Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/87f357b6-545a-36a2-99f6-f9dab2a5e5d8.roa
File:                     87f357b6-545a-36a2-99f6-f9dab2a5e5d8.roa (raw, json)
Hash identifier:          zB9O8JapvJ+By591yyIonztWRg3tCpzNx3M3F4luf1c=
Subject key identifier:   F2:8D:7B:CE:F6:14:6B:00:12:93:72:D5:01:AD:82:7B:8D:76:98:50
Certificate issuer:       /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial:       010D0C9F4328584DC6CB091EDB51C10648A576A0
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/87f357b6-545a-36a2-99f6-f9dab2a5e5d8.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     0
IP address blocks:        2620:2f:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:09:1e:db:51:c1:06:48:a5:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=773fea54-9508-45d2-b777-e36a94423ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cc:96:c4:e7:c1:be:52:5c:b7:69:d8:8a:39:
                    3d:f7:43:54:56:27:b9:fa:58:a9:77:a6:db:1d:8d:
                    c9:fb:58:8d:48:db:c9:6a:7f:76:de:53:7f:cc:03:
                    1d:89:b3:18:71:01:10:38:1e:93:f2:42:51:cb:ad:
                    f3:e3:e2:ea:d7:70:8e:1c:6d:03:dd:a2:b4:7b:71:
                    36:ca:fe:0a:fe:fc:7b:d9:c6:5e:cd:2b:0b:9d:5f:
                    c7:ab:2c:7c:4b:8d:f9:3e:b2:ef:e2:a4:e9:91:30:
                    b0:7d:ea:71:fe:9c:c6:09:b2:26:12:a8:f5:93:86:
                    73:d3:fb:04:83:7e:2a:cb:ef:5a:bc:bb:4f:69:3f:
                    03:16:c9:c0:1e:45:92:81:8c:fc:1a:91:55:8e:92:
                    06:7e:ca:76:57:a1:5b:de:b9:47:55:30:3d:8e:bc:
                    f4:92:75:16:3d:61:ec:78:82:96:7f:13:1b:6b:28:
                    3a:d2:38:82:a3:5d:b8:0f:07:52:51:49:81:da:c5:
                    0c:d3:ac:a4:01:57:51:bc:f2:74:31:36:e6:15:d4:
                    a7:33:68:38:7c:39:3c:e1:1b:b2:12:71:66:9a:6a:
                    53:77:60:6f:fc:db:61:e9:f2:72:c8:e4:d8:39:ae:
                    b4:41:bd:f7:ba:55:48:ca:17:b6:ab:a8:97:a6:bd:
                    a2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8D:7B:CE:F6:14:6B:00:12:93:72:D5:01:AD:82:7B:8D:76:98:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/87f357b6-545a-36a2-99f6-f9dab2a5e5d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl

            X509v3 Authority Key Identifier:
                keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:2f:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:ba:49:67:3a:15:68:54:76:e8:eb:cf:01:1c:40:c1:57:0c:
         f2:78:9e:5a:b8:25:9b:44:db:b8:dd:aa:d1:99:4e:f3:bc:60:
         b9:6f:35:89:4c:d3:c8:92:20:07:c2:07:5f:65:3b:df:25:5e:
         91:0e:80:c9:04:2f:a4:c1:a0:b2:a7:cb:c7:bc:ac:76:66:d7:
         b1:67:99:be:74:fe:d0:75:9f:dd:f4:6c:66:5a:fc:ac:7a:f4:
         ee:bd:13:77:3a:3a:62:3d:5e:34:38:74:0d:f6:9a:fb:d0:68:
         39:54:c5:fd:1c:d5:03:16:a0:83:09:d7:9d:2a:39:71:56:2c:
         9e:60:e2:05:a2:4c:1b:04:72:08:97:c4:e3:9d:dd:8b:20:a4:
         47:b0:dd:d1:01:94:f0:dc:c7:12:c5:8a:ce:c3:ee:46:fb:00:
         87:ac:ff:3e:12:80:64:49:fd:0f:bf:69:4d:a4:77:32:34:23:
         b3:58:1f:42:33:90:2d:6c:de:ff:b0:9b:6a:08:df:02:12:c9:
         62:a6:c2:3f:45:d5:42:f4:9b:a4:15:c7:ef:62:13:f1:a2:19:
         f9:27:8f:de:8f:6f:26:db:67:12:c1:b9:5d:4c:6c:1a:e1:06:
         7f:e4:43:b5:6b:4f:4f:48:58:27:72:aa:39:05:cd:23:a5:94:
         65:af:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:28:40 2026 by rpki-client