Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/161dec06-6c33-3687-a1b6-87c3c35a09d6.roa
File:                     161dec06-6c33-3687-a1b6-87c3c35a09d6.roa (raw, json)
Hash identifier:          VYTQoAJ1/teu4hY+sMdog+ZZyQeZ8duU403xa3lfxUw=
Subject key identifier:   B0:AB:5F:F0:1C:5E:E9:50:F7:45:E4:F9:28:DC:FD:FE:B5:19:B6:47
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584E86F4E459CCA6ED0976F1F550
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/161dec06-6c33-3687-a1b6-87c3c35a09d6.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     13445
IP address blocks:        2607:fcf0:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:e4:59:cc:a6:ed:09:76:f1:f5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=531b4087-8501-48da-ba42-2cb7eb1be1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:9e:85:02:a1:6a:31:b9:8a:49:9b:20:5e:
                    97:80:4d:6d:09:16:65:8b:58:02:3d:16:48:8b:9f:
                    b2:2f:f9:1f:80:19:2c:ea:3d:e9:8e:9d:e8:1d:b1:
                    c2:7c:63:f2:c0:b7:74:48:3d:59:cf:a9:49:c9:8c:
                    06:ee:b1:a4:41:0e:a4:46:07:f5:07:64:51:63:46:
                    fa:d1:90:21:21:d1:c0:5c:40:c1:3a:29:0a:43:ef:
                    88:9a:58:1c:f3:11:7f:b1:b0:bc:92:41:b7:3a:87:
                    28:7e:31:49:9c:0c:98:0f:fb:b1:94:2e:c1:e1:4e:
                    24:0a:f0:a5:f8:c5:5a:83:a8:15:62:08:08:6d:a6:
                    4e:a6:63:d2:ef:22:e4:76:bd:10:2e:03:16:ea:22:
                    be:7b:8c:0b:c1:f0:e1:4c:ac:62:04:45:18:37:eb:
                    fc:6c:f2:55:74:c2:0f:ec:80:9c:ac:5b:a3:1a:a1:
                    88:9e:c9:c8:ca:45:4b:e1:b0:6f:c0:e8:34:c3:e0:
                    79:3e:24:9a:39:81:a4:1d:be:a2:b4:8a:7e:bc:c7:
                    41:38:d2:1f:98:83:70:89:b2:f7:12:72:8c:81:6b:
                    ab:6f:12:d9:ec:6b:a6:46:be:5d:21:d8:ee:15:cb:
                    6c:57:46:6d:2a:90:6f:13:31:79:b7:59:bb:e1:8f:
                    75:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AB:5F:F0:1C:5E:E9:50:F7:45:E4:F9:28:DC:FD:FE:B5:19:B6:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/161dec06-6c33-3687-a1b6-87c3c35a09d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:d7:a2:3b:e5:cc:a8:37:62:29:bf:8e:82:83:dd:c8:33:19:
         b0:66:49:36:13:3a:c5:2e:3e:ca:ea:3d:48:a5:e4:0c:37:f2:
         bc:73:31:55:62:51:60:6f:d4:19:f5:c4:76:1b:85:e3:73:46:
         75:09:4e:1b:d2:94:de:a9:42:71:75:b1:94:20:b6:34:a2:58:
         2e:cd:c8:53:37:6c:0c:63:2c:73:6e:77:a3:89:dd:37:1b:b1:
         15:7f:ff:26:cd:ce:91:18:d7:95:a7:5f:b1:dd:74:2b:6e:55:
         72:28:a1:98:01:e0:eb:ec:b3:65:e2:64:91:58:fe:21:e9:c0:
         85:7d:0f:da:7f:f8:b8:32:f7:6e:ad:5a:01:bc:43:a5:a7:eb:
         e2:10:3f:cf:c7:44:56:29:6c:6d:05:ec:96:5e:91:c8:d2:c8:
         b3:fb:74:6f:dd:32:b5:e7:8f:ae:ae:18:7b:47:84:dc:6b:23:
         4d:01:6f:b2:d9:3d:ea:0d:5f:7c:a3:d8:45:9f:b8:52:c1:93:
         da:7d:53:63:cc:4d:77:0c:c9:a4:6d:d7:3b:c6:0e:7d:92:d8:
         38:a8:51:f3:64:8b:cc:b2:c2:0d:9b:8f:ca:b0:e5:7b:e3:57:
         cb:56:47:d6:65:a7:04:fc:8c:86:ca:ba:21:b4:2b:d8:76:a8:
         5e:e5:fa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 01:16:38 2026 by rpki-client