Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a877029f-c496-3ede-9018-6b361c7fcc8e.roa
File:                     a877029f-c496-3ede-9018-6b361c7fcc8e.roa (raw, json)
Hash identifier:          LookUHfB3S5P19U+ZAFU3jJpsWjk1pmPsCtqdFpE0sk=
Subject key identifier:   8D:11:63:E5:82:DF:B6:E8:DC:03:86:8E:38:C2:8D:9D:D7:26:F8:EF
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584DA6B02F844CC25C7A8D19C788
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a877029f-c496-3ede-9018-6b361c7fcc8e.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     13445
IP address blocks:        2607:fcf0:1300::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:2f:84:4c:c2:5c:7a:8d:19:c7:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=5af212c7-adf7-4e8f-a69e-d1b63e0ebded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:2d:d9:05:f3:bb:64:a2:e6:e5:f3:a8:2d:
                    21:6c:f7:d1:15:d9:8d:18:b1:e4:18:90:8f:54:ba:
                    f6:d2:42:cf:c1:29:ae:f5:6c:65:e1:d8:c1:93:f2:
                    5d:db:1e:a8:37:0f:bc:a6:5c:0d:e8:4b:b6:4d:b7:
                    b5:ce:4a:78:e7:c0:65:6b:35:fa:85:a4:0a:de:96:
                    4c:0d:49:47:c9:84:15:98:14:98:b6:0b:1d:5a:af:
                    9a:01:e2:c4:ff:17:07:1a:20:9c:5a:7a:aa:16:1b:
                    90:3b:59:35:4e:63:a2:05:e6:2c:d4:52:0d:57:f4:
                    e2:87:6c:b7:92:b2:65:85:e6:0e:fc:1b:35:62:2a:
                    b8:2d:32:ca:3c:a6:40:c5:9c:9f:b3:a4:f4:2b:78:
                    20:e5:29:26:2d:36:bf:77:72:e3:83:15:0a:f5:96:
                    38:a3:c1:de:2d:43:18:69:04:ab:37:ff:01:9f:c4:
                    89:e9:03:36:58:ca:ca:4c:e5:ff:64:fc:39:0b:81:
                    8a:ab:83:70:4f:d5:53:e5:bb:a3:e0:c5:e5:6f:78:
                    22:14:e3:5c:18:25:64:76:e9:77:fb:77:40:77:eb:
                    bb:bb:58:20:12:4e:52:5d:71:78:92:dd:a9:71:2d:
                    81:66:18:a3:af:07:a4:77:6f:f3:ee:39:0f:19:59:
                    9a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:11:63:E5:82:DF:B6:E8:DC:03:86:8E:38:C2:8D:9D:D7:26:F8:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a877029f-c496-3ede-9018-6b361c7fcc8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:1300::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:35:12:42:91:57:11:f9:79:11:06:02:41:df:75:af:30:cc:
         06:47:2f:01:d5:6a:7c:3d:44:86:49:0f:fd:e4:e3:5f:aa:ac:
         7d:2f:49:07:64:ad:ad:db:41:ab:d0:3f:9b:74:58:ef:39:d5:
         dc:1d:25:8f:f3:06:d0:8a:e4:4d:ca:b1:32:03:c3:a7:d8:df:
         f8:76:00:3d:c8:ff:6f:e7:f6:2d:b7:fb:0a:d4:8e:0e:fa:cb:
         a8:7e:bb:01:57:c2:3a:ca:a2:6c:f0:8b:c6:cf:c4:86:ce:c2:
         dc:8e:c2:76:0e:60:9c:f9:93:23:60:e8:82:b8:0b:07:01:5f:
         35:63:dc:cf:96:96:7f:f7:fb:50:4b:44:46:f4:9b:49:39:b8:
         13:26:2d:f8:e5:55:a9:18:b2:e7:ef:d1:1a:15:ea:41:5e:5c:
         1c:d3:0c:18:9f:87:a8:b5:13:20:f9:76:07:64:38:e0:b9:a7:
         6c:90:e1:18:1f:ca:48:93:ce:bf:4a:f4:bd:b8:14:5c:79:89:
         61:76:c6:cc:83:f4:78:3d:9c:5e:64:f6:fb:7d:e9:42:3f:47:
         86:dc:c6:82:c8:3a:df:a2:73:71:81:9f:61:68:74:ea:fc:aa:
         83:ac:3d:ad:b6:77:aa:ef:b5:74:60:6d:67:8f:fd:8b:63:9b:
         c0:c6:51:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:55:39 2026 by rpki-client