJRm3DCi/BgSHDDB6d9K0Msj8ORpHi
V8yP6qiUIxrGeCVlIrbYVszj7i15EsT08/X3YQIrhCun6rURtCPcOgPbxrWOiKaK
AjRasM8ouRQJTAUCx/kLlHny2UaKFm/FTaoRGtSTPl9p9NEqokeAULpuhDqcVVs7
aWGAFRvrHNzj56QQ5h27KAeJU2S8LwZcZ84=
-----END CERTIFICATE-----
Generated at Sat Oct 11 05:13:08 2025 by rpki-client