Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eed15ec3-aca1-34a9-b054-3b3571f16fcd.roa
File:                     eed15ec3-aca1-34a9-b054-3b3571f16fcd.roa (raw, json)
Hash identifier:          x1BmMQYujN4G/PbwGMkLmFcMGyDAxqf1HXkuq3k6z2s=
Subject key identifier:   9E:DA:4F:12:BF:C3:8F:48:E9:13:8E:A9:5A:4D:6D:49:E4:4E:F3:C2
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DAF102B801CDD335E01704200
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eed15ec3-aca1-34a9-b054-3b3571f16fcd.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     23473
IP address blocks:        2607:f750:4300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:2b:80:1c:dd:33:5e:01:70:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=cdc5691d-043d-4a93-ac2b-7928592d30f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:59:82:ba:17:5b:59:be:b7:02:75:30:39:fd:
                    b0:41:a3:8f:ac:87:ea:77:f9:e0:2d:26:8c:2e:e9:
                    6e:4f:c3:c4:6c:65:18:61:42:ba:bf:ca:4d:42:ba:
                    6d:46:a2:07:f6:c1:07:a9:bd:4b:8c:1c:98:83:39:
                    b9:f1:4e:b8:10:ae:88:72:1a:9c:83:3f:90:e0:66:
                    69:a5:7a:47:57:6d:bb:17:9f:7f:2a:57:90:c4:b2:
                    9d:ae:0c:18:9a:b5:d4:4f:a1:78:90:4a:3d:03:b5:
                    c5:f6:fe:bf:06:cd:11:3a:f7:a7:9b:c6:82:52:e6:
                    f5:50:b8:67:a6:1c:d2:4e:a1:1e:0a:82:ae:3a:cc:
                    56:52:9a:ce:cb:82:cf:ab:60:48:1f:99:db:f6:b9:
                    d2:88:f2:c9:6e:af:12:fe:64:6f:be:bd:0e:cc:47:
                    21:df:58:51:47:97:38:2d:97:4f:fe:c8:ed:e5:26:
                    e7:78:83:fa:96:a0:1d:ae:a7:32:f1:7a:66:fb:27:
                    ce:10:18:c9:54:34:1b:9e:f2:3a:27:8b:e0:c2:07:
                    c1:8d:09:5b:ce:5d:47:1b:4e:08:4c:2d:b6:12:24:
                    ec:59:a0:53:84:53:ca:f7:6e:9f:a7:cf:a7:3e:a7:
                    75:58:19:f9:b4:52:db:5b:a6:c3:56:33:15:e0:c4:
                    80:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DA:4F:12:BF:C3:8F:48:E9:13:8E:A9:5A:4D:6D:49:E4:4E:F3:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/eed15ec3-aca1-34a9-b054-3b3571f16fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:4300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:cb:c5:82:65:57:32:82:2d:31:37:1f:29:2c:98:8a:9c:1f:
         fb:ef:91:cd:c8:31:b8:d9:0e:be:c4:91:2e:90:4c:14:2a:dc:
         a8:95:ed:31:6c:e3:f6:13:4e:87:55:55:ae:34:9a:87:7e:75:
         bb:22:44:c5:92:49:4f:06:ec:14:c0:a8:6a:16:ed:d4:a9:4b:
         d0:c7:a3:51:48:80:42:03:08:34:18:66:71:40:a0:c9:86:ad:
         33:72:06:38:1a:d8:7c:b7:8b:f0:7d:e0:7b:ae:2a:75:13:45:
         01:3b:f2:f5:e3:97:67:62:0b:30:a1:4b:75:7a:60:cf:c1:61:
         ca:ca:c4:0d:3e:84:f5:f9:a6:7b:a9:e9:75:be:a3:c6:99:34:
         0a:59:1f:71:8d:05:cd:9f:d8:10:94:38:fb:3e:c3:d2:1d:a6:
         00:9b:34:28:d0:b1:12:58:a5:c9:22:56:47:8e:4e:75:ea:58:
         0d:33:23:7c:49:25:22:8c:00:a2:cf:79:3a:94:e2:80:43:44:
         19:1c:27:8f:3e:72:2c:69:6c:9a:9d:c5:56:40:63:5d:6d:50:
         a1:10:1f:50:f6:73:79:64:1a:8b:ce:3e:8b:0b:99:bc:b0:45:
         51:26:d4:f3:43:82:45:b1:91:37:31:63:a2:ec:ac:e0:39:26:
         8d:75:d9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:15:14 2026 by rpki-client