Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f16b790d-4b87-32cd-9555-4066086795a9.roa
File:                     f16b790d-4b87-32cd-9555-4066086795a9.roa (raw, json)
Hash identifier:          IQg/J2L8A0kwViLoMl92qLI+3PbL4fXC8KQMUbNezW0=
Subject key identifier:   9D:50:2E:37:F5:F7:5B:39:52:E9:37:83:78:C7:7D:5E:1C:59:51:58
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584ED9C75B30ADDD6CB388711680
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f16b790d-4b87-32cd-9555-4066086795a9.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     395954
IP address blocks:        2607:f5b5:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:5b:30:ad:dd:6c:b3:88:71:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=fffdb1a5-3c0d-400e-a85c-4ec355b953d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:78:65:f9:f6:3f:33:ed:60:d3:8d:2f:7b:ee:
                    9d:51:23:b2:ad:ad:31:a8:67:d0:60:5c:de:0c:97:
                    36:67:0a:4e:fc:c2:2b:bd:35:ed:94:d1:8e:91:b8:
                    8b:b4:64:03:ec:a0:ef:2e:26:18:f0:44:db:e9:b6:
                    05:32:24:75:c8:4f:ba:cb:25:51:a0:7a:2a:48:14:
                    f4:70:12:3c:2c:04:d5:00:5d:bd:fc:dc:eb:27:73:
                    16:4b:bf:26:0a:27:06:95:04:80:1c:88:eb:0a:34:
                    b1:7f:c3:83:00:f2:36:e4:f8:02:e3:36:1d:0b:dd:
                    17:2e:e7:0a:06:7c:e4:4d:49:21:b3:8c:21:a7:e5:
                    d8:a4:f0:c4:df:45:3b:9b:f5:f2:af:be:59:f2:3e:
                    a2:42:bc:0c:ee:34:cd:4b:3c:0c:e7:e7:e6:20:97:
                    9a:31:e3:b9:61:95:7a:61:8d:24:27:cc:95:25:db:
                    59:aa:d2:e9:ac:82:a0:9c:9a:c3:4b:25:60:67:dc:
                    83:57:32:52:6a:38:45:03:56:c3:8c:bf:9f:4f:01:
                    cf:94:0b:8b:e0:9f:2d:e7:4d:34:c1:c0:33:e5:38:
                    d6:f3:d0:e6:1d:05:2f:db:94:c0:24:50:cd:e0:12:
                    19:e8:2b:67:cc:af:df:85:be:10:9b:89:0e:03:f9:
                    d7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:50:2E:37:F5:F7:5B:39:52:E9:37:83:78:C7:7D:5E:1C:59:51:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f16b790d-4b87-32cd-9555-4066086795a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:6d:da:c5:a8:1e:ce:69:40:42:7e:52:50:75:95:15:c5:8d:
         21:01:8b:5a:f5:df:83:a3:c5:c3:3e:46:27:fb:58:34:c9:73:
         60:0d:41:76:a8:ad:d1:8d:b4:ce:f3:37:c2:55:d0:5e:4b:fe:
         66:e9:ba:5d:f2:f8:42:28:33:7c:89:1c:2b:3b:5c:60:84:8f:
         51:be:59:5f:16:78:2a:d7:d5:9c:ef:e8:bc:74:63:cf:b5:38:
         9b:d8:ae:3e:66:1b:62:f4:2b:5a:37:bb:17:4f:8f:2e:0f:a3:
         8f:79:17:48:83:e7:88:38:d1:34:4e:7c:67:bf:f4:e1:e7:03:
         66:ca:fd:88:d3:c2:70:ac:70:9b:d3:82:4f:5f:6f:b6:5e:53:
         a2:88:1c:77:fb:e8:b8:3c:d1:2e:e5:eb:da:33:50:3c:d0:c7:
         da:34:3f:ee:92:41:bc:3c:e2:a5:54:66:e4:6a:f6:e6:12:aa:
         89:89:ba:63:ca:6b:7f:02:da:e2:a5:e7:7b:8b:e2:a9:7c:cf:
         7f:c7:65:d4:e6:62:b3:2c:54:63:a0:13:75:1c:da:9d:eb:fe:
         8f:32:a7:92:d4:d9:6a:80:33:de:74:19:33:62:00:25:d1:c3:
         69:9b:71:e4:f6:69:b0:be:fc:29:67:03:5b:52:75:ca:7c:91:
         cb:d5:a3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:23:48 2026 by rpki-client