Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f3bb829d-9fcc-3028-b5cc-7bb58ca485a2.roa
File:                     f3bb829d-9fcc-3028-b5cc-7bb58ca485a2.roa (raw, json)
Hash identifier:          HeboDTmyf5rGs6TkZwkeAz3eXtkSOmG8RcZzcJlfk34=
Subject key identifier:   E3:17:A8:EB:C2:86:36:9C:58:D6:F9:88:82:80:F1:AE:B3:27:1E:54
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E428F23A54CBC3A174E3D4100
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f3bb829d-9fcc-3028-b5cc-7bb58ca485a2.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:23:a5:4c:bc:3a:17:4e:3d:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=3b4bba1d-14cf-4108-9fa2-edd9f2b2231f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a0:f8:82:c2:a7:d0:71:61:56:25:e2:b9:a1:
                    15:42:24:a7:c0:bc:e5:fd:9d:2a:fd:93:3e:79:2e:
                    e8:51:5d:9e:36:41:54:69:73:ca:35:2f:2e:14:9a:
                    a4:a2:dc:e1:7c:8e:d7:5f:ad:fa:bd:35:15:d8:d2:
                    b4:5d:4f:71:3c:3d:fe:56:28:f0:fe:e0:1d:e7:94:
                    1b:01:d0:94:fb:4b:70:32:17:6c:6b:1b:cc:c5:3e:
                    24:fe:f9:75:84:a5:ac:b6:87:ee:5c:23:bb:3a:f6:
                    ef:4b:76:d2:48:40:33:64:3c:95:c6:bf:58:82:7b:
                    b5:ff:02:2a:c9:c2:05:69:b3:42:13:f7:80:e5:16:
                    15:f2:a4:c2:23:31:5c:ad:dc:eb:11:e4:ab:04:fc:
                    c7:67:6f:b8:c1:87:e7:de:ef:c6:a3:ed:d6:1e:3b:
                    46:d4:b9:af:9e:c3:98:7c:71:6a:8c:1f:38:81:55:
                    12:43:86:be:25:35:f1:1d:91:6d:b7:f1:58:71:3f:
                    6b:e6:6a:5d:51:2f:60:4a:f8:4c:12:1d:40:7c:15:
                    44:1b:2e:8a:19:cc:42:33:72:ab:c7:6e:08:cc:47:
                    3d:15:2c:3e:05:67:5e:41:06:37:b5:ba:ad:ec:9d:
                    8e:bf:66:51:ca:33:58:d5:45:65:fe:c1:af:81:c3:
                    06:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:17:A8:EB:C2:86:36:9C:58:D6:F9:88:82:80:F1:AE:B3:27:1E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f3bb829d-9fcc-3028-b5cc-7bb58ca485a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:8000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:9b:bf:b2:ab:03:c3:cc:9f:35:4c:ef:5a:37:6e:73:44:41:
         ff:d0:6a:ee:27:e2:58:21:4f:31:71:c7:27:8a:e8:00:3e:0c:
         66:9d:e5:fc:3b:51:19:73:29:14:96:ca:bc:b2:e8:3e:95:de:
         03:32:0a:ff:41:38:50:a6:36:78:87:8a:15:aa:87:7a:f4:92:
         57:eb:2e:d6:ba:1f:66:75:63:13:86:39:87:5e:b0:c0:50:6f:
         cc:db:45:62:0f:6e:fb:69:49:97:ee:e0:0d:43:0b:65:43:1d:
         8e:e2:cc:b6:05:a7:3a:89:56:43:99:f5:6c:01:03:35:cb:2f:
         7c:8f:73:6c:20:d0:bf:a5:75:21:af:6b:f4:fe:dd:ac:54:b8:
         7e:fe:6e:90:87:b0:a0:44:c0:4b:fb:ed:8d:c7:5e:52:32:ec:
         f2:3f:9d:ea:d5:69:52:3e:c5:aa:18:74:ed:09:25:b0:8d:2b:
         7d:2d:f4:8c:8e:1a:3e:5b:1e:d1:d2:11:06:d1:fb:41:d5:84:
         88:f3:c1:17:47:a6:7e:a6:21:47:4d:01:21:51:de:0e:e4:9c:
         11:be:32:a4:b3:c6:e7:45:e6:6a:2e:fb:a2:9a:5d:e7:0c:5f:
         5c:7d:08:08:b0:80:5d:03:24:cd:f9:db:7b:a0:f2:4d:4b:92:
         08:8e:dd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 03:31:14 2026 by rpki-client