Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c8a8c8b4-e4b4-3011-99ea-bb645f91771c.roa
File:                     c8a8c8b4-e4b4-3011-99ea-bb645f91771c.roa (raw, json)
Hash identifier:          GhftIpRYSivCPZgqiPujKzxg+FvAUCrbLHlHwNwuwOE=
Subject key identifier:   AA:83:BF:EC:32:20:1E:04:0C:C8:80:E1:F0:B6:28:BA:0B:AA:AA:BA
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584E7E94F0230299B003D01B5480
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c8a8c8b4-e4b4-3011-99ea-bb645f91771c.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     0
IP address blocks:        2601:a003::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:f0:23:02:99:b0:03:d0:1b:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=26705cea-2779-4281-9a99-f2f9d3738f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5c:73:27:d3:aa:67:fe:42:8f:f5:64:63:c5:
                    bf:c7:f8:cc:07:ce:0c:9f:3d:f1:ee:be:05:e2:95:
                    2b:58:04:4e:1a:62:52:d1:65:11:bc:82:ae:5f:6e:
                    45:23:2c:1d:a8:88:0a:b8:0b:6d:5a:2e:45:53:49:
                    14:1d:fe:fe:83:f9:d8:0d:28:1f:a2:32:af:dc:e0:
                    aa:35:fe:3d:ce:52:f6:48:36:d4:b2:ba:3f:c0:3d:
                    8f:27:73:0d:56:88:ae:d9:51:eb:40:be:7b:ce:65:
                    74:af:5e:64:5a:7a:28:b2:0e:6e:2b:79:8f:6a:a6:
                    64:9b:f1:55:8d:5f:09:48:30:f0:cd:f5:2b:e8:f3:
                    1f:71:cf:53:0f:c1:46:ca:1f:f4:9e:61:32:2b:7e:
                    32:d6:76:23:09:0c:d7:af:da:86:27:23:0c:f6:d2:
                    2e:b7:b1:ab:55:d0:3b:e6:28:bb:72:9c:48:7f:ee:
                    2e:0c:68:d6:41:8f:dd:a3:5e:a5:b3:ef:b3:0a:c8:
                    c2:a9:b2:b4:cf:84:73:ab:3a:f5:fa:16:70:be:d7:
                    75:1b:7b:79:3d:12:2b:05:64:be:0b:ce:d7:2a:bc:
                    99:32:b3:1f:77:74:5b:b0:8e:96:01:9f:27:ec:b1:
                    d1:a4:5a:40:28:34:c9:d3:d9:59:7c:61:19:2f:40:
                    6a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:83:BF:EC:32:20:1E:04:0C:C8:80:E1:F0:B6:28:BA:0B:AA:AA:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/c8a8c8b4-e4b4-3011-99ea-bb645f91771c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a003::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:81:fd:dc:56:a2:01:fb:51:63:71:bb:89:ea:9d:ed:9a:b1:
         59:91:d8:ee:80:f5:24:b9:d4:15:26:e4:8f:6c:a4:cd:19:b3:
         4c:d3:6e:90:a2:24:4a:59:f2:2a:0b:62:75:a6:fa:7b:0e:40:
         87:f9:38:52:db:4c:a8:56:86:1b:41:b4:a9:3a:53:0c:7d:1e:
         9c:f8:33:11:0a:49:61:1c:49:2b:bb:a2:26:34:f5:31:81:49:
         3a:e0:2b:08:5d:e6:fb:2d:35:fe:7f:20:71:39:84:3b:71:d4:
         16:ed:f3:fa:1d:18:47:61:a6:9c:3e:a0:0d:a8:87:72:59:33:
         1e:2c:55:2f:35:42:c5:92:ed:09:d9:f8:8b:88:79:f6:b4:92:
         32:c6:e9:b9:6b:2a:18:75:3f:79:ac:00:d1:68:15:66:22:0e:
         44:40:e3:82:bd:b6:68:a3:38:28:2f:a4:cf:f5:06:c2:ef:b5:
         0f:89:12:b4:64:4f:e4:8e:50:68:81:37:80:74:f8:37:7b:9b:
         46:dc:f7:69:a6:78:a4:b4:9c:b9:42:da:60:1e:89:98:9c:47:
         4b:b8:ea:f1:3e:03:3b:c0:78:2b:85:37:45:b5:fa:5f:e0:38:
         48:ba:e8:2f:93:c8:64:77:4e:ea:2b:65:b8:80:ee:d6:e0:29:
         34:71:33:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:49:21 2026 by rpki-client