Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c0b3cf56-6277-3d22-8721-823b8d83b6e5.roa
File:                     c0b3cf56-6277-3d22-8721-823b8d83b6e5.roa (raw, json)
Hash identifier:          D2ac6b5Lm9evq5RheWmlJ/5Z+LN6nsEnQOV/+Z992tQ=
Subject key identifier:   B8:86:46:4B:5C:A9:B4:5C:18:0C:C3:8F:37:FD:62:7F:66:58:3D:8E
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E428F2596F72E5EA738371000
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c0b3cf56-6277-3d22-8721-823b8d83b6e5.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:2b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:25:96:f7:2e:5e:a7:38:37:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=b5f7134d-8e1d-4c44-8b18-54303a855f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:59:6a:5d:d1:30:35:b3:e5:93:16:34:2a:39:
                    ec:fd:ef:2e:ff:32:3a:6c:9c:67:c0:52:ab:82:91:
                    7d:e5:30:ad:dd:d5:67:a8:af:42:ba:6d:97:e8:eb:
                    5f:15:ed:b9:4b:f5:01:bd:ce:bf:ae:38:93:ca:63:
                    99:31:36:7f:71:d1:25:d1:54:ca:aa:ff:44:be:e9:
                    d4:c9:5b:db:65:de:13:ca:36:5a:d2:51:9c:d2:3a:
                    55:01:84:00:eb:78:72:ac:d3:28:54:6f:a6:a9:17:
                    ce:59:53:97:4f:25:ab:b6:9f:3f:1c:46:6c:0d:59:
                    72:c8:54:c7:0f:16:21:1c:59:7a:f2:a0:92:8a:bf:
                    81:00:8d:d3:17:8e:93:16:60:33:35:4c:30:18:56:
                    e3:94:7f:b7:ce:be:6a:dc:98:92:a2:1d:47:ab:45:
                    34:9f:e2:f5:a2:6a:39:32:d4:f3:f6:1e:21:c8:50:
                    df:bb:97:a2:d7:67:be:41:e3:a2:24:72:dc:b9:68:
                    eb:40:77:9c:63:7e:12:35:b5:4b:8c:f5:78:2d:fa:
                    ae:89:95:b1:16:7b:60:32:63:bb:e1:c8:4f:87:52:
                    16:59:cf:07:79:cb:27:1d:77:37:f8:b5:04:f3:aa:
                    7a:c4:14:ad:a6:b2:68:06:81:8b:48:7c:61:90:9a:
                    a0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:86:46:4B:5C:A9:B4:5C:18:0C:C3:8F:37:FD:62:7F:66:58:3D:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c0b3cf56-6277-3d22-8721-823b8d83b6e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:2b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:9d:3b:37:4d:49:ea:e9:63:c1:77:6b:4a:f9:e1:09:ff:ea:
         44:e1:30:68:47:89:b0:90:85:23:b9:cb:42:00:82:1e:ba:75:
         92:8b:29:ae:e9:e9:fc:66:d0:6f:e5:b1:49:a3:3d:72:5d:64:
         a5:fe:06:18:25:13:78:14:56:51:44:e7:5e:5e:06:f3:17:a4:
         56:e7:11:fe:e8:e0:77:90:5f:c2:71:33:aa:4e:50:d7:b4:71:
         7c:b7:71:c8:a2:2c:89:ec:c7:93:35:9f:c2:b2:53:dd:7e:06:
         f6:dc:51:e3:1b:b0:77:92:32:04:69:3d:25:06:fd:cf:b3:f9:
         98:18:fb:db:40:03:c9:03:6c:ed:47:56:d3:d1:95:57:ff:5d:
         da:da:52:26:c4:f6:39:22:9a:f7:b3:e9:ee:d9:6a:bc:38:9e:
         54:ea:3f:5c:e4:2d:81:6e:18:5b:69:81:12:f0:3d:7f:fb:ff:
         7c:d9:44:4a:96:7e:d0:bb:fe:1b:2d:ab:84:ef:1f:1c:d0:1d:
         61:66:ea:67:67:1d:c5:fd:62:d1:00:d0:bf:fa:be:cd:7f:95:
         e2:24:91:d6:e7:78:d7:96:6b:53:15:12:a9:ad:ce:40:20:39:
         33:dc:05:8b:bb:dd:12:50:d1:28:a5:a3:56:3d:8f:4a:34:5e:
         26:06:4d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 03:35:17 2026 by rpki-client