Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/18973c9d-731f-37a9-a2f9-cd0d1c7c88b0.roa
File:                     18973c9d-731f-37a9-a2f9-cd0d1c7c88b0.roa (raw, json)
Hash identifier:          nr+/1djnwAIFKOj1eBOCkGTwku2MPFcA45z1sfsxCms=
Subject key identifier:   B7:12:16:F4:78:38:BA:EF:8F:96:94:57:62:65:83:95:0B:34:79:2A
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F27F257FB0DE9AB791D5AD700
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/18973c9d-731f-37a9-a2f9-cd0d1c7c88b0.roa
Signing time:             Sun 13 Sep 2026 01:00:12 +0000
ROA not before:           Sun 13 Sep 2026 01:00:12 +0000
ROA not after:            Sat 12 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:906b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:27:f2:57:fb:0d:e9:ab:79:1d:5a:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 13 01:00:12 2026 GMT
            Not After : Dec 12 02:00:12 2026 GMT
        Subject: CN=e4f9caba-49d9-4bd7-8930-08709ade1169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:9c:ae:34:92:10:8d:f8:c7:c7:87:7e:8c:
                    d8:07:e3:a7:2a:48:e0:e9:e3:b1:c3:80:12:d7:c9:
                    fe:6e:fa:52:46:0a:89:92:b0:89:0a:bd:e7:8f:96:
                    f8:2f:fc:dc:5a:8a:b7:1d:88:36:34:56:34:a5:ad:
                    ac:07:15:77:c9:8a:5f:e2:cc:b1:d4:4c:27:6b:ab:
                    2a:ed:d2:7c:c7:96:41:8f:12:ad:06:fd:d7:95:7d:
                    dc:8d:22:64:b2:05:dc:54:bd:65:c8:dc:0f:66:a7:
                    dd:45:1a:19:26:0f:eb:15:6e:37:62:fc:3e:f8:26:
                    47:09:5c:ad:5b:f4:12:02:50:dc:3c:4c:65:99:ac:
                    5d:07:c7:cf:e9:d7:03:1e:60:7a:f3:a3:8b:07:1b:
                    65:d3:25:31:d9:c4:b3:03:2c:5f:7c:a8:35:ac:60:
                    ed:89:eb:8c:a4:e3:c4:e3:0d:a0:2f:d1:b4:5e:7c:
                    f8:7d:bb:9e:b4:fc:2c:86:7a:e6:a9:e2:19:f6:a3:
                    6f:e0:71:16:2f:64:a7:4e:5c:51:10:d8:a2:90:e1:
                    09:10:38:93:b6:2b:1c:af:95:3f:8e:9d:42:db:43:
                    f4:ad:05:0e:b4:af:c2:51:fe:36:cf:0a:d0:5e:19:
                    40:4b:ca:f1:72:ca:cd:e4:d7:ee:ef:4f:c4:00:0c:
                    5f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:12:16:F4:78:38:BA:EF:8F:96:94:57:62:65:83:95:0B:34:79:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/18973c9d-731f-37a9-a2f9-cd0d1c7c88b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:906b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:6d:40:79:a2:69:9a:6e:b3:9e:69:a4:36:4a:06:c4:93:89:
         5b:61:6b:75:50:6c:e0:14:4f:ca:77:5f:9d:a3:32:ce:35:1e:
         6c:3d:14:b1:4b:a9:a5:96:29:23:84:dd:22:e1:72:34:eb:ad:
         d2:1d:d4:06:ad:a5:04:a7:18:19:1d:71:5a:71:1b:ab:28:15:
         77:03:94:c2:f8:81:30:c5:ac:8a:a8:c5:e8:cf:df:0e:18:55:
         85:47:2c:60:b5:44:0b:17:a4:31:06:ad:50:8b:30:88:87:10:
         6d:66:a6:cd:a1:06:a8:e5:d1:76:dc:b8:fb:1f:ed:c8:6b:f4:
         c6:55:16:3d:25:11:48:c2:f0:6f:2d:fa:3f:c4:3d:99:87:b9:
         c2:cd:78:e7:8a:e7:3d:32:8c:df:7e:de:86:ee:29:fa:b9:db:
         10:1e:d5:ce:64:11:c3:06:8c:a3:a6:57:a1:bc:31:88:fc:22:
         47:7e:a6:25:e8:5d:1b:0c:de:32:5c:84:43:cd:50:51:2c:c1:
         80:35:2c:d7:da:1c:09:2a:b5:21:3c:03:b7:66:d9:db:26:3d:
         ad:2d:3e:dc:d6:bc:fa:22:f9:7d:6c:ee:3e:f0:4a:41:14:bb:
         c2:da:a9:97:34:6b:df:3e:cf:73:bd:26:9f:53:66:e7:1b:e9:
         ad:f4:50:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:46:06 2026 by rpki-client