Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5d142dcc-e71f-37b2-a7a8-23359337603b.roa
File:                     5d142dcc-e71f-37b2-a7a8-23359337603b.roa (raw, json)
Hash identifier:          IV1+MPvy32ToOidjB121Ll1l8BO9QPjQ94gRg8X1a0A=
Subject key identifier:   2D:55:6C:C0:59:C9:17:46:BA:60:E4:DA:F8:64:EA:53:F6:93:6F:8F
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584F4972CB0179C31BFFB8A93B00
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5d142dcc-e71f-37b2-a7a8-23359337603b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3477
IP address blocks:        2610:20:90a0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:cb:01:79:c3:1b:ff:b8:a9:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=51202837-e088-48b0-b569-f307e61a2e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:62:a5:1d:68:4b:16:ef:1c:1e:8f:39:d1:
                    79:50:4f:a0:9a:6f:29:5d:d8:65:bd:92:bb:50:42:
                    e6:14:9b:e7:1a:9b:31:12:ad:74:d6:2d:22:50:5c:
                    82:63:d7:fc:e9:7a:20:81:46:75:ba:5f:d6:67:1e:
                    16:07:17:47:ee:4d:9b:e5:1b:d6:75:18:dd:8c:e7:
                    83:3e:f5:4e:ba:3c:a4:24:df:2d:ce:ce:07:ef:ec:
                    b9:f5:e3:e6:67:e1:5c:20:ca:bc:13:5b:16:32:a7:
                    48:5b:07:b7:02:35:e4:46:b0:02:58:11:d3:1b:c9:
                    81:41:60:68:97:76:10:99:06:8e:d6:84:00:80:e9:
                    6f:76:7f:4e:99:43:82:18:c7:5c:ff:fe:58:ac:12:
                    9f:f7:1a:80:4e:05:07:90:9e:0e:3c:84:63:d1:01:
                    a5:e2:85:61:ad:70:7b:74:6e:31:79:6c:74:dd:f5:
                    38:03:90:1d:90:31:18:5c:ff:c4:32:06:21:bd:8c:
                    b8:21:eb:88:b0:8d:c5:a7:a4:15:df:a6:d4:63:f5:
                    98:a3:19:e3:df:21:46:00:da:dd:68:5b:20:88:89:
                    27:ef:aa:ff:7c:ff:8a:64:14:d3:e4:6d:93:32:50:
                    39:5b:a9:be:a3:33:77:f6:57:df:1a:1a:48:e4:f0:
                    94:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:55:6C:C0:59:C9:17:46:BA:60:E4:DA:F8:64:EA:53:F6:93:6F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/5d142dcc-e71f-37b2-a7a8-23359337603b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:90a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:99:66:11:0e:6e:15:73:49:03:12:d7:bc:e6:25:2c:0e:98:
         3b:2c:ba:fb:59:aa:9b:65:75:7e:93:17:cc:8c:80:f3:54:70:
         db:49:c4:0b:37:78:1a:2b:67:d3:8d:b1:7d:ec:da:5a:3e:d9:
         e4:10:3d:ac:81:a4:20:21:53:6b:5b:25:51:4b:b4:b7:e2:5e:
         81:9a:73:4e:2c:5e:f2:cb:32:49:ae:ad:56:33:38:5b:dc:72:
         c7:82:91:18:96:d4:96:ff:99:6e:a7:36:46:a5:e7:fd:23:2e:
         44:f3:0e:9b:8b:c2:e0:fb:e1:a1:68:9f:45:72:90:ad:12:3a:
         1e:02:35:17:f3:f2:cc:3d:e1:28:a9:75:b2:ee:3d:44:b2:48:
         28:f8:61:84:39:17:a3:25:d0:d3:39:6c:c6:5e:d5:49:b6:9f:
         5e:ec:da:e8:a9:f6:aa:4e:22:3f:db:f7:d7:4a:44:46:7f:d8:
         f6:cd:b4:c9:cc:ba:62:68:c9:ff:79:66:78:71:b0:95:65:b9:
         f3:6d:07:ba:f0:4c:5e:72:ba:77:32:34:5e:92:1c:cd:8f:87:
         42:cd:03:12:57:fe:cf:eb:de:17:82:88:95:72:10:76:86:eb:
         14:6a:f6:90:1b:f9:75:8a:21:80:70:57:63:2e:9f:15:20:14:
         88:66:ac:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:09:25 2026 by rpki-client