Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a715bdea-445b-3b2a-9c1c-11b2e25ad236.roa
File:                     a715bdea-445b-3b2a-9c1c-11b2e25ad236.roa (raw, json)
Hash identifier:          7P/3Mu0S0aSVXbnH1N3uGIDpyGw5382Y4052oHCwSt4=
Subject key identifier:   94:7D:2B:54:CA:9F:07:61:7C:FA:F0:45:E4:F6:B3:9A:D4:3B:63:C1
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E428F1CB110CBD22306AEA380
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a715bdea-445b-3b2a-9c1c-11b2e25ad236.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:1c:b1:10:cb:d2:23:06:ae:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=fe0d776b-7f9c-4eae-8f45-ca3746513ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:62:18:ac:a4:13:ca:6c:74:29:bc:d3:66:44:
                    f1:9b:5b:36:64:5c:af:a8:7d:92:e8:b0:cc:07:68:
                    88:cf:14:84:17:0a:f6:dc:27:66:ad:a3:86:38:d4:
                    21:7b:3b:03:06:64:5d:49:3f:7c:ad:71:40:46:a8:
                    d0:c3:39:2b:53:0a:ee:13:ec:99:c6:d6:58:b1:ba:
                    b9:38:ca:1b:d7:ce:7c:41:24:6e:c4:4c:53:4f:3c:
                    04:5c:d3:f9:3a:7b:e7:43:32:86:60:10:04:3a:8b:
                    57:e2:85:57:f5:74:a5:01:7f:1d:2c:85:cc:82:9a:
                    9a:97:70:c4:66:5f:17:c7:86:e0:e9:ef:79:54:ce:
                    81:66:db:6c:18:87:ef:02:c3:80:01:f7:61:1f:8b:
                    88:50:f9:fa:63:76:9f:9c:43:d9:4f:fb:2b:1c:f6:
                    58:cb:6f:1f:a3:d6:11:a7:82:85:c1:93:ef:37:b9:
                    e0:c0:59:ed:74:4f:44:44:c6:a0:76:89:08:d7:0f:
                    e8:27:a7:21:c3:3a:fb:7f:5d:6e:f1:80:f3:4b:ef:
                    84:ec:9d:81:e5:4e:5b:df:c6:30:71:e2:5a:5d:78:
                    50:5a:7e:11:fa:9f:f6:62:87:f5:4c:23:f0:66:86:
                    92:b2:7a:af:45:60:be:85:d4:8c:0c:5a:92:82:96:
                    f3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7D:2B:54:CA:9F:07:61:7C:FA:F0:45:E4:F6:B3:9A:D4:3B:63:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a715bdea-445b-3b2a-9c1c-11b2e25ad236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:0d:b2:f4:e7:98:ba:40:0a:72:98:48:01:a3:84:5d:a2:81:
         0d:e0:60:a8:fe:10:93:99:bb:cb:92:ff:3c:4a:11:d7:36:0c:
         75:3f:78:dd:30:c2:d0:9c:23:2e:18:e9:da:ad:54:da:4f:57:
         ff:61:5f:e7:4f:1b:5f:fa:12:45:c9:27:02:1b:35:af:46:88:
         8a:51:22:de:da:99:3b:68:a7:db:bc:29:90:6b:2d:ee:16:2a:
         91:0b:3c:5c:ce:8a:fe:45:e4:48:98:1b:55:7d:0e:c0:cc:c6:
         05:f7:83:8f:3d:9a:c6:b4:80:4a:1e:f8:8c:d1:0f:8c:a9:9d:
         76:c1:1d:b3:32:46:07:2a:45:48:29:bd:0f:29:82:75:10:40:
         e4:b4:a2:db:ee:43:1e:e3:19:26:6f:71:1a:e9:7b:9b:e8:45:
         4c:a4:e9:30:dc:e9:f4:83:60:a0:6a:a1:2c:b4:a3:22:0b:1c:
         5d:11:ad:d4:40:12:10:cf:b6:46:6f:74:9a:08:5d:0f:ad:1f:
         5b:65:84:61:be:fb:a3:aa:29:37:d1:aa:f6:ba:ea:7e:a1:ad:
         10:11:10:0e:a0:1e:92:16:36:03:fa:71:d4:69:24:10:63:08:
         0a:f3:c0:1b:8a:12:1c:7c:5c:f8:af:95:71:ba:04:e1:e5:ca:
         2e:38:2e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 03:31:58 2026 by rpki-client