Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78f79c83-f6d6-3406-b08f-0a3b5e1f5ac3.roa
File:                     78f79c83-f6d6-3406-b08f-0a3b5e1f5ac3.roa (raw, json)
Hash identifier:          7AFAtkFD+NT76UYNMmEPvFbI3akdIXD1wMoNmRm7p6k=
Subject key identifier:   73:82:DF:1E:3A:E4:8D:10:C2:D0:52:A3:C6:E3:65:BC:E7:84:26:57
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F82ADA1B0F22CDD5F62B90D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78f79c83-f6d6-3406-b08f-0a3b5e1f5ac3.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     12222
IP address blocks:        2001:4878:8010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:a1:b0:f2:2c:dd:5f:62:b9:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=9e2a77f1-2d19-4424-9bb8-2d473bc05a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a5:ed:86:bb:7e:35:00:45:33:59:ae:49:29:
                    cd:fc:27:6e:d4:dc:f4:46:dc:f4:d6:b9:30:de:8d:
                    5d:30:3c:ae:a1:d0:04:f8:fd:50:28:f3:61:63:b0:
                    47:8a:cf:90:b9:39:49:e1:55:f3:1c:41:4a:d1:4a:
                    69:8c:32:4e:27:aa:56:08:6f:fc:f2:b6:01:a7:83:
                    da:78:0e:95:51:f8:d8:e1:0e:35:f1:fb:31:3a:62:
                    f4:e6:7e:e2:b1:cc:95:0e:d3:2b:14:26:2b:e3:b3:
                    1f:f5:6d:a7:8b:d2:7d:e2:4f:a4:db:22:04:70:f9:
                    ad:59:19:d3:a6:fb:60:67:83:4e:af:88:b5:82:0e:
                    52:1f:64:42:49:bc:7e:17:1a:38:a0:6f:08:44:9b:
                    57:b9:d5:12:7d:e5:7c:b3:bc:de:ac:7b:ef:37:1a:
                    cb:d6:a3:89:0d:5d:66:3f:17:e7:9b:fb:9d:9a:0f:
                    12:f8:24:27:cb:d8:90:f9:f2:43:f3:ff:2f:09:72:
                    93:77:79:b2:52:3f:40:94:87:fb:32:5d:4d:f3:8b:
                    84:b6:60:a4:a3:ea:c2:92:ab:1b:52:d0:ad:bf:11:
                    f5:08:51:c8:72:c9:90:14:cd:6b:95:9f:58:30:54:
                    70:8b:07:e2:3e:35:d0:49:26:f7:d5:45:d9:34:07:
                    74:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:82:DF:1E:3A:E4:8D:10:C2:D0:52:A3:C6:E3:65:BC:E7:84:26:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/78f79c83-f6d6-3406-b08f-0a3b5e1f5ac3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4878:8010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b9:54:35:ef:45:95:95:c4:7d:2c:f7:65:17:c5:65:f1:72:
         df:62:e6:eb:4d:cb:30:73:04:d9:b4:f6:70:37:db:04:06:0f:
         a8:6e:1f:2a:d5:fd:da:3f:4e:08:fa:db:fb:c3:d3:c1:b2:ac:
         1e:c3:a8:62:df:df:20:9a:ec:ba:eb:eb:b7:d7:1b:af:ae:fd:
         3c:46:bf:10:70:e0:0b:70:82:d8:1c:d7:fe:99:b1:2e:ab:1b:
         9d:3b:f9:dd:57:3d:c7:62:0e:95:d8:15:c4:6a:df:51:d7:a7:
         71:a3:28:53:e2:7a:65:37:43:4f:aa:71:76:6b:d0:d1:c6:47:
         cb:e4:23:9c:7b:53:24:f4:b2:cc:3c:48:dc:ca:a9:d0:d1:6c:
         b2:46:b9:67:e9:ee:3a:f9:84:9e:60:22:d7:26:61:91:fd:37:
         79:95:13:7a:be:7c:23:cc:de:c4:38:e3:e5:d9:3b:2a:56:4a:
         ef:d1:1e:f6:2e:23:87:81:c4:90:86:3f:94:32:45:46:a3:a4:
         69:5d:e5:85:09:7e:49:f2:40:4a:18:2f:34:03:9b:f4:b3:25:
         bb:a7:f7:51:e1:da:d8:25:8e:82:30:6d:af:bd:23:e4:ea:c6:
         2c:36:fd:32:18:88:89:4d:96:1f:d5:4f:04:81:fa:5e:2f:da:
         6a:19:6c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:42:02 2026 by rpki-client