Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/771a27cf-ba92-3d10-87e2-b4a9ea366450.roa
File:                     771a27cf-ba92-3d10-87e2-b4a9ea366450.roa (raw, json)
Hash identifier:          YOQhdv4pabAUCHYs6bLM7h4VC+aT8hsyFVd0TfL1AVk=
Subject key identifier:   7B:4F:76:AB:94:49:F0:A9:6E:AF:A0:9D:8F:6C:81:6E:82:34:42:B7
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584F4974DCF32B617A9588DA1200
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/771a27cf-ba92-3d10-87e2-b4a9ea366450.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     3477
IP address blocks:        2610:20:9300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:dc:f3:2b:61:7a:95:88:da:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a9f71eb4-6df6-44a5-9225-bdc4bdda9dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:03:72:18:e1:83:66:61:d8:8f:7e:39:51:88:
                    13:d6:62:ba:22:b6:e9:d6:18:8e:48:35:85:2e:17:
                    14:0f:2f:9a:dd:b6:a8:0a:17:62:59:bf:47:70:8a:
                    d0:4f:cc:83:fd:a1:51:69:f0:0c:fb:85:6e:81:dd:
                    db:17:36:af:6a:ae:69:74:fd:33:04:57:75:e4:b4:
                    16:d1:06:3e:9e:6d:29:61:47:7f:c9:e9:20:35:e2:
                    4b:7b:d4:00:5d:ec:d5:56:b6:4f:ee:2b:bd:46:51:
                    79:9b:5d:03:63:67:27:36:cd:f1:2f:22:fe:4e:35:
                    cf:63:7b:73:8e:8f:02:f2:c7:83:32:3f:dc:6c:35:
                    c5:ac:ff:ff:50:a2:f9:26:09:b0:b6:02:50:3a:9c:
                    52:b6:e6:4a:f3:cd:bd:35:55:81:cf:58:e0:8a:2a:
                    f1:49:8d:fc:e7:61:d9:d5:97:dc:98:04:6f:79:3f:
                    31:d8:eb:68:60:bb:be:ab:db:ad:6a:0d:f2:9d:3d:
                    fc:a2:33:3a:c8:42:91:b8:b7:2c:84:73:fb:07:e6:
                    f9:ef:88:ed:08:5a:cb:91:b0:2d:29:5b:6c:0b:e7:
                    25:39:45:9a:02:66:0d:13:a3:ab:5e:7d:30:c7:65:
                    95:b0:6c:b9:12:f3:62:fd:5e:1c:1e:38:42:03:de:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4F:76:AB:94:49:F0:A9:6E:AF:A0:9D:8F:6C:81:6E:82:34:42:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/771a27cf-ba92-3d10-87e2-b4a9ea366450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:9300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d0:f8:67:17:76:bd:68:8a:f7:3f:42:dd:e6:11:a3:00:aa:
         86:6f:b5:76:78:27:77:68:b1:b1:e5:41:be:29:cc:66:f3:b0:
         77:17:33:f3:da:a5:7b:1f:bb:1b:2e:64:31:e8:ee:13:36:85:
         54:46:fb:70:48:78:95:f0:e9:34:ea:40:6c:a4:a2:12:c0:27:
         d6:d3:06:2f:4c:d9:9f:32:cb:89:d7:35:88:f6:ee:44:bd:51:
         04:90:b7:71:07:c0:d1:3a:3b:ac:44:e2:6d:87:b8:87:72:77:
         fd:08:e5:28:5c:7b:9e:3d:e0:01:ae:00:07:31:1c:dd:bb:84:
         b6:60:10:cb:88:eb:75:c1:40:a7:10:81:b9:b5:88:4b:11:25:
         96:92:6c:c8:e3:f5:c3:0c:c5:8d:ff:40:02:25:eb:3b:87:bb:
         64:e2:da:ac:28:4d:d0:2a:42:4d:4a:11:9a:30:a3:1a:55:3a:
         5e:c5:25:7f:55:17:26:d9:7b:9b:5a:a7:10:78:de:50:65:a2:
         82:74:52:1d:46:15:c6:46:a9:b0:29:3e:0e:7e:4b:0b:18:3c:
         7f:72:fd:e5:88:cc:32:e8:cd:98:5b:7f:59:a7:52:99:c9:8c:
         26:9e:5c:69:9e:28:f7:f3:bd:2d:2f:f5:b0:bc:cb:8d:66:c6:
         61:f0:fd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:24:30 2026 by rpki-client