Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8f629efd-e098-3f71-8aa1-1f37fc392af3.roa
File:                     8f629efd-e098-3f71-8aa1-1f37fc392af3.roa (raw, json)
Hash identifier:          QMtGoAitNWq6biAHWCoWQq2fyiVkxluliz+UOf/DGQ0=
Subject key identifier:   BB:66:FA:FD:21:DA:A7:50:FF:53:01:3D:D5:C5:82:6D:C3:18:EB:3B
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584DA6B02CE758AC1F4E47FD2558
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8f629efd-e098-3f71-8aa1-1f37fc392af3.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     13445
IP address blocks:        2607:fcf0:2300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:2c:e7:58:ac:1f:4e:47:fd:25:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=18721d96-5323-4d0e-a934-7a0e9505b6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:84:7f:f8:27:4e:51:47:8c:f2:dc:7e:b0:
                    43:96:5e:5a:8d:90:ee:98:91:df:65:df:11:3e:69:
                    8c:63:6c:6c:30:5a:e5:0c:f9:34:69:11:7a:8a:08:
                    0e:d3:f2:22:9b:3c:f9:73:a7:c9:a8:1c:c9:e0:0f:
                    bf:46:e7:4a:35:90:78:28:3c:b2:a1:85:74:8a:f9:
                    90:3a:a6:12:41:d3:69:29:2c:a7:5b:25:cf:c1:76:
                    35:03:f5:e3:40:b2:a5:8c:24:f6:4c:79:77:3a:90:
                    bb:7b:88:63:9d:18:5d:05:6a:a7:cc:22:1d:9f:bd:
                    cc:49:68:ae:54:a3:83:df:cb:87:ee:02:ba:85:c4:
                    f5:dc:47:d6:9e:85:cc:cb:e5:34:d9:d0:e6:4b:b8:
                    8e:bc:e5:82:b4:da:fb:a8:f9:75:09:ac:04:1e:40:
                    f1:df:20:3e:e2:58:36:57:84:fe:4d:2a:3b:38:b8:
                    56:2d:e1:98:c7:8b:a8:ef:dc:e6:4a:f3:95:0c:25:
                    2f:21:d8:3c:fe:39:8f:c5:a6:76:7a:2f:01:be:84:
                    2a:e8:6e:2e:ee:a9:65:e0:8e:b7:db:95:71:87:86:
                    ca:2c:c1:78:2e:70:cb:73:e3:a4:8b:bc:63:08:dc:
                    ce:11:ae:9f:32:37:93:bf:45:0c:63:4b:57:4f:16:
                    72:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:66:FA:FD:21:DA:A7:50:FF:53:01:3D:D5:C5:82:6D:C3:18:EB:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/8f629efd-e098-3f71-8aa1-1f37fc392af3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:2300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d3:9d:e9:fd:ce:26:44:3e:69:fc:da:02:cc:bf:c9:67:4d:
         35:77:66:2e:f8:75:26:c7:a8:74:25:a8:be:88:d8:5b:50:1c:
         91:a2:c8:89:60:3b:88:e6:fa:f5:f6:e4:54:9b:ba:b4:4b:1e:
         b1:d2:8a:64:00:64:ca:4c:f0:c4:e7:1c:f6:e2:21:04:24:ec:
         fb:40:3e:84:3f:a5:6b:06:da:eb:e6:24:af:5f:3f:ef:6e:02:
         ff:28:1d:ff:ad:02:4a:3c:b7:cd:bc:3f:be:2c:2d:cf:62:d1:
         6b:8d:0a:ce:c4:62:b4:d8:8d:0e:1a:05:1d:4f:ff:43:81:85:
         76:b0:9e:e2:0b:03:42:3f:d6:3e:05:5a:10:c3:c5:c8:a6:68:
         b6:fe:36:7d:03:1b:d0:4b:9c:a6:3b:2e:62:7d:63:5a:9c:ac:
         a6:8e:24:30:a7:c8:cf:00:02:54:a7:9c:c7:a1:20:92:a2:51:
         74:b8:6c:70:29:35:0f:21:13:44:88:31:20:45:2e:af:49:22:
         b1:f0:ee:18:4e:eb:54:d8:26:e4:be:4e:6d:4c:97:8e:1c:5d:
         d7:cb:46:72:7c:0a:11:41:a4:c5:b0:3c:73:94:1d:87:97:91:
         68:26:a5:1d:08:7f:bf:21:35:9c:6d:5d:2b:31:b5:3e:10:b0:
         eb:f0:4a:8f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msCznWKwfTkf9JVgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5
ZGRmMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk
MTg3MjFkOTYtNTMyMy00ZDBlLWE5MzQtN2EwZTk1MDViNmE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk+Ef/gnTlFHjPLcfrBDll5ajZDumJHfZd8R
PmmMY2xsMFrlDPk0aRF6iggO0/Iimzz5c6fJqBzJ4A+/RudKNZB4KDyyoYV0ivmQ
OqYSQdNpKSynWyXPwXY1A/XjQLKljCT2THl3OpC7e4hjnRhdBWqnzCIdn73MSWiu
VKOD38uH7gK6hcT13EfWnoXMy+U02dDmS7iOvOWCtNr7qPl1CawEHkDx3yA+4lg2
V4T+TSo7OLhWLeGYx4uo79zmSvOVDCUvIdg8/jmPxaZ2ei8BvoQq6G4u7qll4I63
25Vxh4bKLMF4LnDLc+Oki7xjCNzOEa6fMjeTv0UMY0tXTxZy5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLtm+v0h2qdQ/1MBPdXFgm3DGOs7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk
MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvOGY2MjllZmQtZTA5OC0z
ZjcxLThhYTEtMWYzN2ZjMzkyYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy
NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3
OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3
MDRkNzlkZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgf88CMA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF3Tnen9ziZEPmn82gLMv8lnTTV3Zi74dSbHqHQlqL6I2FtQHJGi
yIlgO4jm+vX25FSburRLHrHSimQAZMpM8MTnHPbiIQQk7PtAPoQ/pWsG2uvmJK9f
P+9uAv8oHf+tAko8t828P74sLc9i0WuNCs7EYrTYjQ4aBR1P/0OBhXawnuILA0I/
1j4FWhDDxcimaLb+Nn0DG9BLnKY7LmJ9Y1qcrKaOJDCnyM8AAlSnnMehIJKiUXS4
bHApNQ8hE0SIMSBFLq9JIrHw7hhO61TYJuS+Tm1Ml44cXdfLRnJ8ChFBpMWwPHOU
HYeXkWgmpR0If78hNZxtXSsxtT4QsOvwSo8=
-----END CERTIFICATE-----
Generated at Wed May 13 04:12:26 2026 by rpki-client