Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dfd0fa5d-0e8c-3bcc-9785-16dd7771ec4b.roa
File:                     dfd0fa5d-0e8c-3bcc-9785-16dd7771ec4b.roa (raw, json)
Hash identifier:          OhpFu5K8/uIFCpuzW+uI8i3LN2AJvgtu1AvWjufd+S8=
Subject key identifier:   D3:AE:E4:5B:BE:10:D8:37:1B:4F:DD:F5:BF:EE:23:6F:58:48:D4:FF
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584EEA8763497246900D3652D980
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dfd0fa5d-0e8c-3bcc-9785-16dd7771ec4b.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        2607:fcf0:10a0::/44 maxlen: 48
                          2607:fcf0:20a0::/44 maxlen: 48
                          2607:fcf0:50a0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:63:49:72:46:90:0d:36:52:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=f40ede52-f401-40be-9e4f-bab3459a5c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8d:5f:75:c7:d5:9b:f3:5b:ff:d0:59:e9:28:
                    f0:6d:5b:6e:77:88:5d:ad:50:6e:cb:69:5f:6b:ed:
                    83:7f:ea:bd:80:35:0e:16:f5:73:d0:6e:0d:26:a2:
                    fe:36:22:72:39:4d:a3:df:b8:3c:76:d9:64:30:b8:
                    ad:c9:f2:b5:e1:00:b5:9a:d6:ed:6a:c9:32:4f:e0:
                    0e:fc:38:cf:f4:d0:53:16:20:b0:fc:5c:8e:8d:8b:
                    8b:87:ba:11:3f:01:96:fe:8e:f3:84:db:9b:01:14:
                    77:c9:6b:ae:19:24:80:ca:91:f9:01:af:f3:2e:7f:
                    27:50:05:1c:aa:d2:a3:57:86:97:6b:e9:61:af:59:
                    6a:bd:92:f4:69:66:9b:43:cd:34:e5:80:02:47:48:
                    8f:97:40:58:55:6d:4a:72:96:8b:23:d1:fa:36:0b:
                    1a:c5:41:9f:c2:e3:42:9b:ca:aa:57:43:c0:58:20:
                    f2:fa:1a:f5:ba:1a:90:3b:92:05:c5:03:5d:e4:9a:
                    27:b6:ef:1b:c7:af:99:f9:0e:79:af:e5:2b:3c:da:
                    75:04:3d:18:0f:44:cf:a1:0c:06:ac:87:d1:8e:30:
                    97:76:97:a3:67:0d:45:c6:70:ea:1d:0a:01:fc:43:
                    fa:fe:f4:71:11:33:f9:5f:89:20:3b:59:36:a5:71:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AE:E4:5B:BE:10:D8:37:1B:4F:DD:F5:BF:EE:23:6F:58:48:D4:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/dfd0fa5d-0e8c-3bcc-9785-16dd7771ec4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:10a0::/44
                  2607:fcf0:20a0::/44
                  2607:fcf0:50a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:19:43:ad:c0:f2:cb:9c:0b:c9:98:a2:27:11:37:35:49:91:
         2d:c6:73:88:1b:6a:64:b0:23:1a:be:2b:c4:fc:4e:2b:48:9c:
         8e:a7:60:96:2c:f9:82:48:36:c9:f4:5f:f3:35:f6:94:bf:2f:
         c5:dd:cb:d0:90:5d:a6:9f:da:f2:b2:58:a3:1b:20:f0:91:35:
         4f:dc:08:48:d1:84:27:c4:f8:36:f1:5c:93:81:03:24:76:da:
         00:e0:ba:11:e4:ca:2f:e9:bf:18:c2:50:1b:d5:a8:83:bd:a3:
         c0:a5:4b:2b:5e:32:37:57:14:0f:ee:ab:10:a8:72:a8:cd:6b:
         7e:58:28:54:92:77:c6:95:a4:ae:b1:54:08:a0:5f:fb:81:e6:
         40:7e:25:5c:f0:58:b6:0b:8e:2d:d3:e0:32:ee:8c:29:9d:9e:
         57:8a:73:2e:b1:ed:e7:0a:1b:73:fd:56:02:ae:07:2e:4b:1f:
         a6:ee:2b:7d:38:34:30:1a:2b:d5:1b:1d:06:56:5f:36:a8:14:
         7f:27:1a:42:d7:1b:4e:38:f3:17:96:2e:7a:03:96:33:36:fc:
         f1:5b:6d:01:ac:2f:fa:1c:f8:81:e9:ce:06:0c:42:04:ce:a8:
         5a:43:72:6c:e1:27:15:72:50:e9:4b:fa:3a:95:73:23:d3:fe:
         12:96:20:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 14:23:42 2026 by rpki-client