Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a92c6ee3-6031-368e-8a60-743da2dd5f95.roa
File:                     a92c6ee3-6031-368e-8a60-743da2dd5f95.roa (raw, json)
Hash identifier:          QXXwUGfjkzFMvKQNR0mxDBm+3oF+7/JnGd47eM99Yrs=
Subject key identifier:   54:DD:26:4D:5D:45:8B:6A:E1:FD:7D:35:19:83:E5:0D:76:44:EF:DA
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584D100CFABD145F08221D19D740
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a92c6ee3-6031-368e-8a60-743da2dd5f95.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     2648
IP address blocks:        2610:20:8804::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0c:fa:bd:14:5f:08:22:1d:19:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=0108a9f7-4441-435a-af48-ae968d995ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:05:c8:40:71:4e:89:59:c3:93:30:00:e1:2b:
                    e6:16:88:47:8a:40:49:c0:6a:84:f8:af:ca:d9:8c:
                    a5:8f:61:4b:63:ec:4e:45:b6:87:27:4b:67:78:19:
                    83:9d:a6:52:34:e0:35:6e:c1:87:6f:14:b4:9e:42:
                    99:f4:17:39:97:88:9b:8b:8e:82:f2:e3:81:d0:4a:
                    3b:e6:00:59:99:63:0c:ad:be:b5:47:5f:67:cf:99:
                    80:77:f5:a4:3e:78:57:2e:89:fa:ef:4a:85:80:fb:
                    3b:d6:93:f3:35:21:78:5c:8f:39:af:4d:9e:3b:ac:
                    cd:63:a5:1f:7a:f9:50:7e:42:e2:32:78:9b:54:64:
                    23:0a:b0:84:01:cc:f4:8d:65:58:5f:49:fb:2b:05:
                    a9:fc:85:25:46:98:5b:9e:e7:96:26:cb:8e:6e:16:
                    ef:86:e4:1f:5a:36:f5:58:9e:e7:00:d6:55:7b:c8:
                    9a:99:9b:7c:91:35:24:7d:2a:c2:18:a4:9b:4f:fb:
                    25:64:1a:f8:5b:de:28:f1:2e:84:70:b9:9b:be:0d:
                    aa:2f:1e:91:a6:54:ba:1d:49:92:be:80:81:98:00:
                    f4:8b:91:c6:be:e6:61:6e:1b:1c:85:e8:4a:40:a7:
                    24:a6:7d:43:9c:28:09:b0:76:eb:e7:60:e6:fb:f5:
                    6f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DD:26:4D:5D:45:8B:6A:E1:FD:7D:35:19:83:E5:0D:76:44:EF:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a92c6ee3-6031-368e-8a60-743da2dd5f95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:8804::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:97:5e:00:a3:af:29:66:1c:70:cb:d6:ce:b8:99:e6:01:ef:
         ec:30:3a:92:bb:f2:66:02:ee:48:91:5d:f4:c2:09:19:7b:c5:
         74:37:84:e2:36:3f:22:2a:a8:6b:13:71:2d:4c:a7:9d:62:54:
         e2:61:30:57:03:6f:96:ec:48:11:d6:b4:e7:de:83:9b:ce:64:
         01:bb:57:00:1f:ed:a6:cb:86:12:cc:2e:42:fd:ad:f5:3c:ae:
         21:12:c8:b3:26:89:fc:2f:c8:9c:43:12:8b:56:7d:2a:8c:38:
         1f:b0:c7:f8:ee:65:d9:1f:7b:db:85:55:8b:51:1e:4a:80:e8:
         21:7f:18:90:d1:f9:06:18:93:e0:a0:3a:77:02:2a:3e:77:cf:
         87:9d:7b:5e:81:5f:b3:29:08:c2:9c:50:4c:4f:d0:8e:00:1f:
         e4:ff:00:bb:1d:24:71:94:32:65:e8:2a:60:a7:d8:6a:13:88:
         9a:1e:3a:1e:38:46:54:e4:7f:ee:5d:7e:3b:fe:03:9b:6d:0c:
         78:ee:5a:22:74:53:d2:5e:76:49:f1:d2:5b:80:ee:0a:10:3b:
         8b:fe:39:26:37:ef:7a:fd:c3:5c:fa:90:de:94:b7:88:93:74:
         57:07:2e:0f:e4:ad:a3:e7:be:6c:2d:62:1e:fb:dd:66:76:b4:
         37:77:84:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 12:10:08 2026 by rpki-client