Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a68e4148-cf1e-3897-950d-73b1670f964c.roa
File:                     a68e4148-cf1e-3897-950d-73b1670f964c.roa (raw, json)
Hash identifier:          V6f0WducZBDkCz42XFViVeTVq6FgPzdfARoga2la7PM=
Subject key identifier:   28:D9:B7:E8:A3:03:24:10:26:09:BB:53:EF:5D:E5:4C:33:54:B3:A9
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584B3DBA2B246C5B920BDC010000
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a68e4148-cf1e-3897-950d-73b1670f964c.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     3477
IP address blocks:        2610:20:8040::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:2b:24:6c:5b:92:0b:dc:01:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=83d2d645-e9d3-41d3-ac6b-7299dd874dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fd:a1:e5:7d:c3:26:7f:e9:cb:8a:e1:3e:dc:
                    a4:d8:62:dc:8d:2a:56:bf:44:be:4c:f1:f5:cd:5d:
                    38:ea:43:43:f6:e3:64:ee:69:5e:a7:7e:57:8f:13:
                    a3:b9:b5:be:48:f1:a8:96:fa:66:9b:9e:da:f2:ee:
                    7e:6f:21:6c:8d:af:33:bb:75:ab:78:d2:5e:b6:88:
                    0d:86:08:55:e4:b0:1f:ab:f8:c9:8e:26:43:b1:07:
                    7e:24:1f:81:1d:34:3d:58:bc:de:87:da:6b:11:36:
                    b2:2c:9f:ec:7b:b9:ba:7d:76:4a:4c:3f:e8:8a:a6:
                    ca:3c:e5:f4:8a:2d:19:f7:3f:bd:5c:3a:42:5c:ce:
                    b1:61:34:58:90:6d:38:16:f8:69:0e:95:b4:bd:50:
                    2f:a0:cf:f9:c3:72:c7:24:ae:eb:cd:12:0d:1e:65:
                    07:32:10:ac:a4:6f:51:45:18:20:26:40:a4:0e:5e:
                    2e:c6:6f:a5:fc:40:43:0c:0f:8b:88:32:82:af:ac:
                    da:fa:c9:7d:9a:ad:87:65:ff:84:f4:5b:83:bd:49:
                    73:92:9b:17:52:ba:d5:25:d0:4b:52:d2:39:6e:57:
                    0f:dd:25:85:60:f4:83:d9:4a:ac:91:9e:e6:bb:b5:
                    7c:2a:c4:d7:58:42:b7:58:e4:3d:72:e6:aa:d1:16:
                    29:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D9:B7:E8:A3:03:24:10:26:09:BB:53:EF:5D:E5:4C:33:54:B3:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/a68e4148-cf1e-3897-950d-73b1670f964c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:8040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d5:72:4c:f4:1a:d7:19:b9:1c:91:b9:8d:96:aa:99:a3:31:
         d7:13:a8:d6:ba:0b:a0:a5:8c:0f:01:9b:b9:9c:c9:33:1c:88:
         f2:de:e7:74:26:14:05:4b:74:49:f9:2e:86:0e:bd:57:1e:67:
         96:35:78:f6:b2:0f:d6:1a:e1:f1:3b:7e:8d:70:83:3c:f5:6a:
         b6:84:07:fa:98:bb:a7:db:88:65:6e:48:2d:d1:39:1d:2d:35:
         84:39:24:09:be:f6:06:b2:98:eb:7b:de:2f:a7:7a:9a:fe:6d:
         ba:9c:bf:7b:ee:f9:63:50:46:9f:a9:6e:4a:bf:61:3e:d6:1b:
         c4:be:93:6e:4e:3e:8c:28:2b:81:17:96:6c:82:42:1c:01:35:
         7a:21:1c:3c:94:07:81:36:aa:b7:a5:e6:bc:ef:b5:4d:6e:ab:
         cb:ef:db:78:77:40:a4:f8:6d:19:4e:5a:1f:a8:60:a5:9c:fc:
         b9:31:86:a6:61:2d:dc:9d:12:6a:08:59:03:e7:61:31:57:05:
         2f:8e:bc:36:f4:f0:43:50:62:62:50:12:8c:16:d8:bf:0c:aa:
         55:ee:2a:9f:ad:2b:26:11:9e:e6:7c:b4:8c:02:ad:0f:58:25:
         53:74:8e:9f:06:ff:5e:f8:49:d4:42:95:b6:fa:2f:11:c2:92:
         a8:22:ec:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:13:09 2025 by rpki-client