Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/0d7550d9-17ed-3859-9a5c-f704483bd1bb.roa
File:                     0d7550d9-17ed-3859-9a5c-f704483bd1bb.roa (raw, json)
Hash identifier:          Vm3hMEaJfHChfL3jOFqe/U4Qy/p0zPgWt0tLE/UNs4E=
Subject key identifier:   3B:E4:A2:A0:03:B6:C0:1D:1F:0F:11:28:4C:84:10:4C:D1:96:92:82
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584AE9F66991DC3E83303D0A6760
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/0d7550d9-17ed-3859-9a5c-f704483bd1bb.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     3477
IP address blocks:        2601:a008::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:69:91:dc:3e:83:30:3d:0a:67:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=7baa6a64-435c-4d22-9d8c-98e8c0478101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f1:bc:9a:3e:c0:a1:b7:62:3e:ea:e5:9e:a2:
                    0b:4e:23:7a:88:e2:a5:b1:e6:d0:ac:a5:f7:98:17:
                    ed:ba:84:71:ff:40:7f:13:e2:67:e6:3a:0b:3d:a1:
                    85:87:e3:f0:b3:77:25:42:08:4d:4e:96:49:b8:ea:
                    fc:c8:1e:36:8f:ba:a4:ed:d0:a9:88:71:ea:76:9d:
                    74:ff:24:d1:a3:fa:7c:dd:44:e1:4d:7a:bb:81:a2:
                    ba:93:45:c1:3b:d6:3d:37:df:d4:04:23:0b:bc:fe:
                    b1:38:5b:89:d5:0f:e1:57:41:e6:b9:0f:4c:2a:d3:
                    6f:69:99:10:6b:53:6c:dd:23:02:a1:92:03:52:f3:
                    eb:6b:90:99:45:44:3a:0e:fc:80:26:c1:0e:bd:d3:
                    08:08:a6:14:be:3b:3d:16:ac:86:83:e5:1e:f2:80:
                    0d:2a:8d:bb:c5:eb:6f:41:e5:98:66:e0:aa:e2:06:
                    a6:a0:95:97:03:b4:4a:62:84:47:18:66:9a:c4:92:
                    8c:f8:78:13:2f:b6:d5:27:66:e6:f4:bf:e8:1a:63:
                    1d:3c:af:45:1a:d9:a8:6a:d1:e2:06:10:9a:76:7c:
                    ad:4e:f6:02:ba:26:37:1e:ac:9e:95:b1:43:cf:1c:
                    62:78:13:14:36:43:cc:45:67:c7:47:b0:0d:26:cd:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E4:A2:A0:03:B6:C0:1D:1F:0F:11:28:4C:84:10:4C:D1:96:92:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/0d7550d9-17ed-3859-9a5c-f704483bd1bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a008::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:47:89:f0:77:ce:db:66:a3:38:d0:79:fb:9a:83:5a:1f:75:
         61:f8:91:16:71:df:d3:a2:b5:7c:08:11:1e:c2:f7:63:8a:77:
         0a:d0:37:59:ab:a4:aa:18:03:32:c4:6a:0e:56:41:fe:87:8b:
         46:97:37:a4:f9:a7:76:5f:39:d0:63:96:dc:a1:70:2e:11:67:
         82:d8:65:a1:1e:a6:ad:a7:ba:29:38:d2:39:1e:bb:54:63:b3:
         66:03:83:ff:f0:cc:a3:80:21:c3:ba:88:e8:36:3d:d1:90:eb:
         1b:56:f7:10:ed:82:a3:81:81:17:1b:59:35:30:8e:bb:51:60:
         cd:2b:3c:4e:bf:57:6d:cc:57:66:e5:6a:49:ab:f5:90:ec:3c:
         34:09:92:44:fe:8b:1e:94:d3:6f:54:a7:41:9b:81:2d:fe:16:
         48:23:98:7d:42:29:f4:ef:c3:38:b5:ff:0c:d3:8e:41:f9:65:
         ac:f6:05:1d:1d:00:65:17:80:7f:f9:27:8f:5d:e5:d1:01:da:
         67:0a:2b:28:bd:96:8f:8b:27:c2:49:a1:da:b9:fe:a2:ea:e7:
         97:d8:e6:e5:84:81:3e:80:ca:ca:5f:37:b7:17:c9:db:1f:56:
         c1:7b:5a:a7:48:ed:e5:0d:95:d8:b9:65:7a:b0:5b:73:a0:3c:
         eb:1e:0f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:55:35 2025 by rpki-client