Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/8578d02e-2574-3397-9850-67ab5fdce8b7.roa
File:                     8578d02e-2574-3397-9850-67ab5fdce8b7.roa (raw, json)
Hash identifier:          vwWzjlZM+OF2sPcO5RfP6xuncTTQpFZ/PVHTAq7wXsU=
Subject key identifier:   59:62:64:20:E6:19:BA:9E:01:6E:C0:79:2B:3E:C0:6B:C8:3E:F4:F3
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584E6C6F67857D0A03C306871700
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/8578d02e-2574-3397-9850-67ab5fdce8b7.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     3477
IP address blocks:        2601:a002::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:67:85:7d:0a:03:c3:06:87:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=c3c0b4b1-d8b1-4fe8-85c1-01b9118a1a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:57:90:d8:4e:d7:f7:88:64:c6:4b:2e:f0:
                    7d:d2:27:5d:b8:a1:60:82:e7:8f:d5:72:3e:b2:0d:
                    97:ca:a2:b3:da:7a:5c:7e:b6:e7:25:58:7d:ac:7e:
                    58:ef:f5:49:a6:b1:59:78:a3:e4:84:18:15:5e:bf:
                    20:63:d7:ec:c9:5a:68:0f:4e:3b:37:1a:ed:b8:0b:
                    d8:15:55:02:13:b6:3d:c7:e6:c0:8b:19:10:f4:bf:
                    43:4b:a6:ca:e2:0c:19:40:65:d3:02:c5:51:b3:8d:
                    4b:cc:8e:bd:4a:ed:d9:fa:39:7c:3d:b0:bf:f7:fc:
                    7a:b5:2f:c5:48:bf:ec:85:63:eb:38:9d:8d:f7:81:
                    c9:bc:ca:a2:7e:f2:b8:02:e7:40:44:ac:04:8c:82:
                    ce:b8:e7:1e:8e:25:51:ec:1d:73:97:b4:f1:5b:62:
                    3e:2e:79:91:99:93:7d:a1:85:63:c7:0b:ae:0d:d4:
                    fb:9e:e4:b3:af:5e:b9:ab:aa:59:75:1f:d8:7d:be:
                    5d:6a:e5:0f:b7:fd:29:88:1c:d3:bd:9b:a3:08:75:
                    1e:b8:9e:6d:5e:d1:16:4a:a3:d8:5a:c6:0f:87:3a:
                    e6:52:ea:35:5d:cb:05:65:8f:12:ca:81:21:2f:d2:
                    8b:60:cc:86:18:1b:17:6a:fa:8f:89:82:28:aa:f4:
                    7d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:62:64:20:E6:19:BA:9E:01:6E:C0:79:2B:3E:C0:6B:C8:3E:F4:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/8578d02e-2574-3397-9850-67ab5fdce8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:a002::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:db:4b:cc:36:9e:bc:fd:be:9a:56:4b:67:aa:76:05:b6:25:
         1f:8b:da:41:e9:0b:f4:e2:66:7f:1d:ff:45:6f:7e:5e:ed:3f:
         cb:ea:34:6e:6e:24:f8:b0:d4:3d:82:61:5d:62:88:b7:b8:a6:
         51:8e:87:55:ad:5a:de:ba:f2:4e:46:46:7a:7a:c0:e2:75:8f:
         8b:59:77:bb:71:17:e9:f5:57:8b:f3:0c:e7:80:52:aa:f4:43:
         05:b1:9e:80:14:44:91:32:d4:72:2b:fd:0c:90:6d:d7:1a:6e:
         13:84:0b:5f:d2:8f:c3:90:2c:8f:bc:31:c4:eb:4a:c3:74:6c:
         df:ad:88:b2:0e:cf:2e:dc:94:30:cf:83:ee:90:c8:07:08:e5:
         0b:d2:69:5c:af:96:33:b5:a2:f2:60:f9:2c:64:02:bf:77:30:
         94:eb:ee:56:3c:e1:50:12:1f:5f:65:1c:e4:f4:41:92:03:83:
         b9:15:2c:ce:c8:a7:de:0c:b3:4b:57:98:1a:fb:4e:8b:12:02:
         f2:41:7e:c4:ce:80:37:80:04:56:d1:37:2b:26:8e:ba:41:7b:
         09:64:7f:74:4b:37:73:1d:eb:eb:d0:fa:4a:d8:08:60:ab:4f:
         83:b8:0b:d8:66:24:80:0d:9f:d1:c0:6b:61:5d:ae:f0:5e:6b:
         2d:3d:53:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:26:15 2026 by rpki-client