Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/016c33c5-f7a4-3d55-8ba0-2a26fe4e69d8.roa
File:                     016c33c5-f7a4-3d55-8ba0-2a26fe4e69d8.roa (raw, json)
Hash identifier:          5KO8euPFsUWOQJzuaowis3Z6xDhZY1XyhrC/HLeE9vU=
Subject key identifier:   70:99:D2:4B:85:8D:AC:EC:00:E5:57:53:25:B4:56:02:BE:3B:A9:A3
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584DA6B01B53EB9E0F9F057E6F80
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/016c33c5-f7a4-3d55-8ba0-2a26fe4e69d8.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     13445
IP address blocks:        2607:fcf0:1900::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:1b:53:eb:9e:0f:9f:05:7e:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=3e2afee8-7a74-4c42-8eb1-e54fe4d8534e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6b:2d:85:9a:1d:34:c4:90:d2:51:0d:ef:2d:
                    50:89:c8:80:d7:23:d5:c8:01:b3:8c:cb:e1:71:86:
                    f5:d1:6b:79:2c:a0:da:02:18:a6:3f:52:1e:91:04:
                    b4:22:23:23:a2:69:fe:c1:73:9f:10:7e:78:9c:30:
                    79:8d:47:6f:54:04:9c:d0:86:c5:62:ca:86:87:5f:
                    f9:54:a8:56:f9:7f:d0:0f:ca:e3:38:66:5c:ec:68:
                    97:30:73:e0:c5:5e:b7:5e:ea:5b:63:99:a7:cd:92:
                    9f:6b:cc:e0:dd:27:cb:94:1b:6e:38:57:e7:50:42:
                    3b:b5:fc:6e:87:14:2f:67:1f:8e:9c:05:82:57:96:
                    f7:e6:91:bd:54:d1:2c:e3:87:34:97:07:d7:6b:02:
                    70:81:31:09:f9:0c:3d:67:a9:a1:dd:d7:da:2d:9a:
                    21:c9:bd:93:2e:fd:21:fc:f2:39:3c:c1:82:b7:f7:
                    dd:73:03:b0:61:45:fd:03:bd:24:70:58:6e:43:44:
                    fc:b4:c9:71:0f:f6:43:a1:7e:59:ca:e2:f2:5d:24:
                    cf:51:5d:95:db:c1:3a:ff:4c:b7:8a:ac:90:fa:41:
                    0a:c3:69:93:63:76:3b:98:e3:9f:4a:30:9e:66:82:
                    fd:f3:2b:85:58:8d:bb:c1:a1:9f:11:d3:34:fe:0a:
                    a0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:99:D2:4B:85:8D:AC:EC:00:E5:57:53:25:B4:56:02:BE:3B:A9:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/016c33c5-f7a4-3d55-8ba0-2a26fe4e69d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:1900::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:f9:ce:be:c9:62:ea:97:fd:07:ac:57:ba:76:5e:d0:84:97:
         0e:c5:fb:c0:ad:f3:a7:14:75:e1:8f:44:8b:3a:67:dc:9c:a3:
         26:65:a9:9a:e5:e6:0f:26:ee:62:f0:dc:1f:5c:60:fb:32:30:
         3e:e8:98:38:93:5c:90:a7:fc:8d:af:bf:da:f8:12:49:65:dc:
         53:d1:50:44:db:30:fe:44:9a:5f:f1:28:60:bb:8d:fb:85:f8:
         ea:48:1b:c2:46:8d:7f:f4:5c:38:88:0f:45:16:59:6c:05:07:
         c0:b7:10:75:bb:e8:04:34:7c:05:1a:25:f9:43:12:6c:f0:57:
         98:be:ea:55:08:ae:6a:14:08:dc:88:eb:ed:92:4f:27:df:3f:
         95:c6:eb:70:f4:02:77:98:af:cd:bb:0b:d3:75:54:98:2d:e3:
         35:9e:fa:34:bd:da:12:44:55:aa:60:f9:7f:b9:03:9a:83:7b:
         90:8c:e7:9b:06:2b:52:8b:e4:8b:2d:f9:a6:22:28:4d:28:5a:
         e3:7b:cd:a7:be:37:c0:a1:96:03:20:34:e8:4e:7f:38:d2:61:
         6b:65:e1:c9:66:02:ec:6c:9c:85:8a:7a:9c:a1:21:dc:87:72:
         e2:9f:75:62:c5:60:8c:1f:0e:5b:04:7d:50:f2:2f:44:ad:36:
         1a:1f:b6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:01:33 2026 by rpki-client