Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/1567f45f-9dfc-3f64-a3ed-9c7d72d6ab69.roa
File:                     1567f45f-9dfc-3f64-a3ed-9c7d72d6ab69.roa (raw, json)
Hash identifier:          o2EOdDNtynuKBqp5h60tNmhlwVs8p01e8s26MqjnEic=
Subject key identifier:   70:60:9C:98:46:D7:6A:2B:04:2E:2F:4F:8A:35:0D:9F:51:E1:C0:F9
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584E86F4E8FC7B68490E34627A80
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/1567f45f-9dfc-3f64-a3ed-9c7d72d6ab69.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     13445
IP address blocks:        2607:fcf0:2400::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:e8:fc:7b:68:49:0e:34:62:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=998f26f5-47a6-4ebc-b035-255d432c1521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cc:69:8d:16:f2:25:f6:fe:f3:c0:80:cd:4d:
                    23:0b:57:19:c3:28:60:f2:c1:9f:a4:f9:f5:47:d9:
                    3f:c7:d0:e6:00:15:32:e9:a9:09:17:cb:a2:17:06:
                    72:86:fb:0a:a3:0f:88:d4:c2:77:52:b1:a3:82:4f:
                    90:1b:a8:e0:7c:57:e1:d0:1e:e4:91:8c:f6:1b:b7:
                    fc:60:b6:1b:26:03:14:79:bb:2f:82:e3:25:c8:42:
                    03:80:a3:60:58:a8:ca:3e:d3:7c:1c:06:44:d9:c1:
                    b6:70:45:dd:9b:6e:31:89:dd:c7:cd:a6:59:cb:19:
                    c1:07:6d:43:ca:b5:bd:62:dd:a0:77:05:c4:f3:10:
                    9c:c9:ec:83:25:ea:cf:1a:a3:45:53:a7:61:21:83:
                    9a:5c:4b:23:2d:cf:7d:98:95:c9:e0:38:01:8e:4f:
                    94:f2:0f:98:0b:9f:46:46:12:e5:77:2c:48:0f:c4:
                    e0:85:a0:d1:07:51:bf:9c:86:0c:9b:ae:76:ec:e5:
                    ef:14:90:42:93:5a:3e:3d:de:24:05:57:c7:ee:97:
                    3f:b9:c9:0c:17:ca:71:3c:47:2f:f0:ce:d6:c3:83:
                    19:36:56:8a:03:01:da:30:4a:2b:02:37:03:52:fe:
                    36:5e:ac:07:de:78:a2:9b:5c:f6:50:c5:2b:11:3b:
                    05:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:60:9C:98:46:D7:6A:2B:04:2E:2F:4F:8A:35:0D:9F:51:E1:C0:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/1567f45f-9dfc-3f64-a3ed-9c7d72d6ab69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:2400::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:aa:10:a0:43:cb:5e:b6:95:b5:2e:5a:67:f5:dc:f4:8e:9d:
         cf:98:43:3d:03:eb:b3:25:86:75:2a:71:06:a0:d0:61:2a:92:
         8a:9a:f2:8f:20:89:61:6c:9c:66:8a:e1:82:77:fe:f4:87:9b:
         86:02:37:58:4f:da:a6:ff:1f:6f:fc:9e:33:c0:6a:2b:c8:7f:
         2c:5a:60:66:ca:d9:0e:a5:fb:9e:fe:f0:21:56:d9:f8:73:90:
         69:24:48:bb:70:b3:43:47:ed:7c:ed:1f:cb:54:dc:52:75:29:
         d3:6b:43:a4:38:ad:f1:b3:22:d8:47:ae:c1:46:0b:c9:ee:27:
         b1:a0:95:49:e7:ad:32:48:d4:75:d1:a4:f7:f6:02:73:d9:2f:
         0e:bb:73:ec:ed:3c:d6:9f:5c:0e:03:98:3e:45:16:df:9d:29:
         12:47:4c:ec:4c:59:34:25:bf:00:d3:ca:5a:7a:c9:57:9d:95:
         f2:b7:17:b1:34:c1:10:f8:2f:24:7c:f0:94:86:ed:9e:18:25:
         96:29:27:70:a4:86:f0:29:1e:72:7a:ba:01:0b:ee:40:5f:b7:
         01:7b:86:9b:f9:10:97:47:00:7a:76:2f:36:69:47:7c:23:47:
         57:1a:70:d8:2f:97:dc:9c:af:f0:da:1a:bb:6f:2f:c6:06:5a:
         95:20:11:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 01:15:51 2026 by rpki-client