Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d5e592cf-83e0-3e99-8d26-3054a7a338bf.roa
File:                     d5e592cf-83e0-3e99-8d26-3054a7a338bf.roa (raw, json)
Hash identifier:          zHcOVzwR/tPqWlJ0fWjEsb/LFuXokLXmyCsKCLOtq8Y=
Subject key identifier:   04:79:6C:A2:23:CE:FE:F5:A4:B7:55:63:65:37:C5:A3:CC:6E:B5:AE
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D22AC187B4DF8E5FF6ACE7770
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d5e592cf-83e0-3e99-8d26-3054a7a338bf.roa
Signing time:             Wed 11 Mar 2026 18:05:49 +0000
ROA not before:           Wed 11 Mar 2026 18:05:49 +0000
ROA not after:            Tue 09 Jun 2026 18:05:49 +0000
asID:                     23473
IP address blocks:        2607:f750:906e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:22:ac:18:7b:4d:f8:e5:ff:6a:ce:77:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Mar 11 18:05:49 2026 GMT
            Not After : Jun  9 18:05:49 2026 GMT
        Subject: CN=ffe76eb8-e61d-4eff-934a-bc400c247b0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:d4:93:f8:1f:cf:f6:17:b9:ba:17:2d:f3:
                    4d:08:99:00:fe:a9:95:66:a6:44:4c:9d:0c:01:35:
                    f1:3d:7d:f2:2c:bf:10:88:00:0b:f6:b9:ab:72:69:
                    2b:3e:d0:1d:21:31:c5:7c:c2:80:4a:fd:31:6f:e7:
                    22:51:eb:b8:2f:63:67:c7:2f:49:9d:79:16:05:fc:
                    9c:ae:26:67:66:1a:35:71:f0:5d:03:91:6b:e0:65:
                    07:02:37:cd:77:98:3a:88:75:96:1f:33:c7:27:a2:
                    3f:dd:f7:1e:67:d4:d5:73:61:d8:aa:c4:a5:1a:f4:
                    24:1e:88:f7:a6:ca:03:25:1b:9d:d9:d8:c5:f0:11:
                    96:53:14:cc:10:60:11:4b:cd:5e:73:24:f7:40:38:
                    78:1b:da:14:c7:b2:2b:db:fb:d6:f8:2d:bb:b9:43:
                    71:18:1c:6d:bc:4b:be:c6:db:3a:4d:74:74:08:f6:
                    b0:f3:6b:d7:f1:d1:91:a0:87:d1:65:11:f9:5c:38:
                    4c:65:de:af:31:92:9a:bc:19:2e:8d:4d:1e:65:fa:
                    06:1d:3a:b0:ac:0a:26:13:a4:00:59:ca:6b:79:97:
                    e7:75:9c:0a:11:20:d9:2e:30:bb:1c:be:24:10:c9:
                    1c:87:90:cc:55:a8:63:af:57:21:e5:72:79:09:d5:
                    2c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:79:6C:A2:23:CE:FE:F5:A4:B7:55:63:65:37:C5:A3:CC:6E:B5:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d5e592cf-83e0-3e99-8d26-3054a7a338bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:906e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ae:91:db:65:0b:1a:b9:9e:0f:fb:ee:18:19:11:c0:7e:9e:
         cd:6c:8d:80:08:1b:4d:2d:02:4a:16:58:85:0a:76:1d:d9:60:
         af:b8:ee:9b:7d:d6:08:51:66:5d:30:79:84:72:ea:01:42:1f:
         76:1c:ac:ec:81:ac:62:c2:2c:d1:47:8f:81:36:dd:d6:91:38:
         47:ac:93:d0:ee:a4:34:d6:36:ee:5a:3c:dd:5d:b3:97:2e:6c:
         1b:57:35:a2:f1:95:18:78:f9:44:fa:e9:02:89:b1:0c:61:37:
         85:b6:46:90:c6:bd:98:24:ff:08:da:4a:10:ae:1e:61:f9:c9:
         2f:ec:71:3f:83:54:64:16:98:61:d3:e8:ae:e2:14:b5:cb:4b:
         2a:c3:aa:4e:fe:b7:13:3d:74:5d:64:51:a2:fd:c7:66:48:f3:
         41:d3:57:f5:c3:2e:90:14:f2:4f:c0:39:39:ff:1d:90:d1:d9:
         d6:43:94:5f:26:39:2d:f6:2e:09:55:2d:09:a0:fa:90:57:33:
         d5:66:51:1e:10:cb:9d:4f:0e:c6:b7:40:da:fc:f8:f7:1c:2c:
         b5:ab:be:62:70:11:a5:82:e7:0b:5f:0e:41:bf:d9:a3:84:50:
         6b:4d:a6:be:01:cd:18:c8:53:1a:2f:6e:e2:4b:7d:de:bb:5c:
         20:e2:87:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:52:19 2026 by rpki-client