Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/2f54aa0b-708e-32bc-ad5b-da33179b6aa9.roa
File:                     2f54aa0b-708e-32bc-ad5b-da33179b6aa9.roa (raw, json)
Hash identifier:          szS34Zy1HbHCi57Ysg15vBQvRRx+foopKSwtXxlHUlU=
Subject key identifier:   12:E7:2C:9F:CB:2B:8B:99:8F:93:8D:D2:72:39:E0:BF:23:7C:37:3B
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584B004BE9A1F92CED9D89CB3700
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/2f54aa0b-708e-32bc-ad5b-da33179b6aa9.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     26506
IP address blocks:        2607:f4e8:ac2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:e9:a1:f9:2c:ed:9d:89:cb:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=ddb219ac-38ef-43da-bf4c-2ee96af0ae6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fb:7b:30:73:e6:b7:23:93:54:ce:5c:ba:d9:
                    68:00:6c:9e:e4:c8:d8:65:35:21:24:bd:55:6c:32:
                    4e:dd:78:5a:19:3d:93:b2:d3:c6:3c:cb:c2:b4:4c:
                    62:a5:f9:08:9c:2f:84:57:b9:c8:97:40:24:1e:d7:
                    46:c4:5d:d9:9c:6f:57:dd:21:9c:6d:50:7c:0b:b1:
                    63:b1:c5:98:af:03:ef:e6:af:d9:41:0e:c2:c4:ec:
                    82:f6:c0:72:f1:68:71:21:c8:d3:14:02:dc:44:e5:
                    26:de:d0:64:c3:c0:40:f0:f2:68:fe:4f:6d:cf:8b:
                    1b:cc:16:6d:19:9b:39:9c:d9:32:8f:c2:f8:7f:c2:
                    f1:ec:21:c6:98:54:3d:dd:40:72:51:c2:e4:d6:24:
                    61:6e:aa:75:1a:94:fd:35:0c:27:b2:ae:ba:ae:28:
                    a4:a4:dc:17:6b:c2:36:02:8b:bc:6a:12:b9:63:e4:
                    75:86:e0:de:43:f5:41:5a:ea:87:85:12:fb:b2:84:
                    c6:02:33:5c:37:97:7b:75:73:df:45:43:50:7a:06:
                    d1:70:b2:20:39:b7:3b:f6:a4:ee:0f:f3:86:79:54:
                    5e:47:8b:eb:16:99:73:19:de:30:77:ea:32:8c:9e:
                    00:fa:5e:d1:aa:35:c0:45:3d:76:5a:4c:8c:27:be:
                    7f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E7:2C:9F:CB:2B:8B:99:8F:93:8D:D2:72:39:E0:BF:23:7C:37:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/2f54aa0b-708e-32bc-ad5b-da33179b6aa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8:ac2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:16:b8:ae:c5:11:06:3f:92:88:ef:34:b1:e6:db:5e:ba:cd:
         0d:fd:d8:60:01:1a:44:0b:e1:99:ab:b2:2d:88:6e:63:cc:9f:
         29:9e:c3:eb:7d:ea:56:2e:6a:1a:0b:3c:64:52:83:1b:4c:ca:
         85:30:eb:77:5c:d2:d6:93:8b:d1:56:a2:59:dc:be:74:db:26:
         86:02:8f:3d:4d:72:71:05:b1:69:8b:61:4f:65:8e:13:20:0c:
         93:c8:86:34:99:d6:74:22:97:8c:97:cc:ea:20:26:cf:c2:2f:
         60:a4:57:15:10:59:9c:ab:45:39:80:96:a1:c4:96:f7:c7:45:
         e8:ae:c4:11:60:ad:4a:dc:f2:e6:56:40:60:b0:0a:a4:c6:af:
         97:10:d9:5f:ff:ef:e9:5e:99:46:c3:fc:e9:71:41:6a:42:0d:
         c5:50:24:4c:20:f8:9c:42:b0:ef:78:d8:de:9f:db:78:34:7b:
         a7:3d:63:53:49:f6:a8:61:58:ef:0d:ed:2e:a8:7e:91:da:87:
         e4:89:ba:9f:10:a7:12:7c:95:fc:83:70:86:4f:f2:2e:74:e5:
         b4:bf:ac:a7:37:a4:d6:68:d8:5d:8b:39:8d:cd:97:29:17:1f:
         dd:34:17:cf:16:97:6d:93:f8:87:7d:8c:8d:db:0d:7b:76:a9:
         f2:63:e1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 11:47:30 2025 by rpki-client