Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/18973c9d-731f-37a9-a2f9-cd0d1c7c88b0.roa
File:                     18973c9d-731f-37a9-a2f9-cd0d1c7c88b0.roa (raw, json)
Hash identifier:          FumlWosm/Qtqba/gEpOoRREyACvGNdOL46DB64Khp0g=
Subject key identifier:   36:28:D5:A4:8F:25:6D:3D:33:44:40:84:44:83:EE:32:7B:8E:78:EE
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E858F8658C1E20444EA00FD00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/18973c9d-731f-37a9-a2f9-cd0d1c7c88b0.roa
Signing time:             Thu 16 Jul 2026 21:00:12 +0000
ROA not before:           Thu 16 Jul 2026 21:00:12 +0000
ROA not after:            Wed 14 Oct 2026 21:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:906b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:8f:86:58:c1:e2:04:44:ea:00:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 16 21:00:12 2026 GMT
            Not After : Oct 14 21:00:12 2026 GMT
        Subject: CN=a8ca44be-6883-446f-b601-3c7207d9da29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:23:f1:24:bb:b7:d4:47:98:bf:b7:12:c6:a8:
                    8d:ba:81:3d:91:aa:31:41:ff:da:46:59:74:a6:25:
                    69:e5:a3:6b:c7:8a:58:9a:f0:e8:d2:6f:49:15:16:
                    f6:d8:57:46:b9:b3:76:82:56:6d:e6:7c:6d:c8:da:
                    d6:d8:04:55:21:21:63:1e:22:90:d2:26:33:a4:fd:
                    ce:cf:5f:0b:b9:27:03:9e:74:02:2e:29:fa:5e:96:
                    2d:72:ff:15:9f:c9:87:15:19:be:d0:00:31:bb:d7:
                    b4:a5:bf:f8:25:d7:32:9d:1d:36:da:0d:bb:91:56:
                    f3:3a:94:fa:50:82:f5:0b:de:76:6d:75:66:55:6d:
                    f0:71:9f:b1:49:82:d0:34:d1:90:a6:0e:96:8c:e4:
                    33:44:e9:1b:a0:24:3e:08:35:aa:53:78:5d:52:55:
                    52:97:1e:5e:3f:30:32:c3:9a:00:75:97:d9:f4:e1:
                    ed:52:9e:27:ae:cf:f6:e9:78:ee:b1:62:69:09:cf:
                    46:c3:d9:e6:ab:fe:d1:ce:db:e5:ad:45:53:a1:36:
                    da:f8:86:fd:27:21:11:89:a1:0f:dc:79:b3:d1:e6:
                    62:7c:42:ce:71:54:86:47:3d:60:68:a9:90:61:c8:
                    90:ea:16:07:8b:1c:35:7c:6d:ec:9e:61:91:6f:98:
                    bb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:28:D5:A4:8F:25:6D:3D:33:44:40:84:44:83:EE:32:7B:8E:78:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/18973c9d-731f-37a9-a2f9-cd0d1c7c88b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:906b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a7:ed:fe:71:4e:f2:4b:a9:a7:d6:52:e7:61:df:a2:dc:f9:
         34:9b:e7:a3:d1:f0:24:83:33:ee:08:47:f9:fd:5f:63:7c:b1:
         4e:e6:60:90:45:56:5c:3d:b2:ef:58:cc:57:40:51:c0:12:4c:
         a0:fa:58:ef:57:35:b1:63:9d:39:3e:f4:55:14:c1:0e:62:22:
         a8:ea:9b:c3:31:eb:38:08:c9:5a:86:53:c5:27:41:78:5c:74:
         e6:93:5b:f0:70:0a:2a:23:dd:42:c4:fc:53:1a:23:b0:d8:58:
         aa:0a:78:91:5c:40:b1:d2:30:f4:46:fc:90:37:84:ec:c7:f5:
         f1:6d:fd:0c:09:d4:02:05:61:13:2a:03:88:0f:4c:13:57:99:
         bb:ce:f0:5e:3c:56:91:5f:d2:bc:7b:5d:04:99:ba:c3:89:74:
         bb:f5:6d:85:28:33:5e:c5:b6:f8:59:f6:28:e1:c8:8d:f3:3f:
         12:24:f3:cd:d6:53:22:5d:52:cc:2e:3a:08:7b:e7:63:46:d4:
         c5:0f:ef:30:b5:3b:97:57:1d:71:0c:9e:1b:c8:d6:d3:7e:3c:
         5d:8b:a1:44:9a:03:b9:f4:ca:85:6e:69:7b:1a:e3:3c:41:d3:
         d4:c7:ba:d9:fe:6a:49:4e:f1:e1:56:ed:05:2f:83:5a:31:7e:
         02:bd:6f:56
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6Fj4ZYweIEROoA/QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDcxNjIxMDAxMloXDTI2MTAxNDIxMDAxMlowLzEtMCsGA1UEAxMk
YThjYTQ0YmUtNjg4My00NDZmLWI2MDEtM2M3MjA3ZDlkYTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSPxJLu31EeYv7cSxqiNuoE9kaoxQf/aRll0
piVp5aNrx4pYmvDo0m9JFRb22FdGubN2glZt5nxtyNrW2ARVISFjHiKQ0iYzpP3O
z18LuScDnnQCLin6XpYtcv8Vn8mHFRm+0AAxu9e0pb/4JdcynR022g27kVbzOpT6
UIL1C952bXVmVW3wcZ+xSYLQNNGQpg6WjOQzROkboCQ+CDWqU3hdUlVSlx5ePzAy
w5oAdZfZ9OHtUp4nrs/26XjusWJpCc9Gw9nmq/7RztvlrUVToTba+Ib9JyERiaEP
3Hmz0eZifELOcVSGRz1gaKmQYciQ6hYHixw1fG3snmGRb5i7ZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDYo1aSPJW09M0RAhESD7jJ7jnjuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMTg5NzNjOWQtNzMxZi0z
N2E5LWEyZjktY2QwZDFjN2M4OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf3UJBr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEKn7f5xTvJLqafWUudh36Lc+TSb56PR8CSDM+4IR/n9X2N8sU7m
YJBFVlw9su9YzFdAUcASTKD6WO9XNbFjnTk+9FUUwQ5iIqjqm8Mx6zgIyVqGU8Un
QXhcdOaTW/BwCioj3ULE/FMaI7DYWKoKeJFcQLHSMPRG/JA3hOzH9fFt/QwJ1AIF
YRMqA4gPTBNXmbvO8F48VpFf0rx7XQSZusOJdLv1bYUoM17FtvhZ9ijhyI3zPxIk
883WUyJdUswuOgh752NG1MUP7zC1O5dXHXEMnhvI1tN+PF2LoUSaA7n0yoVuaXsa
4zxB09THutn+aklO8eFW7QUvg1oxfgK9b1Y=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:13:11 2026 by rpki-client