Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/d18c8c5a-b60b-3f8c-87cd-1167886890b3.roa
File:                     d18c8c5a-b60b-3f8c-87cd-1167886890b3.roa (raw, json)
Hash identifier:          DOhCr0Vvcy4wlnBYrvIdSDLWZLXiSvIc2um1Cq6jM8M=
Subject key identifier:   BE:65:7A:AF:35:24:74:E3:82:2F:E7:CB:DB:5D:A5:D2:A4:96:EB:22
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584F9FFDC72ED0BFA0A7A1EB9080
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/d18c8c5a-b60b-3f8c-87cd-1167886890b3.roa
Signing time:             Mon 26 Oct 2026 01:00:13 +0000
ROA not before:           Mon 26 Oct 2026 01:00:13 +0000
ROA not after:            Sun 24 Jan 2027 02:00:13 +0000
asID:                     23059
IP address blocks:        2607:f4e8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9f:fd:c7:2e:d0:bf:a0:a7:a1:eb:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Oct 26 01:00:13 2026 GMT
            Not After : Jan 24 02:00:13 2027 GMT
        Subject: CN=1b8ddac8-e777-4f8a-bc33-f73e0c79fdd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:a4:73:b6:80:de:05:f0:39:87:a7:04:44:
                    05:06:f9:a3:45:71:ff:85:d4:4c:6a:8b:fe:23:46:
                    f2:83:3e:27:06:ea:26:a1:f1:e0:a4:ae:45:3d:9e:
                    6f:ef:18:67:dc:d3:63:89:8f:5a:11:05:a9:bb:55:
                    65:06:67:c8:41:10:c6:46:30:02:93:18:a3:1b:af:
                    7c:2e:b5:22:89:c3:e5:de:24:d6:e6:f5:79:31:08:
                    e8:40:f6:bb:6a:21:83:8b:d3:d6:28:d6:8a:4c:09:
                    d0:e9:53:c4:bd:b3:5b:42:47:2f:d5:52:cc:b6:0a:
                    ad:c2:64:04:26:de:82:ac:54:88:c9:bb:b9:fb:c2:
                    9f:88:71:40:2f:de:dc:69:36:91:36:c4:ca:c8:10:
                    48:f4:7e:b3:8e:cc:11:df:67:bd:24:91:e4:0d:d9:
                    71:50:3a:6c:6c:b8:37:59:3f:ad:7b:11:81:7f:39:
                    7a:ac:1e:77:04:8f:32:9d:29:4d:d3:68:34:5f:d0:
                    f5:00:2f:26:c7:0a:b3:04:40:7b:a8:92:63:3b:c6:
                    89:51:e9:90:cc:16:f5:49:a2:7e:60:aa:d2:9d:6b:
                    55:db:0b:d4:12:5f:80:2f:64:4d:f2:ae:32:88:a9:
                    54:e4:f6:ae:b6:61:db:d2:a6:52:c6:83:5f:60:c8:
                    59:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:65:7A:AF:35:24:74:E3:82:2F:E7:CB:DB:5D:A5:D2:A4:96:EB:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/d18c8c5a-b60b-3f8c-87cd-1167886890b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:bd:47:42:7d:d0:8b:14:10:9a:78:c9:14:1f:7b:20:17:b6:
         c9:fc:e4:d6:9b:30:ca:8a:68:64:9d:91:f2:ba:0c:d0:e1:91:
         3a:32:d8:d2:8e:37:06:ff:16:ab:d5:b8:c5:53:aa:37:59:5e:
         7d:de:29:03:ad:72:7a:f6:86:d0:48:84:73:b3:ce:df:25:df:
         af:5a:60:91:8f:a1:f7:dd:ff:b4:18:9b:6e:64:45:66:2f:6d:
         1b:86:c3:4d:9d:ac:1c:d4:5a:9e:21:ab:23:9b:96:29:20:01:
         8b:f5:f3:62:f9:28:10:fc:76:86:2a:64:89:8a:21:0c:45:68:
         54:93:23:18:c8:f2:e8:f3:e5:2b:ef:62:dd:db:37:40:7d:86:
         cf:31:34:9d:bc:fd:ea:72:d5:36:b9:9e:14:e1:9b:f7:0a:a9:
         c8:f5:7b:05:04:bd:6f:dd:22:f7:bb:6e:bd:96:e8:d7:53:42:
         71:37:35:36:06:70:83:7b:70:39:68:3d:35:86:56:e0:57:b3:
         ea:e0:92:ae:b0:86:ba:4d:a3:95:0b:2a:94:59:36:f8:f5:b6:
         f3:17:fc:ba:b0:c3:0e:02:44:78:63:96:75:48:01:e2:7b:f3:
         cc:44:9e:fd:91:b7:14:87:66:c4:c9:31:c8:f3:c9:fe:d0:3d:
         24:b7:b0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:41:13 2026 by rpki-client