Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/424fa12f-a85b-3e8d-b65c-dd2d9b8bc76a.roa
File:                     424fa12f-a85b-3e8d-b65c-dd2d9b8bc76a.roa (raw, json)
Hash identifier:          ZtsbykDpeB0TScB6Y3ETiEymZyXftVYS/CizfVjNTKc=
Subject key identifier:   7B:01:3B:2A:62:CB:4F:31:C1:5E:94:BF:D2:90:8A:E4:AC:08:50:62
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584CC6120D9BA7566ED2996F3000
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/424fa12f-a85b-3e8d-b65c-dd2d9b8bc76a.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     13445
IP address blocks:        2607:fcf0:2700::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:0d:9b:a7:56:6e:d2:99:6f:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=29c1a87e-f9ab-4f5c-a84b-d692c060bb5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:06:a7:af:65:08:40:ac:ad:c8:69:65:37:0b:
                    16:84:cb:da:e7:02:45:6a:22:23:96:84:3a:22:b3:
                    b1:80:0b:2d:93:32:1e:3d:6b:a8:da:e4:6f:31:5f:
                    83:84:19:f0:89:c1:9f:05:a2:5d:31:2c:cf:b2:bb:
                    cf:a9:bf:d9:3f:a5:72:53:49:10:65:0f:ce:a1:81:
                    e8:51:7b:dc:06:6f:fb:a7:80:10:4a:23:5c:64:4a:
                    dc:ff:62:6e:26:0a:4a:ef:7f:6f:1b:19:4a:20:ea:
                    d5:7f:c5:a2:6b:b9:1a:6e:99:ab:93:e0:d5:3c:bb:
                    eb:21:eb:85:0f:36:ce:4c:6a:9b:ed:bc:a6:7b:c9:
                    32:26:88:69:e9:fb:90:7c:3d:c6:3c:8b:cc:5f:ed:
                    71:4e:29:24:bb:6e:cd:db:ee:f8:bf:c0:83:b9:81:
                    3d:5b:12:c2:20:4a:cd:00:c1:40:a9:b7:50:31:d4:
                    26:b3:43:4f:0b:79:80:05:a5:5a:21:a9:20:07:87:
                    20:3d:8b:82:53:b8:77:ad:f8:03:af:ef:b5:89:5a:
                    b3:29:9f:7b:4b:9d:d9:be:3c:17:0c:2c:d9:69:68:
                    40:ba:5d:cf:37:e6:a9:bc:04:ff:40:db:95:e7:8d:
                    e6:24:97:6e:6d:5b:c3:93:d0:3b:0f:31:69:23:8f:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:01:3B:2A:62:CB:4F:31:C1:5E:94:BF:D2:90:8A:E4:AC:08:50:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/424fa12f-a85b-3e8d-b65c-dd2d9b8bc76a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:2700::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ef:59:12:0b:37:de:e0:44:57:6a:12:3c:03:3b:42:b4:6a:
         b2:97:3e:a4:b8:2f:bb:02:5d:fe:6f:49:dd:bd:b5:12:15:54:
         dd:8a:72:f2:b9:d2:e1:7f:44:40:b7:48:71:e2:d9:f2:04:71:
         72:19:59:61:cc:4b:d6:41:82:74:09:2a:23:5e:68:26:0c:13:
         f6:67:1e:7f:4b:d0:68:f0:8f:12:05:e6:f5:9a:2a:a2:9e:4a:
         08:b8:3d:70:a7:cf:cb:0a:8b:d0:ea:0a:32:e0:2f:64:dd:a0:
         01:f0:3d:15:6c:af:1c:d0:03:65:b4:22:36:5a:1e:35:55:56:
         28:7d:d0:5e:cd:09:30:06:35:a4:7a:aa:6d:4d:bc:78:9b:c0:
         3d:a2:7c:d7:04:c0:1d:4a:07:83:18:13:2c:13:13:aa:1a:6b:
         a6:6f:97:2f:c0:45:11:33:41:65:46:e9:7e:a4:4c:f1:07:23:
         ff:7d:63:b3:1e:a4:2e:aa:17:58:26:53:00:0a:ce:05:19:dc:
         e0:dd:2c:76:20:e9:40:62:5b:b7:d6:01:ba:03:8f:82:95:36:
         2d:1e:ad:52:b9:ff:fb:e5:95:21:9c:2a:e1:32:95:11:d7:d3:
         ba:df:15:f7:34:42:43:9a:5e:46:f1:6c:ce:69:08:a1:9c:0d:
         76:f0:4a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:43:05 2026 by rpki-client