Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dd6653a7-febc-3d06-a9a9-20cda339adc1.roa
File:                     dd6653a7-febc-3d06-a9a9-20cda339adc1.roa (raw, json)
Hash identifier:          PkzeeFdIJIRyNlOSJTFh5+p49i2PGVB2qBEH/1mll1Q=
Subject key identifier:   6F:AE:31:E7:78:69:AE:8A:08:F6:D9:32:8A:53:54:7B:57:D2:80:86
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584DDE87F94BF888844D2B214900
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dd6653a7-febc-3d06-a9a9-20cda339adc1.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     3477
IP address blocks:        2610:20:8c20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:f9:4b:f8:88:84:4d:2b:21:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=5d5ef44c-b42c-4be4-8023-96c738931799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e6:91:7d:d0:60:0b:e2:f3:32:f8:1a:a2:11:
                    f9:16:fc:fc:90:1b:6d:3c:c7:6b:53:39:79:b3:67:
                    47:e8:f9:9a:88:21:79:ed:ab:8f:43:cb:4a:c1:11:
                    0d:a7:ae:f9:ad:92:5c:df:b0:c2:6f:5a:25:cd:a7:
                    b3:96:f6:5a:16:d3:bf:0f:f7:6b:1d:43:1c:51:51:
                    2c:b7:9c:6c:30:85:70:64:95:c6:74:a6:4b:39:c0:
                    1d:c6:4e:0e:87:43:d4:1c:7e:79:c7:db:6c:8e:6c:
                    9e:05:13:1c:d1:c1:bb:7d:3f:71:4b:ce:0b:0b:1f:
                    5b:43:1f:42:42:e7:30:c5:1b:03:78:7d:50:dd:16:
                    f0:3e:f4:96:60:1b:42:4d:22:02:6f:09:25:d9:b7:
                    bc:7f:14:6d:a2:24:e1:fe:5c:46:35:bd:31:fe:79:
                    da:5e:3c:7b:73:bd:22:65:a1:49:0d:b0:f1:cb:37:
                    c4:15:3c:ad:3a:39:2a:fe:66:8f:65:24:32:c1:71:
                    b3:5e:20:e3:ab:2b:f9:27:e7:ea:a0:b0:bb:27:f4:
                    f3:b6:07:79:2e:e0:9a:55:5b:44:26:46:bd:31:0d:
                    66:af:cf:f2:ea:67:84:56:a4:82:d1:12:f8:89:64:
                    e0:76:f1:3a:a0:4b:b2:32:68:0e:fa:a9:85:21:1e:
                    93:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AE:31:E7:78:69:AE:8A:08:F6:D9:32:8A:53:54:7B:57:D2:80:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/dd6653a7-febc-3d06-a9a9-20cda339adc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:8c20::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:09:bf:71:6d:ef:20:0e:3c:09:02:d0:47:66:40:28:40:7b:
         de:72:8e:8f:57:11:fc:f7:91:39:31:67:ae:59:22:fb:98:60:
         3d:72:0f:d2:84:92:e5:f7:7e:05:29:19:ac:e5:d7:3d:99:96:
         17:c7:b1:9c:7b:55:e8:fa:dd:f3:fd:4e:96:5c:c5:b9:af:15:
         55:4c:95:0d:b9:f0:1b:28:10:8b:f4:9e:a1:cf:cd:78:78:26:
         39:7e:fd:3a:4b:7f:35:73:70:b6:af:66:03:a7:95:85:5f:b7:
         a0:14:9b:18:77:5a:d2:c6:2b:1d:db:22:00:0e:10:56:a5:f1:
         f6:a0:b4:7d:09:f2:b4:61:e8:14:f9:55:5b:b0:a9:50:4a:10:
         df:d7:f6:ca:75:31:97:69:46:95:e0:83:9c:df:41:b0:ef:48:
         75:26:5a:8a:a6:64:b0:09:d6:22:4e:75:e5:67:c5:89:74:6a:
         64:dc:44:e2:c8:53:9e:78:e9:be:41:01:07:30:fb:95:7a:f8:
         7a:51:0b:ff:36:97:2c:1a:fa:d7:55:98:12:9b:d8:1b:31:aa:
         4d:c4:3c:65:da:e0:3c:d3:e5:ed:d3:45:bb:28:50:ef:27:83:
         ed:59:92:a1:6c:b7:a1:b0:a3:b0:bd:6f:32:4e:d3:c5:c7:5a:
         d5:35:8e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:57:06 2026 by rpki-client