Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7710ac76-9493-3dac-85db-3c072834d8d9.roa
File:                     7710ac76-9493-3dac-85db-3c072834d8d9.roa (raw, json)
Hash identifier:          Dq/DaxwTEd5LfrSZJLiPtc6vBiOdGAOq7TbqnYGj8Xk=
Subject key identifier:   29:E0:F0:E2:9D:7C:F9:E2:3C:97:76:19:61:AA:F1:50:FB:8A:C1:EC
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584F7E7DC0A54DC4C24C679EC380
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7710ac76-9493-3dac-85db-3c072834d8d9.roa
Signing time:             Wed 14 Oct 2026 01:00:13 +0000
ROA not before:           Wed 14 Oct 2026 01:00:13 +0000
ROA not after:            Tue 12 Jan 2027 02:00:13 +0000
asID:                     45396
IP address blocks:        2607:f4e8:ac::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7e:7d:c0:a5:4d:c4:c2:4c:67:9e:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Oct 14 01:00:13 2026 GMT
            Not After : Jan 12 02:00:13 2027 GMT
        Subject: CN=ec341d1f-1583-4e84-bae3-428f91074ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:3c:bc:5f:39:d2:33:82:c5:4c:d5:73:23:
                    3a:7a:a4:dd:fc:f3:39:3f:31:ac:29:f1:51:74:0e:
                    b8:ad:95:9a:47:82:df:62:0c:b9:9c:a8:73:3f:db:
                    fe:c7:bc:1f:20:0a:49:6b:8c:5e:82:ce:96:76:9a:
                    64:96:66:65:50:c8:32:ac:eb:70:5a:19:7f:44:fc:
                    12:96:09:73:db:7f:a7:03:1e:3c:04:73:b3:df:35:
                    f7:11:d0:d9:1c:be:04:df:e0:77:3d:83:2c:fa:82:
                    a7:e4:e1:6b:87:5e:dc:79:b4:02:c5:09:0e:b3:b6:
                    33:33:20:a9:a8:74:11:38:2e:6c:15:25:ca:66:5a:
                    e0:5b:e2:89:c5:cb:cf:2a:d2:e0:80:79:b2:c0:37:
                    b0:3e:44:8c:88:aa:7e:3b:47:c0:d3:5a:df:a3:04:
                    0e:e0:cf:53:34:30:aa:69:00:c0:60:9e:0e:96:66:
                    b4:cd:52:19:50:e8:9d:d9:53:c3:ea:ef:6c:3c:c2:
                    9b:07:d1:4c:f3:b2:bc:85:52:25:05:ed:98:0d:e9:
                    9d:ca:78:5a:25:c1:e0:05:50:7a:cf:59:9d:25:be:
                    31:3e:c5:fb:4e:38:0f:41:f0:dd:31:be:57:a6:0f:
                    28:c9:cf:66:65:98:10:bd:6e:8a:e3:1c:ab:c1:7b:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E0:F0:E2:9D:7C:F9:E2:3C:97:76:19:61:AA:F1:50:FB:8A:C1:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/7710ac76-9493-3dac-85db-3c072834d8d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8:ac::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:55:41:da:aa:06:e9:94:43:6b:3b:fb:f1:46:d4:93:e4:84:
         d7:3a:b0:3e:2e:c1:a1:8c:33:c6:d4:8c:3b:96:c2:e4:88:7b:
         d5:f8:21:f5:87:d8:6c:66:dc:12:d2:d4:d3:c8:fe:94:75:74:
         7d:f6:29:ff:f8:49:1c:af:25:87:4b:02:26:14:4b:c7:84:3b:
         20:a9:9c:cf:5a:a2:40:8f:93:25:2b:d3:ac:f1:de:c0:98:de:
         3a:99:3d:52:84:05:5d:d3:3a:93:29:b6:4d:71:af:78:cd:96:
         9a:1f:4e:a3:66:b1:8f:0c:a0:92:e7:83:56:c2:c0:58:e1:b6:
         4f:cc:79:f5:6f:2e:5c:22:15:c9:48:84:fe:56:30:10:85:a8:
         f5:f0:56:df:ac:87:be:1c:6f:12:65:92:f3:26:d1:9a:37:05:
         f2:1d:cc:e9:14:aa:e8:21:cc:6e:08:9f:ae:43:a5:77:be:48:
         2d:ce:2b:24:52:52:57:1a:15:6a:3b:3f:22:0d:60:e7:28:9a:
         fd:e6:ab:5b:d2:fb:b7:bc:0f:ee:cf:40:a4:73:19:6d:2f:0a:
         ae:57:e3:af:15:53:69:40:14:0b:90:f8:92:fb:7c:c5:ce:32:
         da:26:b2:d9:04:31:0c:ef:8d:d0:0c:ea:d4:24:31:d3:a7:87:
         50:da:29:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:08:09 2026 by rpki-client