Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d7ad6731-f801-334c-8c41-a45799fc4e01.roa
File:                     d7ad6731-f801-334c-8c41-a45799fc4e01.roa (raw, json)
Hash identifier:          0pT98iecMRCqwrORKDKyYig63SJjrfV+HsHJyDcKUFg=
Subject key identifier:   41:7C:94:3B:6E:6E:E5:41:38:82:26:AC:E8:5A:43:23:A9:EC:A1:81
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F4328584D7B6A895FD2063D641EDFCAC0
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d7ad6731-f801-334c-8c41-a45799fc4e01.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     400544
IP address blocks:        2607:76c0:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:89:5f:d2:06:3d:64:1e:df:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=df3ce268-449b-4203-81c7-481005834c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:22:60:1c:0e:8d:50:5b:e0:e0:c3:8f:31:8e:
                    d6:79:30:f5:60:b9:a6:b4:9f:5e:c0:b9:21:74:8d:
                    ab:37:9a:7f:82:ec:62:ea:e8:73:ec:39:79:80:56:
                    14:7d:37:24:c9:dd:af:cc:ed:e8:02:89:cf:73:5f:
                    16:4d:84:be:c7:b7:36:eb:7c:2b:43:ac:78:ae:e0:
                    5f:24:a0:69:48:c0:bb:ab:50:8f:f1:66:ca:97:e0:
                    88:7d:d4:62:47:0c:ee:37:e4:21:35:56:53:32:2f:
                    10:5a:3d:8b:04:b1:51:df:28:b7:53:40:cf:e9:2d:
                    8c:38:d7:19:d2:de:36:6c:42:8d:18:82:d8:5b:dc:
                    74:52:8d:70:8b:a7:3c:04:45:49:fa:af:a1:88:e4:
                    5b:5e:75:98:8c:89:a1:d7:f3:f9:ae:b9:dd:85:b0:
                    37:40:ca:83:08:65:7b:9b:9b:4d:f1:e0:42:f6:8a:
                    01:f0:83:2c:4a:4e:56:8e:b4:bb:44:cc:87:a3:77:
                    88:62:2b:a9:7c:c5:44:9d:dd:97:8f:e9:d4:93:ae:
                    00:ad:86:7f:1a:d8:09:ed:5c:64:db:d1:31:11:7d:
                    23:83:ab:c9:19:0e:6a:f4:7f:36:52:a5:dc:21:ba:
                    bd:2b:b6:5f:0b:78:15:b9:1e:8b:94:43:d6:b2:16:
                    75:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7C:94:3B:6E:6E:E5:41:38:82:26:AC:E8:5A:43:23:A9:EC:A1:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d7ad6731-f801-334c-8c41-a45799fc4e01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:76c0:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:9c:f2:d7:69:43:b5:09:9c:fa:5b:c1:c5:82:00:72:c8:e9:
         f8:f8:92:9c:59:16:f0:ad:8e:20:cc:ad:2c:2b:62:fd:20:b6:
         67:54:95:35:23:fb:59:01:94:1a:0a:e2:73:43:95:79:11:5e:
         33:1c:3a:d0:cb:71:de:85:d9:5d:05:0d:24:6b:2a:d4:0a:f3:
         1d:e1:ea:34:9d:ad:8e:7f:a0:17:55:dd:85:a4:38:57:2e:43:
         26:c0:61:99:d2:76:5b:41:1e:eb:0a:77:32:5e:97:c2:a4:10:
         bd:d8:a0:03:d0:fe:e2:27:60:0b:fc:72:12:9c:c1:61:06:99:
         b4:f4:85:05:83:09:e3:4a:0f:4e:2b:89:2d:83:d4:6d:21:27:
         5c:55:dd:bc:3d:cc:58:66:d6:27:3d:06:f9:35:aa:79:62:2d:
         f7:73:88:b0:52:0f:9a:d7:55:88:d9:2e:b9:9b:36:3e:c5:0c:
         b6:82:0c:45:74:50:92:1c:9b:e3:9d:2b:3e:02:ec:82:fd:ba:
         1e:9c:31:49:69:e1:ea:ea:a2:95:b0:1d:11:ff:96:00:d4:73:
         51:ea:48:b0:ef:42:c8:10:4e:5b:69:0d:22:93:c4:6e:c9:b2:
         ae:9d:5a:ce:d7:29:9c:33:5e:bb:fc:35:df:3a:42:04:85:59:
         72:d0:4e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:41:54 2026 by rpki-client