Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa
File:                     9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa (raw, json)
Hash identifier:          /19z2K0QmWC0DdWL4T8sk6KRoY9PEhvWxCap4A4sRgk=
Subject key identifier:   19:76:F2:C7:38:3C:25:D0:1F:BD:D4:D5:20:2C:C8:30:72:83:24:2C
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584E7E94F0179A42712A95DDCEC0
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     0
IP address blocks:        2601:a001::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:f0:17:9a:42:71:2a:95:dd:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=f1e21c20-39b3-4b39-91c2-9c2e1555bca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ea:bc:40:30:00:6a:e6:d1:7a:12:5f:db:71:
                    c6:5a:a2:98:dd:da:32:e8:dc:e2:f9:bd:5b:8d:15:
                    d2:f1:9d:f0:98:a3:28:b5:e8:74:8d:7e:63:55:8d:
                    bf:47:ee:df:25:2a:36:0a:58:fb:32:98:ed:1b:a4:
                    95:13:1f:35:38:f0:93:d5:c4:52:64:c9:22:64:13:
                    d0:fd:94:37:26:c6:e5:fc:2f:af:0f:ca:8b:02:e3:
                    4e:71:9f:bc:dd:31:d7:22:b1:76:ea:c5:5c:76:e2:
                    98:bb:b5:84:77:56:b0:be:11:63:61:d5:73:38:f2:
                    b6:dd:67:b0:f1:c8:60:0e:12:5e:b6:41:33:49:9d:
                    97:d5:36:1b:c9:3f:9b:7e:aa:fe:21:1f:c2:ac:e8:
                    37:1f:43:b6:c5:41:34:37:ed:d9:e2:bb:7d:c9:02:
                    06:ea:5f:9f:7a:63:ff:33:d7:c6:66:32:7a:51:4d:
                    76:5e:7e:64:99:00:1b:4c:2e:27:6d:b2:79:75:12:
                    c4:e0:75:d0:72:e5:69:d2:71:8a:f0:d9:51:05:44:
                    6a:f3:77:d8:dd:db:cf:6c:d9:70:fe:22:19:41:22:
                    da:d3:8b:36:02:ba:41:b6:17:35:b3:5b:bd:32:ba:
                    bb:a1:23:7a:29:9a:4a:6c:ba:ad:0a:e4:5b:f5:28:
                    9d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:76:F2:C7:38:3C:25:D0:1F:BD:D4:D5:20:2C:C8:30:72:83:24:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a001::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:4b:4a:89:42:02:0e:6d:39:fc:ae:36:1f:e2:bf:51:c3:94:
         45:1f:e8:e0:a5:3a:34:c1:9d:b5:19:44:28:99:8b:c6:c4:31:
         d6:53:e3:10:c9:6e:85:e6:e2:71:b4:b0:2e:59:63:5a:8d:6a:
         55:92:9c:b3:b0:4b:20:dc:30:84:a7:b6:ca:9e:dc:bc:c8:d1:
         89:86:ae:82:d2:56:a3:f4:cc:d1:32:0b:0a:76:1c:dd:c0:6a:
         de:ed:0f:58:c1:6b:e4:9d:ff:43:bb:f6:59:8b:dc:9c:6e:28:
         c7:6b:5c:37:e2:6d:d2:f2:84:84:e1:5f:69:44:da:03:9c:5c:
         62:d3:35:97:f7:09:07:22:75:6a:5a:aa:ce:6b:bc:8c:15:50:
         bc:83:31:03:1f:20:ba:6e:1b:df:21:30:c2:35:56:f5:20:be:
         c8:9d:5f:15:4a:6c:56:f5:20:48:00:23:ee:1c:75:a6:c6:62:
         6c:54:a3:9b:51:e2:31:c7:69:e0:96:d3:4e:da:68:3d:16:51:
         45:f9:1a:db:11:91:c5:6a:38:f6:da:a4:d7:1c:8d:bd:31:4b:
         74:03:7c:7e:3d:98:f6:d9:33:a9:a1:bd:35:43:e7:d9:54:d2:
         f0:11:b4:df:e1:33:7d:fa:5e:d3:c4:56:3d:76:6f:95:a9:73:
         f7:d4:65:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:07:44 2026 by rpki-client