Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c3c5736f-3dd9-38df-bf94-e68d628c65c0.roa
File:                     c3c5736f-3dd9-38df-bf94-e68d628c65c0.roa (raw, json)
Hash identifier:          cubCIp3CpbGJ48EDUyR7Eom57SjdtG2M7T21SOxxlio=
Subject key identifier:   DD:18:9E:2B:13:45:37:D4:26:EF:2F:21:03:73:5B:C8:91:8B:6B:0D
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584B4FDC76D0289B2C665CB92E80
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c3c5736f-3dd9-38df-bf94-e68d628c65c0.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     2648
IP address blocks:        2610:20:9122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:76:d0:28:9b:2c:66:5c:b9:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=0f435f20-1bd8-4394-9128-b1b389b49b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:76:c1:f1:9d:b7:b5:3b:c7:e2:97:c9:b3:
                    47:6c:af:df:5d:0d:6f:77:70:bf:75:a4:e5:af:02:
                    05:b0:29:5e:14:19:3c:06:07:65:35:32:84:ed:7e:
                    92:cb:03:c7:26:ec:7d:9e:ba:41:a5:c6:62:22:45:
                    3e:ad:eb:0d:33:95:7b:34:4b:df:19:88:25:08:fe:
                    e0:a0:e6:c6:0b:98:6e:5e:02:e9:e5:38:d7:69:f8:
                    f4:6f:9b:1d:c6:a1:c3:99:25:a7:19:91:5d:3e:ba:
                    09:aa:d7:cb:d2:a3:4c:f8:f1:e4:9f:a5:84:7b:1b:
                    d2:ae:7b:63:9b:0f:92:c6:11:46:68:03:8c:ab:bf:
                    fb:dc:06:0d:63:2d:4d:0b:dd:31:72:54:10:09:32:
                    3c:d1:35:5a:7a:2b:29:f9:b1:6c:3a:50:d5:bd:66:
                    43:43:ba:94:2e:26:99:a0:8a:d7:b5:d2:9c:0d:d2:
                    a5:da:60:82:1d:4a:be:47:58:24:f3:22:ea:78:da:
                    c4:08:8d:38:68:9a:da:58:67:55:e5:b8:40:64:e1:
                    2d:fa:d2:ce:cf:6e:83:bc:87:28:6a:be:6b:80:a8:
                    73:b3:48:09:9f:85:b5:9c:fd:09:d2:86:85:20:d3:
                    20:f9:32:ec:41:a8:24:0b:37:22:d8:37:57:95:60:
                    c3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:18:9E:2B:13:45:37:D4:26:EF:2F:21:03:73:5B:C8:91:8B:6B:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c3c5736f-3dd9-38df-bf94-e68d628c65c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:9122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:4e:3d:c1:af:bf:88:b4:5e:b3:cc:33:cd:16:ae:5a:c9:7a:
         b8:47:fb:a9:bf:9e:7a:3f:f1:63:e9:67:3e:e2:6d:de:b9:3a:
         64:bc:47:7a:2c:ec:c7:7f:08:35:9c:89:22:2b:4e:84:a3:f8:
         b9:8c:cd:4c:e7:2f:48:53:fc:18:bc:e1:1f:5d:2c:f3:ea:d3:
         fe:c1:3b:3f:f4:01:4c:5a:cf:7e:29:17:59:5a:19:2f:30:68:
         1e:a4:86:7c:39:5b:fc:ce:70:10:de:39:55:aa:5c:fd:6d:cb:
         5c:39:40:3f:c4:7f:2b:4a:3f:8d:e0:43:49:d6:8b:83:46:d4:
         5b:54:4f:0a:02:07:08:23:74:d9:4b:d6:fa:3b:30:c5:65:42:
         8b:87:af:10:87:a3:34:33:45:60:9b:4f:74:6b:a3:a6:b8:d2:
         56:e9:76:76:30:91:d3:0a:b7:37:8d:bd:ea:9f:c7:80:ea:ab:
         ad:af:d4:80:32:df:24:80:35:56:8f:9e:36:f6:48:a7:c8:5a:
         a0:a2:8d:04:c5:51:41:b7:03:e2:77:2f:59:e0:38:bd:79:5a:
         a8:e4:eb:7d:de:ba:17:5f:8b:46:3d:48:ec:6d:e1:08:55:3c:
         ad:92:7b:dd:04:1d:bd:69:50:7c:27:c5:93:2a:d3:bc:c0:4e:
         72:f6:d0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:12:48 2025 by rpki-client