Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3095fd77-3a0d-3efb-a6fa-7ed3a01119fa.roa
File:                     3095fd77-3a0d-3efb-a6fa-7ed3a01119fa.roa (raw, json)
Hash identifier:          mb3ZLHLZ/apQBcBhSm5tmDhs9d+mipfwWuJpl8TgTc4=
Subject key identifier:   54:F4:58:66:5C:B4:E3:7E:70:AF:0B:04:CF:F8:AF:82:B5:BB:6E:18
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E428F27C5508E668049F5B6C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3095fd77-3a0d-3efb-a6fa-7ed3a01119fa.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:27:c5:50:8e:66:80:49:f5:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=614a018b-714b-44fa-a46f-7901f096a20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c3:94:3b:12:ac:ad:85:31:8c:f4:c9:86:07:
                    52:f5:7c:ab:df:6a:12:07:b2:39:6c:ba:e7:ed:e0:
                    d2:c8:14:0d:b2:32:87:f5:6b:f7:9f:15:49:29:8d:
                    67:22:48:01:e1:af:e9:84:14:0e:b0:c5:ce:13:9b:
                    bb:d6:e9:f7:d1:3e:83:fe:dc:32:cd:93:f1:04:51:
                    3a:c6:94:7e:6d:68:f2:04:0f:4e:42:dd:40:99:b0:
                    14:7f:c3:ef:0a:8c:7b:ef:d4:35:28:dd:4f:92:ba:
                    60:fb:4b:17:80:74:70:96:54:7a:d9:02:79:f1:11:
                    fb:74:41:1f:1e:68:7b:40:a3:28:e6:d2:9a:7e:24:
                    6b:ac:27:21:b1:5b:6d:1a:7a:6b:23:14:96:62:f3:
                    5d:4b:04:4f:5c:4b:c7:d9:bb:ee:0b:d5:1d:02:d3:
                    a2:d9:b4:2d:fa:ee:72:52:c4:10:33:28:10:eb:ec:
                    e2:4c:89:25:3a:f9:2c:67:83:c0:ad:b2:9e:60:13:
                    f9:19:d2:10:31:c8:82:b0:9e:ab:05:a3:15:71:03:
                    a1:7e:8b:0c:3b:8d:99:26:17:cd:fc:94:1d:c2:96:
                    f1:1c:86:17:70:bb:60:8b:aa:bc:25:a1:9d:91:80:
                    11:24:19:f0:d6:5b:f1:c8:93:43:4a:50:41:9f:69:
                    37:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F4:58:66:5C:B4:E3:7E:70:AF:0B:04:CF:F8:AF:82:B5:BB:6E:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3095fd77-3a0d-3efb-a6fa-7ed3a01119fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:8c:9f:d1:f6:e2:cc:9e:d3:8a:5c:8a:4c:87:39:a3:d9:bb:
         95:cd:e2:9f:e0:51:43:ed:38:2d:47:1e:ac:4a:15:a3:8c:93:
         85:d3:ab:df:d9:6b:70:00:5e:53:53:47:3e:ba:60:e8:62:d5:
         7c:1a:21:bf:96:03:6a:52:a0:ae:d9:ad:ec:13:74:95:e7:57:
         15:e2:34:58:c0:42:49:a7:62:c4:bc:c6:e5:d0:3a:a5:6e:26:
         ec:7b:c1:32:89:a4:73:1a:75:04:c9:aa:76:43:91:06:d6:b6:
         ef:c8:08:57:85:01:c3:c2:f8:fd:b0:a6:d0:56:6b:83:58:1b:
         96:2f:76:77:37:c5:0b:18:bf:c1:ce:44:0c:b4:3d:ea:85:37:
         76:a7:2e:d0:ba:08:a0:bc:2c:00:a4:10:55:73:e8:64:b5:ae:
         2c:b4:f4:8c:2a:00:c8:a8:45:8d:fa:fd:cd:66:b1:94:dd:c2:
         71:04:86:99:b8:0a:fe:f6:a1:67:31:78:88:45:5d:e6:59:c5:
         28:a8:c9:6a:b8:ab:cb:df:f9:90:ae:db:14:61:8b:28:0e:79:
         36:cf:f0:fc:ee:20:f7:c1:7d:b0:0c:ee:9e:fc:9e:02:9a:45:
         b4:c1:3d:53:03:ae:2c:47:c4:f9:bf:db:ff:1b:61:49:aa:df:
         b0:85:68:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 03:31:15 2026 by rpki-client