Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/771a27cf-ba92-3d10-87e2-b4a9ea366450.roa
File:                     771a27cf-ba92-3d10-87e2-b4a9ea366450.roa (raw, json)
Hash identifier:          lYFfGPbPEMoDh1s0k2nQHpDotN2jEZg3q+4zbvu8Q1M=
Subject key identifier:   AC:DD:C2:7B:92:E8:28:44:AF:3D:14:A7:54:E1:A3:77:60:A6:18:E5
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584B3DBA2B894375100765090880
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/771a27cf-ba92-3d10-87e2-b4a9ea366450.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     3477
IP address blocks:        2610:20:9300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:2b:89:43:75:10:07:65:09:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=a125a3e0-95c0-4399-9080-d7ad036e301c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:fd:0a:86:6c:58:42:55:7a:2f:fc:b3:74:
                    1e:26:5c:5a:71:69:d5:7d:6d:89:b2:26:a1:f5:43:
                    03:b3:67:46:52:53:d6:71:9e:8b:00:6b:d7:b2:aa:
                    9d:40:fa:c1:10:b3:30:55:41:a2:85:cd:c1:74:02:
                    32:6b:75:e9:81:30:4e:28:a5:9f:3a:91:49:26:69:
                    88:bf:75:c8:7f:05:b6:e2:f0:46:4e:49:97:38:62:
                    24:ed:17:72:d0:3a:3d:19:2b:9a:ac:f3:2c:96:0b:
                    c9:4f:77:ec:17:d6:89:a7:46:7c:75:a0:8d:64:98:
                    55:50:82:69:27:48:e0:e6:52:7b:87:6c:8f:01:9d:
                    e9:b5:44:70:85:2a:28:9d:0a:e0:ba:7e:be:c9:65:
                    60:a5:87:97:0e:9d:8c:c9:4e:72:03:23:19:fe:28:
                    7a:53:58:6c:1a:0c:45:d2:d5:f6:6a:a7:93:87:19:
                    98:2a:81:02:1f:5c:15:9b:e0:6d:30:2b:45:34:f3:
                    ce:8b:34:a4:ef:b5:af:4e:64:fe:98:a5:9b:b7:48:
                    06:e3:b0:72:13:0e:97:c2:9a:d5:ae:4c:98:a2:f8:
                    93:bb:84:51:fb:64:57:35:62:93:cb:fe:7e:63:78:
                    59:32:41:ac:fd:7f:8b:8d:59:a3:b2:4c:97:2f:4a:
                    b0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DD:C2:7B:92:E8:28:44:AF:3D:14:A7:54:E1:A3:77:60:A6:18:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/771a27cf-ba92-3d10-87e2-b4a9ea366450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:9300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:58:e5:d3:a8:7d:7f:97:91:79:f8:86:7e:1d:40:c7:8b:12:
         bf:eb:ca:18:77:76:7a:82:2d:21:c8:c0:76:7b:53:64:75:44:
         67:f9:19:92:b2:4a:bd:81:98:47:8e:85:ab:e5:44:fe:71:c7:
         55:15:d4:61:19:57:5b:d0:32:51:dc:a9:2c:33:a4:a1:11:46:
         78:15:0d:f0:11:78:dd:25:c4:4d:90:02:8e:52:8d:bc:8e:be:
         11:ee:47:b7:ed:e0:32:98:86:77:f9:2f:28:14:fa:6c:be:4b:
         83:c8:cd:03:ba:17:6e:23:8a:1d:18:db:1f:4c:30:58:2f:19:
         e2:8d:f1:95:c6:e2:2d:9f:65:a7:d5:30:60:c1:b3:dc:58:b6:
         e0:c0:f4:80:6f:ba:c7:d4:e6:99:e8:ac:a6:d5:09:48:9b:a8:
         61:93:bc:89:7f:10:2d:9b:70:4d:2b:13:8a:6d:b1:a9:86:47:
         87:a6:99:65:7d:e1:3e:06:18:8a:c3:d7:5e:1a:ec:d7:bc:09:
         ac:ce:ad:dc:cf:fa:60:b5:68:b2:5d:c0:cc:64:a5:aa:45:e4:
         ed:86:97:74:be:49:60:67:e0:6a:66:53:21:8f:15:12:77:93:
         fc:8a:88:13:dd:d1:89:23:16:29:20:0f:f6:15:59:8f:c1:36:
         f3:f4:49:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:11:32 2025 by rpki-client