Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d7ad6731-f801-334c-8c41-a45799fc4e01.roa
File:                     d7ad6731-f801-334c-8c41-a45799fc4e01.roa (raw, json)
Hash identifier:          nI5dGzkEzbzfEdTVHSp8TOQpa6bRpZtggrsZLEHIlyI=
Subject key identifier:   40:5E:F1:2F:27:03:71:83:49:9B:3A:74:61:16:44:4B:A2:74:0C:26
Certificate issuer:       /CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
Certificate serial:       010D0C9F4328584C9ACC427B5915E66B49540300
Authority key identifier: EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d7ad6731-f801-334c-8c41-a45799fc4e01.roa
Signing time:             Thu 22 Jan 2026 02:00:31 +0000
ROA not before:           Thu 22 Jan 2026 02:00:31 +0000
ROA not after:            Wed 22 Apr 2026 01:00:31 +0000
asID:                     400544
IP address blocks:        2607:76c0:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9a:cc:42:7b:59:15:e6:6b:49:54:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81bacd8-f7d9-47d7-aa24-5391049f9c82
        Validity
            Not Before: Jan 22 02:00:31 2026 GMT
            Not After : Apr 22 01:00:31 2026 GMT
        Subject: CN=51049e89-3f10-4ecb-9bfa-2c3746bd9699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:86:36:fe:3a:1e:dd:1e:17:9a:45:91:82:
                    f0:25:75:b1:ef:b1:63:6b:56:4b:cd:55:bc:72:02:
                    72:a9:b1:41:f6:a8:ea:d9:ad:38:0b:fe:55:29:e9:
                    d1:88:45:9d:65:ae:5a:ba:b4:11:4c:42:26:79:05:
                    22:0d:45:69:c9:91:0e:cc:40:91:f5:1b:ff:77:55:
                    11:d0:de:fc:5d:6b:44:24:d9:c4:e4:3b:c2:cb:33:
                    de:a8:21:62:a7:c7:06:8e:1a:f8:18:80:7e:a2:b2:
                    b9:98:0d:a7:9e:d7:55:4d:0f:37:4d:39:21:00:5e:
                    e9:ae:b8:61:d1:5a:da:d8:4a:35:db:fa:7f:5c:b8:
                    e9:08:58:95:5a:b9:b4:56:1c:71:09:a0:5a:64:a8:
                    91:80:31:46:fb:ff:3f:f6:1d:22:1e:ab:27:81:ce:
                    34:9b:39:63:ef:67:b1:04:9b:c5:87:61:e8:b6:ee:
                    0b:07:27:d3:17:d9:b6:b4:28:4b:91:8b:4b:b8:ee:
                    65:aa:74:b1:d5:7c:53:bc:1b:7d:42:f3:d7:56:0d:
                    d5:8b:45:02:50:88:47:01:00:6f:f0:82:11:d7:7e:
                    b9:f4:26:ee:95:a0:5a:0c:de:30:f6:55:00:c2:30:
                    71:65:cb:84:b2:b8:97:07:f9:69:e2:53:58:24:23:
                    d2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5E:F1:2F:27:03:71:83:49:9B:3A:74:61:16:44:4B:A2:74:0C:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/d7ad6731-f801-334c-8c41-a45799fc4e01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82/f81bacd8-f7d9-47d7-aa24-5391049f9c82.crl

            X509v3 Authority Key Identifier:
                keyid:EC:FD:C8:EB:B2:36:F3:BB:96:DA:C4:64:EB:92:D9:A9:A9:F7:13:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f81bacd8-f7d9-47d7-aa24-5391049f9c82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:76c0:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:6d:e7:ac:72:68:7b:3a:b0:d0:93:f4:f3:7d:c3:e0:d9:19:
         61:63:33:f6:7b:f9:78:8d:43:57:8c:f6:73:c5:ec:a2:4d:96:
         bf:26:13:d4:25:0e:44:36:38:dc:e5:34:c9:a3:e2:fa:64:ef:
         6b:51:a1:25:79:22:fa:d1:b5:c2:90:0f:0f:28:a9:78:49:09:
         7f:c5:b1:c6:c4:aa:64:44:c7:d4:52:c1:ca:e9:e4:14:ac:19:
         d1:22:b3:53:f6:6d:c6:a9:ce:d0:75:b6:9c:86:16:33:f3:a7:
         d2:03:29:0f:cc:d0:79:3b:b9:2d:72:a4:fe:39:3e:51:36:e0:
         ad:5d:15:3a:98:a8:76:8f:c3:98:82:96:26:97:95:b5:7b:27:
         bd:db:ad:10:e1:d7:bc:8d:88:74:2b:45:97:ba:9e:d0:a0:46:
         5f:83:0c:b0:c3:39:c8:d5:2f:55:d3:94:44:b8:dc:e0:f1:f7:
         69:a1:0c:88:93:7e:f5:8e:b0:0b:cc:eb:ad:26:e5:20:d2:fa:
         1d:c6:69:f4:20:8c:da:92:6c:ec:f3:21:f9:ed:99:f4:e9:33:
         98:b6:29:bf:ce:d0:ea:98:70:b6:7a:c9:63:6d:b5:42:25:76:
         69:16:62:dd:63:7f:01:ad:46:b5:5a:73:c5:40:96:df:fe:20:
         2b:fe:f5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:59 2026 by rpki-client