Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa
File:                     5e197e82-6568-36db-8744-a92186db0276.roa (raw, json)
Hash identifier:          m4XnEJiL18Ajemyf4yPaopmePBQGLc4Vk9qFcTun4V8=
Subject key identifier:   5F:98:5B:F1:37:16:B8:81:65:D9:5F:30:80:EB:69:96:5A:7C:22:A8
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584F497605658B72009A84B89000
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40623
IP address blocks:        2610:20:8020::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:05:65:8b:72:00:9a:84:b8:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a1760f7b-5649-4553-9be7-cc5c57cac77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:3b:1a:1b:39:aa:8a:98:96:00:0f:5a:ce:
                    8f:45:9e:64:b5:26:48:cc:60:cc:96:1d:94:09:79:
                    f6:52:39:4d:9d:ec:cf:47:18:35:bb:5a:ec:54:cd:
                    a9:f3:0d:74:dc:91:34:6f:32:19:03:7d:37:64:20:
                    2d:38:e3:e0:a2:a5:28:85:70:88:84:05:9f:00:83:
                    5f:30:b5:ae:e5:e4:19:d6:c5:5f:4b:a4:32:22:3e:
                    81:fe:2f:41:cd:fe:d5:34:56:e0:eb:9f:48:9a:20:
                    32:7c:53:8b:dc:c7:8e:17:ac:5a:26:aa:98:c1:f2:
                    0b:cf:1a:3f:22:13:b1:77:53:e5:99:b5:de:90:88:
                    7f:e7:e5:75:1f:47:2c:97:47:0d:4b:f1:6d:3b:a4:
                    5a:64:6e:59:d7:a1:bb:03:f6:1a:58:e4:94:53:10:
                    f8:12:53:5e:2a:8b:27:df:bc:8a:f6:a6:77:44:af:
                    e1:6c:15:d4:f4:6a:ec:1c:46:a7:bb:6a:27:91:dd:
                    3f:2e:d7:ac:df:a6:b6:ed:10:b8:2f:7c:bc:b6:1e:
                    a2:73:7b:9f:60:b3:09:f7:51:7e:fb:ef:9a:19:81:
                    1b:4c:7e:f1:c5:14:3f:38:c7:a1:cb:28:9e:49:2e:
                    5a:60:40:12:8f:91:d4:10:d4:eb:d8:19:f8:17:99:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:98:5B:F1:37:16:B8:81:65:D9:5F:30:80:EB:69:96:5A:7C:22:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5e197e82-6568-36db-8744-a92186db0276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:8020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e8:71:76:2d:86:54:bd:36:66:fd:1c:d9:ee:de:2e:a1:80:
         d9:ec:18:00:09:f8:11:80:af:18:35:ef:65:90:40:49:26:aa:
         af:5e:52:e6:1a:6b:ba:94:5a:9e:3b:bb:d7:76:47:08:54:c5:
         19:75:f7:38:e9:f0:71:88:29:8b:ee:f7:24:f8:52:11:72:ec:
         a7:1f:12:9c:f8:87:bd:ea:47:64:52:b1:87:e4:df:11:b7:fe:
         e5:e9:3d:94:ba:2a:ee:60:73:91:49:a0:b1:e3:dd:8e:6b:54:
         63:94:33:b7:ee:eb:f8:e8:54:4f:cc:1b:13:c0:99:99:9d:93:
         c6:b2:4d:37:e1:33:a3:8f:88:b0:12:47:f3:37:6a:c5:7d:8c:
         1b:f7:ab:56:83:71:58:2b:6c:d2:93:f7:65:14:fa:d3:ce:e4:
         8b:a9:09:d2:f2:71:ef:56:f5:a4:e3:ab:19:f8:4b:cb:73:e2:
         c4:3c:78:b7:89:d0:9d:ca:4d:d6:ee:68:11:c1:28:40:b8:cf:
         c6:c3:67:d6:d5:83:b7:6f:45:5a:fe:aa:54:f2:48:a9:b9:d8:
         4e:3b:c1:77:73:77:83:8e:db:89:a5:97:78:61:87:52:70:19:
         ce:30:97:82:47:b6:dd:c0:92:8b:89:f2:82:39:7e:45:73:dc:
         69:32:84:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:06:52 2026 by rpki-client