Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/f4883690-a616-3e9e-a6fa-ee4ffcc9392a.roa
File:                     f4883690-a616-3e9e-a6fa-ee4ffcc9392a.roa (raw, json)
Hash identifier:          qnstJFFxBUiL8eJ8JO5Mo60vPJo2emFJgDlT5aSjpGk=
Subject key identifier:   4D:21:FE:F3:2D:F4:BF:12:85:E1:11:1F:FD:68:F3:39:D2:67:5B:87
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584B3DBA2B4698809FB762712B00
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/f4883690-a616-3e9e-a6fa-ee4ffcc9392a.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     3477
IP address blocks:        2610:20:8800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:2b:46:98:80:9f:b7:62:71:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=dfa30b5a-2617-46e5-a725-d36b020ac1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:b5:2d:b6:3f:d5:5c:2a:b8:66:17:3a:44:
                    3b:b4:fd:db:df:9b:37:41:58:b2:37:58:b1:77:43:
                    6a:74:88:92:45:48:64:bf:d8:9e:2f:ea:8b:7c:57:
                    7f:6d:c6:57:21:19:a9:43:f7:4a:ad:23:06:f2:49:
                    d0:48:c3:19:32:e0:32:d0:16:d7:e1:23:97:9a:e0:
                    d5:1a:b7:13:1b:36:c0:d0:8e:63:b3:68:f0:ac:55:
                    b8:e9:80:f9:c3:05:1f:1d:3d:8d:b0:4f:f0:08:f9:
                    e0:b3:9b:5c:81:1f:83:ab:51:15:fa:8e:6a:5a:9e:
                    ce:fe:b1:13:1b:8c:64:2e:75:4d:a8:c4:fc:bd:78:
                    dc:04:04:fd:be:b4:0f:51:77:78:ea:41:b5:cd:52:
                    bb:d8:0b:e3:bf:4a:cf:e2:e3:61:05:a9:a6:a7:ed:
                    2d:2d:a2:c8:22:02:7b:e3:dc:10:66:22:87:11:3e:
                    b7:e0:50:8f:1c:72:84:12:aa:32:dd:44:1f:b4:b9:
                    a8:91:48:ef:48:0a:cc:c6:1d:51:c3:d4:23:17:f9:
                    19:9b:40:8d:32:8a:24:09:4f:9c:20:03:36:f7:93:
                    fa:9f:d5:0f:97:1f:7c:b0:b9:6c:93:c4:72:45:3c:
                    e6:e1:a5:02:08:a8:3a:f3:47:67:b2:45:38:a1:f3:
                    d6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:21:FE:F3:2D:F4:BF:12:85:E1:11:1F:FD:68:F3:39:D2:67:5B:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/f4883690-a616-3e9e-a6fa-ee4ffcc9392a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:8800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:3d:7c:fc:ba:eb:b6:34:15:79:1e:bd:9d:80:32:0a:b2:de:
         d1:53:0d:7a:ed:4a:4f:05:13:30:d7:71:b8:f7:08:e4:ef:6b:
         61:fb:7e:8d:aa:6b:5a:cb:1e:e0:6c:fa:3b:4f:b5:9f:02:9c:
         36:59:54:55:e9:c1:b3:10:a7:2c:90:93:2b:3c:5a:e7:c0:73:
         ca:0e:9a:04:37:26:2b:ca:a9:7c:af:85:3b:f5:31:b3:f7:93:
         3e:c7:4d:b7:40:66:b9:51:b0:8e:e3:55:5d:57:f4:5c:b4:32:
         bd:79:d7:f3:3e:f0:20:b9:54:c6:c3:9f:98:8c:5b:56:81:c0:
         b0:cd:e9:64:0a:b2:5e:47:37:59:fd:00:8f:ca:2a:e0:7d:90:
         7e:b5:2a:ca:af:43:a9:ba:ed:7a:38:41:d8:dd:09:f4:11:cc:
         87:21:17:f6:79:b7:65:6a:03:c1:54:fe:98:dd:b4:75:0c:b3:
         25:43:4b:60:04:80:b5:a7:5b:c7:3f:56:0c:de:55:59:75:43:
         ac:43:55:96:04:f4:4b:16:40:ec:4f:a1:15:ee:8d:90:9f:85:
         f2:9e:2c:4b:70:c6:f4:4f:ef:80:20:e2:57:59:6b:bf:84:13:
         bb:06:95:19:ea:2a:5a:88:df:2e:dc:43:5a:6c:ff:97:1a:4f:
         8c:de:5e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:13:56 2025 by rpki-client