Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2e89084b-bbae-33ed-ae01-08d46d824a06.roa
File:                     2e89084b-bbae-33ed-ae01-08d46d824a06.roa (raw, json)
Hash identifier:          6+J+AR+xCw9n4xpyZOCkzmaEZARdRxySUS+2FPLpMbE=
Subject key identifier:   A9:5B:0D:56:B9:30:AE:77:7A:E1:9E:F5:BC:C2:D3:84:8A:D4:B8:DA
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D1B19EAC6896B5527A926AA00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2e89084b-bbae-33ed-ae01-08d46d824a06.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        2607:f750:906c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:ea:c6:89:6b:55:27:a9:26:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=3c5e5c4d-c692-4e32-ba3b-474ffb247f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:3b:64:4c:64:65:8e:4c:40:92:30:2b:2f:
                    5b:81:d2:99:78:0a:70:b6:87:c9:27:86:c2:b2:95:
                    93:72:8f:e0:09:b7:af:e2:34:9e:4e:76:93:e0:0b:
                    81:51:d8:82:c8:7b:bd:3d:93:0b:1f:09:0d:7f:b2:
                    b0:8d:5a:ee:e3:db:d3:04:ff:9d:ab:a3:fd:0a:31:
                    ae:2b:d7:57:76:5a:85:6a:c8:70:0c:53:ce:20:96:
                    cc:e1:bc:4b:68:a5:f4:21:78:37:20:fa:0b:f7:8d:
                    46:f4:bb:c4:a0:7f:a7:16:a1:ac:63:07:b1:db:22:
                    4d:55:26:53:14:fe:5e:0a:08:c8:9d:3b:08:38:0f:
                    c3:2a:65:bb:b2:e1:23:6c:ba:67:7b:e2:27:47:3e:
                    4d:c9:79:8c:0e:32:5c:02:de:b5:53:85:93:a5:ef:
                    2d:ba:24:bb:6b:f5:cd:ea:d8:03:2b:a6:7d:68:92:
                    ac:7f:0f:05:bb:8f:17:f0:15:cf:e1:31:5c:44:50:
                    cc:71:e3:f7:01:ca:f7:10:89:fd:28:cf:7b:47:5c:
                    d7:51:df:e1:5d:67:49:46:0f:7e:54:55:0c:cd:05:
                    3d:3a:5b:1b:55:b6:a9:8f:22:40:17:5f:bc:d8:60:
                    e0:eb:f9:7a:32:3d:c6:a8:46:a0:fc:4b:92:d9:5a:
                    b5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5B:0D:56:B9:30:AE:77:7A:E1:9E:F5:BC:C2:D3:84:8A:D4:B8:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/2e89084b-bbae-33ed-ae01-08d46d824a06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:906c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:67:a9:b6:e0:5a:1b:98:f1:bf:c9:8d:51:11:a4:24:92:bc:
         db:8f:ed:f9:ee:d7:c4:ee:e8:0f:f1:13:21:f1:d0:89:b9:a7:
         bf:b4:06:9d:42:30:15:b9:d0:8c:ec:56:28:1a:6a:de:c1:46:
         2b:1a:d9:79:5a:9f:eb:76:d8:a6:72:af:a4:69:7d:d8:24:90:
         58:cb:fe:e3:42:91:c3:5a:c2:51:75:95:21:d3:b3:38:6a:4a:
         83:e0:11:81:bb:cb:09:36:09:90:8f:d1:ce:95:64:76:2c:a4:
         2d:4d:19:60:fc:ea:b4:25:8a:50:f6:c5:22:0a:69:c6:97:16:
         4f:d2:80:9c:04:b7:a2:47:ed:33:ce:df:fa:f5:eb:25:be:58:
         89:fc:bb:09:91:f4:f6:42:81:5b:ab:9a:9a:1d:48:da:3b:fa:
         60:1c:6c:02:61:7c:44:62:86:ca:a6:c8:da:89:94:64:b4:c1:
         c8:a1:39:a8:02:c8:54:9a:ab:cd:9d:b6:67:9d:8c:b4:d3:55:
         ec:fb:9a:fa:98:aa:04:6b:4d:8b:df:17:22:06:84:5e:17:bf:
         c7:10:7f:11:dd:89:83:69:3f:b9:eb:3b:93:6b:7c:a7:6e:e2:
         03:38:52:52:ae:93:c8:47:dc:71:ee:5c:11:f1:36:93:7e:a0:
         cb:8b:3c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:52:31 2026 by rpki-client