Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa
File:                     7d91392f-83f2-35b7-b65b-48348b34691a.roa (raw, json)
Hash identifier:          eXAQ4Cn0l0r+ipiu/NrievHeN7EgWqHgqKTAsir94Hk=
Subject key identifier:   59:9B:32:52:0F:8F:40:CF:B2:AC:11:79:95:4A:B5:E1:6F:65:B8:A7
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584D8C2A9D356B97EFB66FF50AA0
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     3477
IP address blocks:        2601:a005::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:9d:35:6b:97:ef:b6:6f:f5:0a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=441d95e1-a769-41bb-883f-c0c82a6c57e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:13:6b:5f:35:6c:3d:35:74:8a:56:96:ea:0b:
                    a8:0a:9e:f8:dd:7f:3b:ad:d6:93:a6:9a:db:fd:6a:
                    3a:d5:88:05:9c:cc:0f:5b:e2:83:05:e1:11:22:50:
                    f6:84:33:7d:89:ac:6b:8b:cf:48:54:6e:68:45:f8:
                    4f:76:06:ff:49:d5:7c:13:ae:76:dd:43:87:8c:df:
                    c4:00:12:22:14:7f:60:32:31:fd:7a:09:9c:60:33:
                    00:81:a6:9e:a3:76:7a:2e:4d:44:50:60:ce:be:fa:
                    0c:50:0f:8a:51:12:15:b8:fd:57:7d:a3:cb:35:bc:
                    b3:40:46:93:7d:ea:05:de:3c:53:fd:ba:46:4d:75:
                    75:06:f3:90:98:c7:54:54:bc:52:9d:65:72:6f:93:
                    18:03:36:ad:86:99:4a:a6:78:29:18:c8:d0:c7:67:
                    76:1c:f6:ec:0b:6a:c5:a3:48:b4:83:b9:11:fd:da:
                    58:78:cd:7a:7a:62:7c:88:43:84:b4:af:77:b9:f6:
                    11:f7:8d:b4:ec:f5:8c:fe:a7:41:d9:bc:37:64:e4:
                    16:1e:5f:a6:be:bc:c8:31:f9:b6:84:77:76:12:29:
                    dd:52:27:dd:d1:ba:04:0e:98:75:df:69:8b:84:32:
                    af:f5:c9:95:12:c2:21:a4:f2:c9:ff:42:34:1f:25:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9B:32:52:0F:8F:40:CF:B2:AC:11:79:95:4A:B5:E1:6F:65:B8:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a005::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:3a:94:22:d4:60:d8:0a:79:1d:96:e0:51:95:58:f5:70:ba:
         e6:01:12:60:f4:5b:1e:85:9c:89:b3:be:41:30:ff:4a:4f:0a:
         90:99:53:a5:38:b2:95:2e:38:35:77:11:4c:bf:a1:19:d9:64:
         db:c0:32:15:8d:d7:c4:25:6f:89:d9:99:72:5b:f1:84:8a:2a:
         8f:35:ce:c6:fb:91:af:e6:c2:71:d2:24:46:6f:87:92:25:9a:
         09:0f:53:cd:a8:9e:b3:db:bc:74:0c:95:34:de:ea:45:f2:a9:
         b2:72:0b:8a:2c:20:ce:38:0f:0a:c3:10:7f:7c:f9:1e:31:74:
         71:cd:28:a7:51:e7:93:fd:1a:74:89:4f:ac:e8:0f:68:35:c3:
         51:35:bb:74:6b:ef:2f:1d:59:a6:8b:a5:af:c3:40:78:cf:a5:
         a0:39:b6:40:fd:e5:f6:dc:c7:27:70:5f:e7:34:1b:6d:f9:d9:
         b9:4e:56:ab:35:3b:3a:d6:30:e7:ba:65:83:4b:5c:36:52:f7:
         5c:61:62:03:08:75:9e:0d:54:3f:1c:2b:d5:5c:83:dc:5f:80:
         ae:76:66:cd:53:e0:96:6d:c7:bc:54:03:ae:f3:ad:cd:ff:64:
         ee:4b:26:8f:cc:9b:96:28:d8:6f:f5:65:8d:91:87:68:63:60:
         18:76:62:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:24:18 2026 by rpki-client