Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/771a27cf-ba92-3d10-87e2-b4a9ea366450.roa
File:                     771a27cf-ba92-3d10-87e2-b4a9ea366450.roa (raw, json)
Hash identifier:          r0dWnp6r6orjrIQg1SXS+7Se/GwYrrivZ9R1YSgj7Z0=
Subject key identifier:   8C:0F:61:9C:A0:6F:F8:05:EF:F2:95:75:72:1C:6C:4A:88:C5:43:3E
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584A5DCF8E7934B6A7E353A01E00
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/771a27cf-ba92-3d10-87e2-b4a9ea366450.roa
Signing time:             Mon 30 Jun 2025 20:09:08 +0000
ROA not before:           Mon 30 Jun 2025 20:09:08 +0000
ROA not after:            Sun 28 Sep 2025 20:09:08 +0000
asID:                     3477
IP address blocks:        2610:20:9300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5d:cf:8e:79:34:b6:a7:e3:53:a0:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Jun 30 20:09:08 2025 GMT
            Not After : Sep 28 20:09:08 2025 GMT
        Subject: CN=0b462d18-ae62-4b1d-aa05-7bfba874694e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2b:22:dc:18:7d:b6:4b:d4:6e:f2:da:15:85:
                    6c:7b:52:a0:89:d3:a5:54:7d:88:d1:39:a2:a6:09:
                    d9:97:8e:80:06:fd:ce:19:70:5d:58:92:b2:35:ce:
                    28:28:6e:00:e5:75:14:73:4d:b7:93:ca:71:ae:3d:
                    fc:54:7f:a0:02:41:79:d4:67:58:dc:c1:58:a1:cb:
                    65:b7:59:f3:b3:6e:7e:2f:fb:69:a2:36:f8:d4:6d:
                    53:18:39:37:21:fd:58:5c:35:0e:ad:e6:b4:31:ab:
                    9c:c4:95:13:ba:53:58:83:60:e6:a9:28:5e:5f:92:
                    39:83:01:63:58:60:07:ad:a6:47:16:74:1e:5c:0f:
                    f9:12:b4:ab:02:28:a6:37:db:f0:b5:f0:4f:92:98:
                    1e:df:a5:36:0f:a2:37:22:e1:82:1d:30:e8:b9:5a:
                    07:df:a4:dc:fd:ad:83:0e:99:0d:ba:66:dc:f5:59:
                    84:56:6a:3f:ed:c1:ad:2d:f7:05:fb:80:9b:97:3d:
                    6a:f4:b8:40:1c:03:bc:53:9d:50:56:5d:b6:63:d7:
                    9c:54:3a:72:79:ce:14:a5:02:59:bd:bd:dd:55:3b:
                    d3:2e:4e:da:c8:31:a5:86:2c:97:ad:0b:1f:54:97:
                    53:af:af:c3:50:4d:f2:ab:fe:93:d0:2d:6d:f0:f6:
                    02:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0F:61:9C:A0:6F:F8:05:EF:F2:95:75:72:1C:6C:4A:88:C5:43:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/771a27cf-ba92-3d10-87e2-b4a9ea366450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:9300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:68:83:ec:0f:ea:13:09:16:02:11:89:29:09:20:28:ab:88:
         4c:d9:ed:e6:55:b9:55:42:03:61:83:41:1d:ed:08:9a:53:87:
         4a:09:8d:5a:40:97:a6:78:22:46:14:56:72:72:ec:af:cc:05:
         bf:79:e4:d3:43:bc:54:a8:40:08:31:35:61:fe:58:0f:6c:5e:
         94:7b:67:ce:5b:f2:16:25:83:2a:3a:2a:c3:9e:8d:32:94:96:
         64:a5:13:96:72:ca:b0:3a:c3:ac:a8:83:92:85:64:dd:dd:b3:
         ce:ae:1f:dc:b8:37:bf:34:71:9d:e6:33:af:9e:69:2e:e0:d8:
         ac:05:77:ef:e0:a1:2b:9d:9f:82:a3:1d:52:4f:12:5d:69:2a:
         40:d9:08:09:d5:0c:e3:47:a6:54:af:8e:14:d7:34:b3:d2:16:
         72:84:a0:62:5d:53:c1:0c:5e:b1:74:46:cc:00:64:73:d8:50:
         a2:ef:a0:28:4b:4b:3e:71:4c:83:53:92:24:84:66:72:37:0f:
         5a:d3:fa:1c:98:a4:a3:77:97:26:99:f8:d7:50:c2:e2:c0:43:
         33:77:0e:df:0b:73:19:2d:51:da:4d:7b:1b:34:9d:f1:10:c8:
         64:4a:e7:bc:bf:b9:dd:e6:32:56:4e:8f:4d:e8:df:dd:5d:f2:
         0d:52:7e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:47:26 2025 by rpki-client