Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/170f4f6b-e785-3c28-8d0e-a4f739d30084.roa
File:                     170f4f6b-e785-3c28-8d0e-a4f739d30084.roa (raw, json)
Hash identifier:          42kuMjzq9YcdyWFo6v9bDtuxU0jxf90PIRRxmghIIuY=
Subject key identifier:   3A:C7:FE:72:38:B6:F5:BD:3C:27:70:97:58:60:E6:D8:0E:65:14:5E
Certificate issuer:       /CN=778754ac-5240-4fc0-85b4-8e68334c69e2
Certificate serial:       010D0C9F4328584DF4DB3DBDCDD2B70F99E29F00
Authority key identifier: 92:27:67:71:6F:20:AC:78:18:51:BD:00:75:85:C4:A4:B0:D3:02:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/170f4f6b-e785-3c28-8d0e-a4f739d30084.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     377
IP address blocks:        2620:106:6000::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/778754ac-5240-4fc0-85b4-8e68334c69e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/778754ac-5240-4fc0-85b4-8e68334c69e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:3d:bd:cd:d2:b7:0f:99:e2:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=778754ac-5240-4fc0-85b4-8e68334c69e2
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=7da00c28-f73d-4ed4-961f-918320a4fe4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b1:7d:4d:2a:e9:91:b6:5f:f5:95:3e:e8:71:
                    e5:86:5b:4d:d3:9e:bb:7f:d8:4d:93:ea:5b:e3:37:
                    0b:8b:50:97:6b:7b:a1:70:16:15:27:79:ee:c0:f7:
                    2e:69:8d:e1:bd:50:3d:aa:f9:57:4c:4d:c1:cf:85:
                    7e:68:67:7f:e7:16:1c:29:3a:4f:fa:15:76:81:93:
                    62:78:09:ef:98:24:c1:21:c4:58:6e:34:4b:a8:17:
                    75:ec:87:ab:5d:ea:7c:27:65:97:5b:0f:88:65:35:
                    bd:59:41:97:08:b7:28:bf:70:95:7a:5e:4b:d7:64:
                    7f:84:fe:da:ef:a1:00:71:6d:32:b7:a4:b3:ef:ce:
                    ea:ed:05:ea:51:0a:e2:d0:8d:34:c8:32:d0:17:db:
                    ff:97:23:d0:86:84:8c:5c:c4:57:34:87:a6:41:fe:
                    6b:ed:5e:78:8d:7e:04:44:89:07:22:0f:36:45:b5:
                    7a:be:1c:df:62:96:d9:46:07:81:96:7a:f5:9d:56:
                    c1:04:0b:1b:55:f3:07:26:98:be:10:87:33:36:05:
                    89:60:c2:c1:78:bf:0b:0a:9c:93:ab:31:d9:46:4b:
                    54:9f:31:26:96:d5:de:a3:55:b5:56:f0:cd:c3:7d:
                    57:b6:86:07:97:0c:9f:26:28:57:6c:8d:aa:b6:5c:
                    f1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C7:FE:72:38:B6:F5:BD:3C:27:70:97:58:60:E6:D8:0E:65:14:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/170f4f6b-e785-3c28-8d0e-a4f739d30084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/778754ac-5240-4fc0-85b4-8e68334c69e2.crl

            X509v3 Authority Key Identifier:
                keyid:92:27:67:71:6F:20:AC:78:18:51:BD:00:75:85:C4:A4:B0:D3:02:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:106:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:a7:53:b9:58:7a:e7:50:71:6c:c6:64:16:36:2e:b7:57:b3:
         e4:cf:92:d8:cb:8a:b7:34:56:fc:af:63:c7:26:09:c3:48:9a:
         63:bb:54:f8:78:73:aa:e5:b2:ce:e4:76:0b:6c:93:0f:c5:b9:
         f0:7c:39:cb:f2:e1:a6:40:2b:4e:37:32:ca:a0:e5:e9:67:95:
         4c:78:7c:c5:6c:3e:1e:27:23:90:d2:87:65:96:e2:f0:b2:e2:
         e0:0a:e8:2d:72:e0:f0:f1:d1:cb:0d:b6:3f:1b:2d:66:a8:76:
         15:b8:e0:f8:8b:54:dc:78:ec:3b:f4:f2:90:b2:71:09:63:5a:
         34:a0:ca:c2:bb:a5:75:26:05:32:a9:62:b7:22:48:21:42:7a:
         95:d6:96:d8:fc:aa:f6:48:df:ba:2d:57:c9:3e:e8:bd:b4:29:
         cb:3b:49:fd:da:2a:d4:3a:85:bf:74:08:10:e4:10:be:b2:25:
         ee:e1:82:6b:4e:1e:6e:c7:0f:ab:c0:14:b1:42:a1:41:89:a5:
         79:90:b7:a4:20:f5:75:9d:9e:c8:bf:f1:df:01:26:3f:0f:22:
         f2:b5:51:2d:54:98:31:a9:72:53:77:8c:8e:1f:fb:14:a4:c0:
         3f:bf:11:cd:96:ec:d9:1b:8d:0a:aa:5c:46:8d:b7:8f:6f:e9:
         05:47:36:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:52 2026 by rpki-client