Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78faa5a1-84ab-3174-a7fe-63a1519aafb3.roa
File:                     78faa5a1-84ab-3174-a7fe-63a1519aafb3.roa (raw, json)
Hash identifier:          fwiHpzZrQJs6G4YL0bSNdFhUvCFzgCR8Gq5BZDTbmEA=
Subject key identifier:   40:2C:B8:80:92:D4:27:CE:15:7E:BD:EE:F4:FB:01:47:E8:20:54:2C
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584E5BAF47EB6087D4D8E4759E80
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78faa5a1-84ab-3174-a7fe-63a1519aafb3.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     22822
IP address blocks:        2001:504:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:47:eb:60:87:d4:d8:e4:75:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=0cf509b3-ec20-482e-81a1-8afdc6717002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cb:11:79:d7:b6:ab:50:d6:9b:29:bc:40:50:
                    1e:9c:3d:40:d2:e5:d6:35:a9:e3:3a:86:b8:a5:93:
                    bd:65:09:a6:2a:7f:6d:60:9e:63:71:7c:2c:e5:a4:
                    85:86:65:a5:d8:02:d4:91:28:ac:05:6c:20:a6:a7:
                    42:c1:2d:35:29:98:ec:ba:46:aa:f0:02:df:78:f7:
                    f2:c1:70:ec:85:9e:d8:c1:aa:8d:fa:48:27:d8:37:
                    2a:0e:f4:e7:5b:07:c4:b7:47:23:94:cc:b0:aa:e8:
                    97:fb:63:77:2a:33:9a:fa:62:88:8c:9d:ea:f2:8c:
                    c2:51:ab:7c:42:9a:48:fd:d6:9f:9e:2b:7d:d3:65:
                    79:6b:07:a6:26:b9:5a:3d:cf:2a:31:27:33:9b:b1:
                    79:47:49:dc:1e:a3:70:61:c9:8a:cf:9b:5d:8a:36:
                    92:6c:20:ee:e5:ba:d7:ff:d3:95:bf:6c:ed:f4:51:
                    8d:04:68:e4:78:a5:2b:a7:6a:bc:3f:ea:c7:bc:1c:
                    05:04:46:da:39:11:7d:54:90:3b:62:81:c8:af:e1:
                    06:91:da:9f:99:fb:59:3d:12:57:46:e7:d9:09:33:
                    f3:18:5a:ff:80:13:2f:07:b5:e0:9d:4c:6e:47:67:
                    e4:da:d9:73:02:20:2e:d8:51:ef:58:11:2f:df:c3:
                    84:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2C:B8:80:92:D4:27:CE:15:7E:BD:EE:F4:FB:01:47:E8:20:54:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78faa5a1-84ab-3174-a7fe-63a1519aafb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:78:35:39:ab:db:11:d6:2e:fd:b0:f8:1c:8a:b8:1c:f5:34:
         44:e3:cd:1c:5d:81:2c:3d:c1:80:92:85:c4:c1:ee:08:58:6e:
         a6:bf:0d:b5:13:3f:dc:b8:d7:7a:aa:14:1f:ac:a1:7f:0d:22:
         43:cd:03:cb:59:0f:9d:8a:e0:85:db:75:ab:e5:c1:26:22:ff:
         7a:0a:fe:f9:a5:07:c6:93:5e:8f:73:cf:1a:59:6c:89:7a:15:
         44:c2:51:e2:c2:eb:d4:2f:3c:f7:2e:fd:ea:28:82:77:1c:28:
         08:43:83:ec:05:81:c4:7f:cf:12:73:5a:32:b9:6b:fd:99:42:
         f9:16:68:80:02:86:bd:8b:b2:f2:36:9b:b2:ae:09:e7:f9:d0:
         e6:70:3c:36:e5:dc:27:a6:f2:60:38:2d:f8:27:b7:91:99:a8:
         ad:51:b9:9c:28:05:82:3c:48:40:30:7e:c4:2f:ad:ab:12:30:
         91:eb:8b:bb:9e:1e:fc:f4:0a:e6:8b:fa:4a:35:db:6a:1e:b2:
         cd:b2:33:dd:21:41:c9:14:c6:47:16:fe:af:70:09:de:17:b5:
         6c:c5:b2:86:c5:b7:30:67:6b:ce:f1:22:5f:68:68:66:59:5f:
         ae:54:73:83:39:a2:da:27:c1:a7:87:f7:eb:bc:84:1c:40:7f:
         b2:28:db:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:28:37 2026 by rpki-client