Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa
File:                     7d91392f-83f2-35b7-b65b-48348b34691a.roa (raw, json)
Hash identifier:          MMr/uFPQjCDNEdEOqT+4O3ljYbgKzdoo8XwJjUe8glc=
Subject key identifier:   27:B4:FF:C7:77:07:D7:16:B9:D5:CB:24:35:F5:72:FE:CD:2D:98:9A
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584AE9F6697F6E271781E7915530
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     3477
IP address blocks:        2601:a005::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:69:7f:6e:27:17:81:e7:91:55:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=a5ca22f7-ed59-42d3-88db-07ebf64c39fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:96:f0:be:4d:51:2c:b2:21:f5:a2:66:5d:
                    53:53:db:04:ab:9e:e7:df:7e:be:ac:e0:71:51:b6:
                    13:6a:57:3d:49:29:9f:5a:1b:02:ad:e1:bd:d8:cd:
                    b6:ae:b7:ba:03:8e:dd:ef:40:e3:de:97:b1:6b:31:
                    dd:07:3e:d7:f8:9e:78:1c:88:b7:eb:6f:b8:0c:19:
                    a6:96:4d:d2:47:19:a0:75:3c:01:3c:3a:38:21:36:
                    8e:8f:e2:54:18:a3:3d:50:ca:fa:0e:cf:0d:df:19:
                    e0:81:ab:d3:77:d6:81:18:63:cf:f9:f5:1c:fa:1e:
                    f0:c0:ef:28:fb:e6:f2:c5:93:63:9f:07:fe:2d:65:
                    d2:12:4b:32:79:74:f0:ea:8d:86:ef:6a:eb:62:7d:
                    52:e4:b9:7c:0b:30:28:be:d5:b8:0f:8a:88:ad:61:
                    ee:d3:b2:6e:1f:47:87:ff:3d:0a:ce:28:89:43:4f:
                    58:e2:4d:fb:f9:5c:f2:34:60:82:7f:6c:56:4e:06:
                    0b:9a:64:64:24:ae:58:e2:e1:7b:9b:ae:16:39:56:
                    5a:55:09:69:70:7a:47:0e:81:03:ff:9d:82:bc:a1:
                    04:31:e3:a1:b5:2d:23:dd:ab:d2:57:7e:eb:d1:11:
                    5e:63:86:18:3c:e5:81:9c:9e:cd:c6:ab:61:32:fc:
                    de:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B4:FF:C7:77:07:D7:16:B9:D5:CB:24:35:F5:72:FE:CD:2D:98:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a005::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8a:4e:56:d7:ef:55:77:91:ef:e7:75:c3:5d:5c:fb:4e:86:
         54:67:ed:53:ed:d3:b1:a6:58:ec:19:42:db:e3:31:1b:ad:ce:
         3e:18:eb:d9:5b:6a:51:51:6c:b3:25:2d:03:ac:22:c7:f8:42:
         13:df:ac:3e:82:66:8b:d4:68:59:b4:9a:a6:9b:0e:61:31:0c:
         55:c6:9e:2b:1a:0d:86:34:4e:65:1b:ab:d2:dc:33:45:63:b5:
         4c:59:20:bb:ae:59:93:6f:c1:90:d5:bb:2a:92:d4:18:74:b6:
         3b:1a:a3:fc:90:24:71:31:e5:f0:4f:5e:60:c5:b6:28:86:45:
         0f:28:81:12:c0:ac:6b:7d:cd:1a:42:5c:2f:9e:7b:2f:11:a7:
         78:32:c4:68:ce:24:a6:0f:39:89:46:dd:99:a8:6c:9f:fd:40:
         42:e9:dc:2b:af:71:40:c7:0f:25:bc:7b:a8:77:44:9b:06:64:
         cd:0e:c0:f8:82:f9:39:0a:54:32:54:b1:28:78:7a:30:88:de:
         70:60:35:7a:e7:59:bc:73:39:53:f0:56:3d:60:db:90:eb:57:
         8a:0c:1f:1a:42:3c:47:ee:48:2c:51:33:b5:81:9e:4f:c6:3a:
         25:2f:8f:08:c7:f4:2b:ec:ca:71:54:8b:cf:25:ce:9e:a9:37:
         37:99:49:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:25:55 2025 by rpki-client