Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/ecb54580-5abc-3eea-8a4f-14d2a5154d6f.roa
File:                     ecb54580-5abc-3eea-8a4f-14d2a5154d6f.roa (raw, json)
Hash identifier:          NygqjP0r7mGAuWVCJcUBwFFAJE3JsWBOgS7v5Xc/IyA=
Subject key identifier:   8E:42:BF:BA:D7:4C:08:5A:22:E9:9F:52:97:DD:C5:48:2C:3E:0E:F3
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584B004BE5B009234D638C60BB00
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/ecb54580-5abc-3eea-8a4f-14d2a5154d6f.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     45396
IP address blocks:        2607:f4e8:ac2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:e5:b0:09:23:4d:63:8c:60:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=b1509910-764d-41cf-affd-75824802663f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6d:42:0d:f3:79:12:b7:48:24:da:67:3c:d7:
                    a4:cd:98:06:21:9a:e4:6b:65:a4:dd:1d:61:e8:66:
                    f9:19:73:ce:9e:fe:0e:0d:e1:f2:0f:a6:bd:10:26:
                    71:3d:6d:61:7c:bb:ba:b9:ca:81:8b:d7:dc:33:48:
                    32:cf:d4:da:2a:6a:62:52:4b:84:86:9b:5c:2c:35:
                    13:ac:9f:ff:83:c7:6b:de:fa:2a:a0:19:d5:86:ef:
                    7b:98:88:f1:5a:4a:82:2f:05:68:91:4f:a3:7a:8b:
                    5b:fe:3b:66:ce:4c:a8:5c:d6:92:16:dd:67:f5:65:
                    f6:27:37:0a:b4:3d:e4:b9:34:eb:62:8e:f9:ba:e3:
                    1d:7a:94:a2:59:94:04:10:30:76:89:44:12:4d:a1:
                    cf:5b:8c:29:c7:aa:bc:49:d4:0d:d7:6a:24:fb:6d:
                    0f:c1:74:0c:7d:6e:b7:f8:0c:90:36:ee:c8:48:86:
                    30:8d:a0:a3:7c:c8:c8:59:d6:81:e6:81:76:c3:4d:
                    d7:50:3d:e9:00:98:89:14:a5:61:93:d5:82:3b:d2:
                    12:5b:70:c1:c1:db:ad:a6:6a:2c:27:e9:9a:7c:ef:
                    91:7b:2a:43:f1:8f:0d:44:79:fb:13:12:02:f8:ba:
                    c1:f1:51:14:4d:51:1c:b0:96:5c:7d:58:92:7b:9d:
                    6b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:42:BF:BA:D7:4C:08:5A:22:E9:9F:52:97:DD:C5:48:2C:3E:0E:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/ecb54580-5abc-3eea-8a4f-14d2a5154d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8:ac2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:84:c2:e9:c1:96:cf:1f:44:9e:08:45:9d:be:53:08:1b:15:
         67:8c:7f:85:bb:03:8e:ef:cb:0f:b4:74:54:83:30:d8:7e:4f:
         bb:d4:36:fb:82:a1:86:c0:a9:26:f6:7a:93:26:c3:1c:27:cc:
         48:24:5e:75:d6:51:45:45:42:9b:04:49:b3:09:fc:0d:29:dd:
         57:03:1e:4e:73:c1:14:70:f4:ea:e7:25:1b:f2:7a:ad:10:c5:
         79:41:c1:84:ce:f8:07:a8:c8:6c:73:bc:28:7b:ec:6b:05:01:
         11:d4:a7:8c:c3:91:1b:f9:57:45:39:65:60:83:cc:d3:bd:9a:
         70:09:4d:80:57:6a:89:3d:8c:64:ca:5c:24:d4:1f:3d:af:3c:
         cc:75:a6:a4:18:e1:51:98:6a:3a:04:93:46:24:61:08:e9:77:
         4f:a9:97:17:35:21:64:1b:31:e8:62:2f:69:35:3e:20:89:0e:
         fe:7c:79:be:be:ee:22:32:ae:0d:2c:e7:14:d6:16:2a:01:e3:
         28:77:f9:51:fb:b6:fc:47:5e:c2:d6:6b:72:44:45:29:43:ce:
         cc:46:c6:54:30:74:0b:ca:bc:ef:77:59:c0:d2:0b:23:be:f5:
         20:fb:3e:e5:17:c4:36:b6:e1:7a:78:5d:63:73:44:a0:3d:c4:
         43:27:6c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:29:03 2025 by rpki-client