Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/773d7fb0-90d0-3807-b84a-14113ab2c4b8.roa
File:                     773d7fb0-90d0-3807-b84a-14113ab2c4b8.roa (raw, json)
Hash identifier:          Yp5h0AAgO3JnHx+dEN42v5H78rii+a/jHtF3tan/sak=
Subject key identifier:   70:97:1D:54:41:E9:4E:5A:23:B7:09:84:52:9B:D4:61:09:59:D2:45
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B0E4167311CC76958A1F4F400
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/773d7fb0-90d0-3807-b84a-14113ab2c4b8.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     23473
IP address blocks:        2607:f750:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:67:31:1c:c7:69:58:a1:f4:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=6ef6c14c-b955-44a9-a55c-68e539716ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:ed:e8:2c:15:38:77:2b:0f:e4:c7:cd:d2:
                    96:4c:63:ad:a2:62:79:56:20:f8:b9:75:ca:5b:2c:
                    f5:2b:ea:95:e0:64:2e:d4:95:5c:5b:8d:53:65:fa:
                    8d:4d:0f:74:46:d8:85:34:1d:63:f0:b8:f8:66:a2:
                    49:a5:7e:2d:83:83:c6:1b:35:2b:6b:b5:f0:7c:3c:
                    f3:69:75:0b:7c:c6:da:2b:59:47:a9:c0:5f:32:b1:
                    a0:26:f0:7e:75:f6:bb:1f:6f:77:cd:12:5b:63:6f:
                    63:d0:04:e4:06:02:55:8f:77:30:2d:c0:98:3d:fc:
                    d1:40:4b:18:69:76:76:b9:9f:08:ce:1b:a3:a9:8c:
                    1c:d7:ad:9c:43:83:44:d4:c3:01:a5:58:9e:44:8d:
                    1e:2d:ab:ed:67:04:b5:be:80:5c:5a:09:3f:9e:2c:
                    b7:72:03:16:bb:e0:27:38:4c:45:de:75:16:51:78:
                    3a:10:b7:f5:3c:03:b4:7f:c2:09:c7:0f:20:49:97:
                    17:0c:06:ed:8e:c6:62:16:b7:16:94:d2:ad:f9:05:
                    d6:6b:73:8b:cd:9e:6e:22:8d:25:4a:be:b3:83:0c:
                    d2:fc:4a:5c:66:cb:5a:45:97:78:f8:34:8d:a9:f8:
                    64:9a:00:21:fc:0c:85:2d:81:7a:87:97:48:cf:77:
                    9f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:97:1D:54:41:E9:4E:5A:23:B7:09:84:52:9B:D4:61:09:59:D2:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/773d7fb0-90d0-3807-b84a-14113ab2c4b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:6000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:17:ea:44:c2:54:51:ed:94:a4:93:89:11:af:61:a3:e0:fe:
         a3:1a:f4:ce:d5:fe:b6:b7:4b:fb:fe:bd:18:66:4b:7f:81:84:
         43:e2:6e:7e:18:5f:0c:ba:23:76:c5:a7:42:00:1f:4b:7d:11:
         ac:8b:a7:c4:01:2d:6b:d1:82:c0:93:98:b8:fe:f7:22:ce:a6:
         1a:c8:54:7d:1f:18:6f:93:f0:bb:b5:ae:22:a9:9d:99:e4:4a:
         b1:e6:26:87:e0:8f:ad:5c:2d:5d:ce:22:c8:8e:fe:05:c1:e6:
         68:61:25:d9:f3:3a:27:ba:16:ae:95:14:8b:8c:ad:07:52:1f:
         a5:74:db:a0:a0:bf:5d:c4:a5:e4:96:c0:81:74:89:99:3f:30:
         6c:7d:b7:12:12:b1:b8:3e:3b:6b:e0:da:92:17:8d:71:fb:a0:
         31:a3:75:b1:fa:07:49:27:00:0e:d3:d0:a5:ba:50:60:b2:0b:
         3b:30:71:3b:bf:fc:6a:fd:6a:44:1e:46:26:2e:8c:a3:c3:ac:
         6c:3e:19:43:e4:2f:36:81:a2:8e:0c:94:b9:95:4f:a6:18:c8:
         b5:39:c5:ee:18:a5:38:03:c7:fe:60:50:33:c1:58:03:ea:11:
         63:1c:84:a7:3d:74:23:f5:80:e8:52:21:64:c4:ee:ff:19:4c:
         0f:c4:6e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:57:14 2025 by rpki-client