Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/e3a72863-ca11-3c18-b55c-7146fb931a82.roa
File:                     e3a72863-ca11-3c18-b55c-7146fb931a82.roa (raw, json)
Hash identifier:          b+P5xsKLbGhmMoNanY+5MHg5kySXu9v537+i/Bojos4=
Subject key identifier:   3F:05:4F:0E:8A:9A:B6:AC:3E:4B:EE:E9:F7:29:C2:F5:12:59:E6:87
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584F23C255929A888A7CABF7B940
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/e3a72863-ca11-3c18-b55c-7146fb931a82.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     23059
IP address blocks:        2607:f4e8:ac2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:55:92:9a:88:8a:7c:ab:f7:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=9aa49bdc-2ddf-42b2-b10f-3c0c45e84e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6d:bd:c4:e9:70:1a:c7:f9:08:44:b1:d8:f5:
                    7e:41:2a:48:a4:11:34:46:92:47:3d:99:40:6e:fe:
                    38:aa:cf:89:40:52:70:cb:29:f8:9b:2f:7d:6d:35:
                    96:3e:c0:62:02:25:60:a1:46:14:68:02:f3:cd:5b:
                    d9:9e:03:4c:c4:07:d1:9f:66:c7:3a:fb:f1:10:2e:
                    c3:96:27:ed:80:2b:b1:b0:0e:c6:94:2d:62:bb:64:
                    0a:95:ae:fd:4b:74:0f:3a:2f:c1:48:d0:58:ec:00:
                    e1:54:28:6a:e2:27:67:32:ba:cf:63:6b:55:3b:9a:
                    d5:ba:75:ed:94:cd:2e:aa:b4:2c:4d:10:70:8a:4a:
                    51:3d:10:95:29:50:85:63:11:2c:21:38:9a:a4:3f:
                    b7:0e:a9:80:37:65:1c:12:90:fa:b3:65:52:87:79:
                    ea:85:68:55:2c:13:9b:5b:39:28:b2:1c:f4:46:b1:
                    c4:04:3a:96:e7:1a:e4:f1:02:59:96:59:a6:ce:13:
                    0d:04:0b:5d:32:39:98:72:7f:9b:04:db:83:aa:44:
                    a0:73:8f:38:c1:97:19:68:f9:46:2b:4e:b8:c4:6c:
                    7e:1e:e7:dc:50:46:1a:53:98:b5:20:81:1f:89:39:
                    b7:c6:57:c3:94:d4:ec:34:db:c8:c3:c6:2b:7a:84:
                    1d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:05:4F:0E:8A:9A:B6:AC:3E:4B:EE:E9:F7:29:C2:F5:12:59:E6:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/e3a72863-ca11-3c18-b55c-7146fb931a82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f4e8:ac2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f6:a0:0d:78:80:f6:04:a8:61:a1:ed:28:b3:53:ab:d1:57:
         01:00:a5:8e:03:49:70:6b:0c:52:0e:e2:0c:b9:6d:12:09:03:
         9d:f5:ea:ab:48:55:af:e0:8e:72:06:95:d9:e7:06:6c:a2:4d:
         4c:2b:32:7a:d4:0c:a6:77:71:14:19:35:40:16:2e:7c:df:09:
         c8:d3:6b:ba:71:7f:08:67:b8:1e:05:6d:89:a4:c8:25:7a:82:
         4b:a7:34:80:a3:ec:63:54:cf:25:3c:30:19:5c:44:d3:18:a6:
         a2:ae:c7:45:00:2f:77:84:53:1b:23:64:6c:4a:75:21:3c:b3:
         fa:74:bd:83:28:85:65:75:a5:1e:cc:d2:e4:c8:4f:53:40:3a:
         c3:6a:11:29:f5:a8:4f:fa:ba:f3:ee:65:ce:78:fa:bd:a0:3f:
         dc:39:b0:98:f6:a5:00:48:57:47:8a:e8:de:b6:ae:96:87:a2:
         fe:62:25:dd:a7:ad:f7:a9:31:95:80:43:16:ab:66:12:06:ec:
         f5:57:0f:66:76:a7:df:79:a6:b3:de:3d:33:95:9d:df:67:b3:
         0a:c9:87:6c:ed:ca:7a:19:49:4c:bd:02:1d:13:4f:cb:a1:3e:
         39:f3:12:24:3f:fd:d5:10:f7:46:6a:b7:80:e4:90:24:c6:88:
         82:54:56:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:32:17 2026 by rpki-client