Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ac8305c1-7843-38fd-8ca4-cee1888f3fce.roa
File:                     ac8305c1-7843-38fd-8ca4-cee1888f3fce.roa (raw, json)
Hash identifier:          jAyh+pvCBPk7egu8fE2lWd7THaqLIy+R8/os+4qulH4=
Subject key identifier:   0B:C2:F4:6F:0D:D8:26:5A:BB:76:D3:46:FF:80:73:32:1C:F8:70:87
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584F2957B99A9A6FD8157F9EB080
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ac8305c1-7843-38fd-8ca4-cee1888f3fce.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     13445
IP address blocks:        2607:fcf0:1500::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b9:9a:9a:6f:d8:15:7f:9e:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=e0c32bb8-eb64-43f1-a63b-326d19e82797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ac:8c:b8:f9:68:25:8e:6e:49:e1:dc:52:93:
                    7a:3d:c5:03:8e:5a:76:0c:20:b8:37:2f:f0:1e:11:
                    25:67:d8:8f:f9:41:5d:d4:76:85:be:e7:26:a0:a6:
                    d6:78:37:46:11:6d:f1:bf:31:da:9f:c5:19:0f:2a:
                    76:22:e9:f9:4c:e4:7f:23:0c:fd:d7:b1:89:26:15:
                    eb:4a:e1:c4:e2:90:73:f6:f3:17:70:12:48:af:65:
                    75:b4:f8:f3:6b:d9:e8:77:9c:53:0b:69:eb:f6:fe:
                    94:8c:bc:42:22:9a:0e:fd:97:00:ae:10:af:8d:3e:
                    81:4a:98:9e:c0:43:b1:ad:10:33:95:7e:b3:6f:1f:
                    4c:23:af:d4:4a:6f:50:7c:ec:0b:76:24:4a:ec:c6:
                    a5:e5:3e:c1:d1:6f:c1:56:d8:2b:48:1d:c3:44:4c:
                    cb:8d:59:c3:03:3e:f2:17:cd:a4:23:15:ad:0f:44:
                    1d:5e:08:98:f1:85:d2:85:a5:ef:3f:27:22:1c:f1:
                    9c:c9:71:71:30:7d:10:af:d0:25:05:51:b2:e9:2b:
                    3d:71:9b:60:70:34:d3:6d:04:27:0d:27:4c:b0:73:
                    50:a4:99:d2:a6:16:41:3c:28:f4:25:11:bd:87:ef:
                    2b:71:c2:05:0d:11:d9:de:1d:07:db:d8:4f:0c:53:
                    86:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C2:F4:6F:0D:D8:26:5A:BB:76:D3:46:FF:80:73:32:1C:F8:70:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/ac8305c1-7843-38fd-8ca4-cee1888f3fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:1500::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:97:ff:30:1a:7d:a9:00:7c:9c:ba:a8:de:7a:6c:fd:6f:e3:
         1d:e8:0d:8a:19:28:01:b8:f4:1c:d7:b9:72:a6:6d:36:83:d1:
         31:3b:a3:8d:2d:31:a2:c4:52:a0:fb:4b:a9:3d:c7:21:00:a4:
         11:ef:db:94:bd:21:44:61:34:3b:67:4e:6b:84:b7:78:8b:1e:
         28:3e:90:3e:dc:2c:7d:30:f4:d5:94:84:f5:0a:18:21:49:e7:
         7a:1c:7e:9a:7a:0f:a9:33:5a:d1:2e:53:a5:f1:63:7a:6a:1b:
         cb:87:12:c5:17:23:8e:82:fb:4b:8e:46:66:1f:b3:38:76:56:
         3c:aa:3b:4b:9e:a5:a4:51:b0:1c:8b:06:d0:c3:08:f6:e6:eb:
         53:57:f8:be:89:16:83:63:35:a2:a2:e6:d6:0f:b3:36:4c:72:
         43:34:11:48:0c:fe:5a:33:48:ad:6f:da:7f:8c:14:f8:eb:d0:
         bb:22:68:6e:0e:50:cd:41:12:04:08:07:28:44:e3:69:b3:a7:
         df:ab:db:76:1c:30:b5:f7:79:b8:1c:3b:31:b0:cb:f2:ea:5a:
         66:2d:d5:51:73:6c:4a:37:db:ad:59:41:ab:72:8e:8b:64:f9:
         3b:75:d7:c8:bb:7c:16:60:a1:02:61:06:41:b7:09:1f:d3:2e:
         65:1b:3a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:48:37 2026 by rpki-client