Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/4173ac73-b29e-38cc-980f-edba105eec14.roa
File:                     4173ac73-b29e-38cc-980f-edba105eec14.roa (raw, json)
Hash identifier:          nJuLqYQ46Z0RKs5FI7n1dTWTFp9evaNei9R1rt20Bsc=
Subject key identifier:   EE:24:B9:14:DF:3E:D6:CD:93:79:A8:C2:2E:8F:A3:8D:46:34:EB:EB
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584F498A7894C9ED0246F143A700
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/4173ac73-b29e-38cc-980f-edba105eec14.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3477
IP address blocks:        2610:20:9147::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:78:94:c9:ed:02:46:f1:43:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c6eba62e-35dc-4cf2-8881-fa926f95593d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:bd:45:5f:eb:7d:b4:d2:27:3d:f4:81:4f:f0:
                    b8:7b:05:e3:ed:4b:4c:cb:49:98:e8:39:c4:84:4c:
                    bf:62:2a:5e:13:97:55:be:4b:ad:2f:eb:e4:b1:88:
                    84:bc:33:6d:34:14:b3:1d:77:d0:15:76:e0:60:2d:
                    9e:e4:72:f0:bd:e2:63:79:7d:89:21:d5:6c:49:1f:
                    8f:5e:b7:52:fd:a0:a4:09:90:02:4b:8f:1a:0a:34:
                    76:99:14:fc:c7:7f:ae:71:c1:13:61:dc:72:9a:42:
                    2d:f1:41:b8:0e:44:4e:b6:af:7e:24:47:1f:f2:fc:
                    61:33:93:20:bf:3d:45:19:6b:d9:7b:3d:8c:16:5b:
                    51:ac:01:34:37:ba:72:e2:ee:74:1e:1a:cd:8b:c9:
                    1d:63:ea:b8:3b:bb:8f:4e:a7:6a:ef:2a:2f:a4:d5:
                    9f:08:ea:06:69:66:06:d2:80:47:05:0e:e4:6e:c2:
                    20:9a:8a:95:dd:06:42:dd:1f:6c:8e:d4:57:27:18:
                    d2:c9:38:52:44:a6:5b:e7:89:48:9b:10:4d:5c:ca:
                    ff:fd:33:80:9a:29:3a:d0:23:95:15:45:db:53:01:
                    93:a7:06:13:18:6c:ef:d1:a1:6d:a7:db:8d:2d:d7:
                    ab:10:a4:18:e6:36:39:cf:48:42:b5:80:ce:f3:37:
                    0f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:24:B9:14:DF:3E:D6:CD:93:79:A8:C2:2E:8F:A3:8D:46:34:EB:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/4173ac73-b29e-38cc-980f-edba105eec14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:9147::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:1a:e7:93:ac:bc:6f:08:64:a4:e8:9e:d6:21:7a:5e:fa:5a:
         c4:b7:7f:9b:d4:5e:de:1d:9f:f4:37:f6:1b:d2:40:e3:c8:62:
         31:b9:8a:32:84:a9:50:16:16:6e:19:21:14:39:af:93:72:41:
         25:43:96:ea:08:85:2d:ac:6a:dd:49:09:9e:01:29:65:56:63:
         dc:07:7b:09:15:de:1b:47:fd:92:0c:25:50:63:04:fb:43:8d:
         44:f2:90:36:40:01:78:ad:8b:68:b5:78:8d:98:68:03:58:1f:
         67:2c:51:7c:b3:07:1d:40:47:67:df:6f:ab:a7:e4:4b:bd:25:
         2f:14:84:94:be:51:63:c5:c1:d5:68:5f:f1:f7:26:a1:4e:0f:
         c5:b2:7c:75:bf:58:60:fa:87:24:53:21:6f:bb:dd:d8:2b:f7:
         6a:2f:42:de:5d:c3:5c:cc:08:7e:7f:f9:5c:0b:d0:f1:92:e1:
         f1:90:02:9e:d8:94:a0:2f:82:3c:e6:7d:3b:23:6a:dc:be:55:
         43:cf:43:c4:18:e6:6c:f2:fc:e6:a7:95:6e:4b:e4:69:db:f8:
         70:16:29:99:bb:4f:6e:3b:80:f3:91:5c:4e:a2:a4:77:87:a3:
         0c:85:88:08:46:bd:31:b0:f6:f2:0e:92:da:57:67:9a:c0:4b:
         0d:f8:80:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:17:31 2026 by rpki-client