Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/af201be3-22aa-3480-8edc-6124ccf74926.roa
File:                     af201be3-22aa-3480-8edc-6124ccf74926.roa (raw, json)
Hash identifier:          NKXoYzjYOFXzUPMVfQNNtWQPzWEJLqda2cRwiViM+fo=
Subject key identifier:   3D:9C:EC:E5:C0:D1:01:B6:24:3A:C4:97:D3:D4:1E:9F:41:8B:D9:C5
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584DA11AB48CD467A27C18100160
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/af201be3-22aa-3480-8edc-6124ccf74926.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     25804
IP address blocks:        2607:f4e8:ac2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:b4:8c:d4:67:a2:7c:18:10:01:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=6fdea9e3-0d29-44be-bc33-7377385366d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a2:26:e2:5b:4e:09:40:2e:98:f9:e8:8c:03:
                    ec:33:c9:65:53:47:15:26:bc:58:5d:3b:bc:b7:b0:
                    d6:78:a6:c7:84:ff:a6:80:91:55:73:8c:a1:7d:3c:
                    51:5a:df:3b:59:f3:be:02:b9:a0:df:26:2b:d3:e2:
                    30:a6:96:d0:2d:b3:c9:35:53:e7:5e:20:4e:05:fb:
                    5d:73:f6:1a:80:73:e1:30:f2:1a:46:9d:d8:41:df:
                    42:4d:b0:22:35:18:f5:95:78:ea:1e:1c:3b:7d:41:
                    74:b2:15:ea:e1:ed:42:6f:3f:69:6c:9c:28:70:29:
                    cd:7e:e2:5d:b6:5a:45:b6:b2:82:7d:b6:4f:e2:d8:
                    1c:58:18:69:13:5f:8e:07:c4:aa:9a:c6:12:e2:a3:
                    ae:3d:d2:62:a5:2f:bd:f7:88:97:49:9a:99:d6:27:
                    60:8e:3e:52:e5:bf:b6:e2:83:f6:82:ee:27:2d:43:
                    c6:3f:c6:8d:3a:a8:97:b6:12:b6:e7:8d:72:a2:19:
                    c5:66:b7:4c:bd:1d:20:d2:86:12:1d:c6:30:e2:7e:
                    8e:92:5b:79:88:1a:9b:2a:d5:b2:26:d2:bd:48:d0:
                    26:39:52:f6:91:03:b6:9a:af:07:57:ab:5c:f9:37:
                    f9:54:c3:40:92:67:6a:49:a1:20:d4:33:b5:bd:b9:
                    88:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:9C:EC:E5:C0:D1:01:B6:24:3A:C4:97:D3:D4:1E:9F:41:8B:D9:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/af201be3-22aa-3480-8edc-6124ccf74926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8:ac2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:17:8c:18:47:ed:1f:4d:39:e0:54:76:28:6d:c1:af:47:a6:
         35:8a:e5:e3:eb:bf:e1:90:f6:e6:03:d4:dc:24:ba:91:e9:08:
         fd:b9:35:fa:19:17:0f:eb:0c:72:50:a2:9f:49:d5:fb:a3:b0:
         83:44:bb:a8:f3:47:35:94:e2:1f:02:18:ce:48:86:0d:45:49:
         16:e5:fc:0b:e0:ff:4f:ad:a5:69:1e:c9:bd:93:e1:62:9d:8e:
         b7:5b:55:38:1c:04:46:72:f7:2e:ea:42:95:d8:87:a6:c2:2c:
         3e:a1:26:21:e2:dd:84:28:aa:40:4f:77:e7:2f:cb:a6:e3:05:
         61:33:54:a1:2c:8e:64:83:e9:8c:30:88:62:0d:62:19:52:33:
         b0:34:f7:0b:cd:5f:28:1e:ae:85:8e:4d:6c:a9:91:7c:2d:50:
         34:e4:2b:db:87:16:e2:16:f2:6e:e5:36:fa:a9:25:9e:e3:8e:
         57:a3:97:70:d0:05:68:3f:fd:71:a4:6e:68:14:bd:e2:8d:3f:
         0d:ad:cc:82:45:2c:1c:fc:cf:96:b4:b6:a3:26:27:0a:76:fd:
         5b:4a:30:36:27:e2:43:28:4f:0c:00:f8:ed:1b:25:3b:ba:ec:
         46:e9:6c:ed:56:06:55:70:44:4e:2a:3d:43:74:3c:2f:f2:a6:
         6a:2d:8a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:46:15 2026 by rpki-client