Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c651a8c6-6091-32bd-9f7b-136ad390e55c.roa
File:                     c651a8c6-6091-32bd-9f7b-136ad390e55c.roa (raw, json)
Hash identifier:          dnTcw0pcp0BhwK/XV5kcQxH13KpuZU7wyvx09cNmmHQ=
Subject key identifier:   F8:DC:32:77:C6:E8:D1:E9:2A:FD:4E:5B:A1:3A:DB:17:11:2B:15:CC
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F27F25D2E6C7F4FA3E6CD1380
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c651a8c6-6091-32bd-9f7b-136ad390e55c.roa
Signing time:             Sun 13 Sep 2026 01:00:12 +0000
ROA not before:           Sun 13 Sep 2026 01:00:12 +0000
ROA not after:            Sat 12 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:6062::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:27:f2:5d:2e:6c:7f:4f:a3:e6:cd:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 13 01:00:12 2026 GMT
            Not After : Dec 12 02:00:12 2026 GMT
        Subject: CN=f5832626-73af-49e8-8e8e-4242b9350536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:20:9e:8a:20:52:79:6d:3a:79:c9:cf:c1:9e:
                    11:43:ed:d2:ec:b0:12:be:92:fe:9f:f2:96:70:fd:
                    36:43:e3:b6:1e:52:ad:37:bd:e1:d3:c9:8f:89:d2:
                    af:6b:9c:e6:69:de:60:e3:72:65:b8:19:98:eb:60:
                    06:73:20:83:c1:8f:3a:0d:5c:fc:63:08:eb:2a:ea:
                    44:2a:93:cc:39:55:2b:b5:b6:5b:96:d9:69:e0:e3:
                    0e:df:de:ba:b5:1d:d9:6e:c6:b0:64:61:f9:da:9f:
                    b5:ba:6b:04:75:bc:00:a1:c0:95:2b:14:02:64:fc:
                    08:81:53:77:54:37:de:3a:22:83:86:b7:c6:e5:cc:
                    98:59:33:40:1e:11:c7:c8:96:c5:01:38:b1:cd:c4:
                    a2:2c:83:e4:3d:00:90:e6:91:59:13:e5:c5:5c:e4:
                    32:4a:d4:98:3d:01:3c:e2:37:32:99:f6:79:a3:8a:
                    9a:cc:dc:dc:9f:07:21:0f:b8:40:31:fc:09:90:4a:
                    81:b2:28:92:54:be:90:aa:c8:1e:b2:13:ee:84:7b:
                    66:ad:d1:0f:9b:44:56:2f:33:e2:ef:44:fb:ca:66:
                    bf:ad:e2:34:5a:e9:e5:e5:f2:40:24:de:dc:9a:85:
                    24:3a:f3:45:d8:34:5c:d0:e3:aa:39:82:98:56:52:
                    25:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DC:32:77:C6:E8:D1:E9:2A:FD:4E:5B:A1:3A:DB:17:11:2B:15:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c651a8c6-6091-32bd-9f7b-136ad390e55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:6062::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:04:00:be:73:89:47:12:91:5c:2b:de:88:50:48:d1:9f:59:
         b1:2c:b9:2a:e7:e7:1d:d4:11:81:5b:d6:a2:29:4f:2c:b7:fa:
         27:fa:74:e3:94:d3:2b:06:20:08:fe:49:41:75:32:4c:97:56:
         70:39:56:f0:b4:4d:6c:e3:41:99:da:72:b1:27:80:ee:c7:99:
         fa:ed:19:34:62:50:1b:ac:29:63:9f:9c:75:92:d3:40:5f:3b:
         ab:7e:cf:83:a9:10:b9:75:78:ef:15:ab:11:8b:9e:40:49:6d:
         e4:32:9a:78:fc:2c:b5:be:08:e3:90:6c:fd:e3:7e:65:ab:1b:
         ee:74:ed:41:de:1b:cf:fb:6b:24:e5:42:f8:85:36:34:90:2f:
         e2:53:92:d8:3b:6b:63:c7:82:1d:c1:76:c9:df:cd:91:09:3b:
         83:72:f2:6f:34:f3:00:fc:ed:f0:e9:0f:27:1a:64:28:29:36:
         03:db:ce:a4:96:f3:20:18:d6:9d:d5:c7:85:7b:d9:a8:42:aa:
         02:95:24:0f:26:ce:21:c2:fd:30:6e:90:47:4c:5a:a5:8b:e4:
         c2:1a:bc:b1:a7:bf:d0:42:69:fb:78:42:96:c5:df:e2:28:b0:
         76:fa:63:4f:dd:72:b5:5e:32:f3:36:cf:7f:b6:ca:d1:f9:ac:
         67:0c:fe:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:39:31 2026 by rpki-client