Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8c47cb54-1e35-3e95-bba2-00365cff63f3.roa
File:                     8c47cb54-1e35-3e95-bba2-00365cff63f3.roa (raw, json)
Hash identifier:          VHnJy2l0l89kxnUIEwpnDqBDYiTnnXL1zT+Rz2ckm/w=
Subject key identifier:   69:91:B6:4B:43:2E:21:F0:52:FF:AF:35:BC:A4:B5:E1:83:51:69:43
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584F2957B83214C9D43AFF013F80
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8c47cb54-1e35-3e95-bba2-00365cff63f3.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     13445
IP address blocks:        2607:fcf0:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b8:32:14:c9:d4:3a:ff:01:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=aecd66ae-b293-4867-b964-feaf0f08c122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:51:c1:c5:84:28:87:94:cc:b1:a9:c4:c3:c4:
                    ac:b4:77:cd:6b:fa:52:bd:06:00:df:15:8e:d0:cf:
                    2c:77:ad:3c:2b:33:3a:f9:0a:59:8a:80:d0:14:0d:
                    9a:b2:60:42:6d:55:db:dc:20:2c:a5:df:a7:d2:e3:
                    81:bb:9b:2c:69:6a:17:f6:6f:d3:d4:2a:e7:aa:42:
                    69:77:de:e0:69:a4:f1:5b:d4:91:d8:fd:e9:53:60:
                    d3:2a:b9:70:ed:aa:b2:50:d4:4e:bd:24:cf:3f:51:
                    5f:74:52:1f:7e:0d:af:32:73:07:c1:14:13:8a:f9:
                    f1:5c:47:8d:e0:1b:2a:66:4c:b2:eb:9e:e8:2c:ff:
                    59:38:24:fa:c2:73:9e:c0:c9:21:e8:d7:f8:e9:05:
                    42:66:bb:fb:f6:7e:04:7d:e9:f9:34:ab:3f:5d:fa:
                    7d:11:5d:e4:4f:74:cc:2b:64:23:e2:1f:eb:84:0c:
                    7d:e9:32:d9:62:a8:b6:93:32:20:ab:a5:1a:b9:45:
                    3b:75:b4:03:cc:00:92:01:58:74:a4:a6:c9:f6:31:
                    ac:61:e3:9c:d1:5f:50:99:ab:3e:ff:0e:b1:ce:a3:
                    5b:40:3c:74:b2:85:ed:aa:b6:eb:d1:29:f5:6c:7f:
                    7e:c6:da:57:48:9c:ce:2b:7e:e9:94:33:6a:a4:f1:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:91:B6:4B:43:2E:21:F0:52:FF:AF:35:BC:A4:B5:E1:83:51:69:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8c47cb54-1e35-3e95-bba2-00365cff63f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:48:4f:57:c6:77:08:77:5e:74:ee:e8:10:a7:b5:3d:b7:d5:
         10:7f:74:b5:b7:29:eb:6c:08:0a:1f:68:6e:81:62:52:c0:62:
         de:48:9f:47:28:19:c1:53:a7:1a:da:1d:d5:35:cb:05:12:f9:
         76:e5:6e:ce:41:84:77:59:11:a0:4b:98:53:5a:bd:b8:b3:60:
         d9:fb:f2:aa:95:a7:09:8a:f9:b6:74:e9:40:a7:d4:37:c8:46:
         04:3a:2e:53:72:6e:28:ab:da:53:bc:4d:64:41:78:1c:1e:50:
         e7:21:5e:15:0d:7b:83:37:10:f6:19:e3:21:ec:f3:cc:db:af:
         49:e2:55:c8:2f:b1:b1:c8:29:11:14:fc:75:91:0d:40:30:63:
         6d:69:15:d1:bb:6c:f0:f6:44:21:bc:49:74:db:a5:db:01:f9:
         cb:c3:a0:c1:65:f7:13:cb:8b:b0:24:f5:25:28:ef:24:08:61:
         90:42:25:50:b1:08:45:97:70:26:92:26:7e:22:80:dd:18:80:
         21:ba:aa:86:a5:ee:c2:da:0c:bb:83:a8:57:a3:8f:42:01:52:
         ee:23:05:85:66:be:ed:75:82:4d:45:ce:2c:23:cf:c7:46:19:
         ae:33:22:82:f3:b7:71:42:ee:20:d6:68:b3:78:10:52:63:13:
         88:ca:ef:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:36:48 2026 by rpki-client