Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa
File:                     2d10269c-abaf-3198-90a0-8c1e927fe84e.roa (raw, json)
Hash identifier:          VJ15nGlQQF6mZ8bigRAk4BSmFf0znavssHYbiTl2BPM=
Subject key identifier:   16:E6:74:7C:F0:41:A6:85:87:62:CA:E3:D9:A1:4A:8E:0B:BD:15:5B
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584D8C2A9D7D02E3B2B450730600
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     3477
IP address blocks:        2601:a012::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:9d:7d:02:e3:b2:b4:50:73:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=b30cccf3-9745-42d8-a222-914f85f2ef72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b0:54:e1:84:0a:72:b9:22:c8:6b:92:fd:bc:
                    36:2b:64:10:54:d7:fa:52:f5:b3:94:fd:07:90:81:
                    37:76:27:3e:2e:a6:57:68:e0:5c:0d:56:d9:f2:05:
                    ef:be:59:7b:4c:86:ca:60:21:72:fe:36:25:b4:c1:
                    f3:92:17:f0:ea:78:f3:21:4f:03:70:d8:04:fb:2d:
                    f2:b9:75:e7:b8:71:dd:be:0b:9c:30:b0:f4:40:10:
                    ef:6c:6a:34:88:ee:57:da:a6:d0:a8:8a:16:7b:67:
                    23:cf:c7:dc:60:33:2d:6d:eb:43:1c:aa:b7:73:95:
                    32:e7:60:9c:2a:2e:dd:7f:c4:5a:74:ee:f5:e1:ba:
                    fe:18:f4:60:fe:09:bb:d8:a8:ff:7b:a4:96:7e:b6:
                    73:19:48:d1:98:da:d2:58:6c:12:84:81:d0:b1:89:
                    ec:5a:92:39:d7:fe:84:5b:01:39:8f:6a:62:b1:ba:
                    cb:53:a0:01:be:6c:50:74:13:07:21:ea:7c:e8:04:
                    77:0a:55:6d:fb:35:b1:3c:af:64:cf:de:03:27:a2:
                    e1:2a:40:a0:f3:0e:da:bc:b5:0b:b4:2d:e8:53:e9:
                    3e:3c:36:fe:9a:9f:3f:e6:9f:f3:75:b3:bb:70:64:
                    88:71:67:97:c2:49:15:53:20:58:5f:83:87:54:66:
                    b6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E6:74:7C:F0:41:A6:85:87:62:CA:E3:D9:A1:4A:8E:0B:BD:15:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/2d10269c-abaf-3198-90a0-8c1e927fe84e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a012::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:3a:45:71:c2:2d:df:78:b7:74:01:70:97:64:ef:e8:a5:75:
         ba:d8:51:54:c3:2d:5b:9e:12:4d:52:bf:ef:d4:e7:b7:da:2d:
         6a:3b:49:d0:6f:48:96:6d:90:1a:6e:5e:cb:83:eb:75:cc:b5:
         e3:0f:24:e8:1b:88:16:18:0d:81:18:ba:2b:9d:63:4c:d1:d8:
         0a:e6:9e:d7:7f:25:31:67:91:7e:57:5b:63:73:95:4b:c3:79:
         61:16:12:ce:49:e4:1e:39:d3:9c:2f:94:bc:d5:bf:93:a4:27:
         80:46:5b:76:f2:82:2e:6d:7c:63:d0:b4:e2:a7:e6:9d:d2:70:
         3d:2f:7f:96:19:c2:e6:e9:2f:b6:94:23:25:e5:e3:6f:8e:02:
         6e:20:a4:0a:c9:58:38:cc:f4:30:1f:61:79:cf:97:f6:a8:84:
         fa:72:5a:46:bf:ce:ef:e4:d9:ae:0c:a5:16:b0:a9:29:77:bb:
         72:f4:18:95:cd:95:b3:8a:c8:fd:15:93:e4:40:7f:78:4f:e3:
         34:0e:77:cf:61:57:ad:4c:97:f5:cd:e2:0e:b8:e9:ab:09:b2:
         96:3f:bc:a3:f7:dd:ca:61:b5:ce:98:0f:f0:60:9b:c5:c7:92:
         fe:a1:b4:04:b6:ad:8b:38:de:04:0d:1c:d0:7f:fe:7b:aa:0f:
         ec:d7:7d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:24:32 2026 by rpki-client