Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/89500a8e-1d73-3c1c-a9d4-bf905101344e.roa
File:                     89500a8e-1d73-3c1c-a9d4-bf905101344e.roa (raw, json)
Hash identifier:          MmeHpEv8S2uD4e0hLJi62oeFSuJmoaAJO0Pe4s0eSr8=
Subject key identifier:   0F:91:42:F3:67:FD:D3:CF:0B:F2:7D:5B:EE:A7:DA:5A:C6:0E:39:C9
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584EE921EF8F7834017C32CCCD00
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/89500a8e-1d73-3c1c-a9d4-bf905101344e.roa
Signing time:             Fri 21 Aug 2026 13:00:11 +0000
ROA not before:           Fri 21 Aug 2026 13:00:11 +0000
ROA not after:            Thu 19 Nov 2026 14:00:11 +0000
asID:                     9450
IP address blocks:        2607:fcf0:4400::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:21:ef:8f:78:34:01:7c:32:cc:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Aug 21 13:00:11 2026 GMT
            Not After : Nov 19 14:00:11 2026 GMT
        Subject: CN=29a1a605-cf28-4600-bee1-58481187ecde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:64:c3:c4:05:e5:1d:89:d7:c0:dc:b8:e2:
                    f1:af:40:bf:ff:d0:f2:4c:ef:00:57:a4:dc:2c:43:
                    d3:26:f3:63:32:98:f8:f3:fc:ab:dd:a9:8f:22:27:
                    68:1e:d6:6c:9a:3d:b7:7f:c4:b3:62:47:9e:53:d6:
                    90:72:43:a5:1a:7c:ca:1c:47:c7:a0:4f:aa:b5:5c:
                    8b:68:c8:2d:e4:3a:1b:6b:5a:f7:f6:43:7c:dd:ac:
                    59:f3:56:d2:2a:f6:84:dd:31:4e:00:8f:72:43:59:
                    85:33:b7:7c:24:d2:92:13:5b:db:bd:1e:75:34:e0:
                    86:40:06:d0:cd:b0:49:8a:cd:72:72:7b:f7:20:0e:
                    62:c2:d6:47:b1:81:13:ca:12:e9:6e:d1:01:a9:24:
                    9c:66:90:4d:4d:ce:15:1c:34:37:57:f0:a3:dd:59:
                    98:2f:47:47:24:0f:90:6d:64:bf:0f:45:82:1b:85:
                    fd:9f:9a:d1:bc:f1:8d:cd:e0:3d:8c:2e:52:d0:3b:
                    99:68:b6:35:27:e4:81:7e:78:22:6e:40:ff:d5:37:
                    ab:ef:0f:2b:a6:b1:58:2e:51:63:8b:3e:ba:5b:b6:
                    c0:1c:78:8c:d9:36:0b:12:84:9e:b4:8e:78:e1:fa:
                    82:5d:06:0c:5e:49:a6:ee:57:c0:23:6f:ba:1b:a8:
                    4a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:91:42:F3:67:FD:D3:CF:0B:F2:7D:5B:EE:A7:DA:5A:C6:0E:39:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/89500a8e-1d73-3c1c-a9d4-bf905101344e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:4400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:b4:89:ad:5b:14:22:47:86:8e:e4:1a:9c:52:5d:c1:00:47:
         0e:27:17:60:04:ae:34:f3:9d:dc:58:f2:dc:43:fa:e8:ef:67:
         63:0f:30:54:f2:4f:69:d5:bd:34:d9:e2:49:87:36:46:14:37:
         50:ed:59:51:1a:82:8f:d7:69:61:ef:25:dd:f0:ad:e7:fe:1d:
         b5:b7:be:52:c3:89:a6:56:f1:43:11:3e:28:0d:1b:90:8c:95:
         4e:b6:7c:3a:0a:4d:99:61:67:f3:57:0a:fb:d5:7d:61:6e:69:
         2a:6f:3c:8d:a8:6d:13:5d:bc:30:fc:91:8c:ce:16:80:30:e5:
         53:f1:63:20:7c:5a:dc:7f:70:95:59:ce:f1:6c:7c:18:5a:99:
         b7:a1:be:80:5d:af:7b:fb:8c:47:9d:d6:5c:ed:54:34:24:6d:
         4c:18:22:dd:51:70:41:70:08:6f:9a:d1:90:e7:ca:ab:ee:16:
         8c:75:18:73:b5:fe:f9:5f:06:e2:f5:35:e1:0a:ff:0e:23:63:
         d5:0e:11:fc:df:5a:fc:31:1f:d1:ed:89:e3:41:29:9e:6f:3b:
         33:57:ad:4a:91:dd:d9:89:76:fe:68:4e:02:bd:db:12:b1:fd:
         7c:9b:9c:ac:de:ff:75:c3:56:a3:48:5d:2d:86:15:9e:c8:38:
         4f:18:f3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:23:52 2026 by rpki-client