Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/35ef1de4-ff3c-300d-bfa0-8257e15e7839.roa
File:                     35ef1de4-ff3c-300d-bfa0-8257e15e7839.roa (raw, json)
Hash identifier:          4zPhcz/G2p1nFGbJN6s4UOOEpOveLfygkzUcTJh5U8I=
Subject key identifier:   92:4F:8B:A3:80:9A:5E:1F:73:61:87:D0:69:23:1D:2B:89:B4:90:FA
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EE4F1FD4B7180AE3234FBFA80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/35ef1de4-ff3c-300d-bfa0-8257e15e7839.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:71a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:fd:4b:71:80:ae:32:34:fb:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=12cfe777-a9a3-4a38-9711-af95e58c95de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:aa:8a:79:40:d8:f7:e7:83:bd:62:72:6d:f7:
                    85:d3:54:d2:e6:df:17:07:fe:39:b6:44:8a:ed:b7:
                    9a:0a:21:c3:36:79:75:5a:42:9b:59:7c:53:f4:c1:
                    a4:3e:68:6f:97:7b:b4:1e:ae:b1:d3:af:db:96:38:
                    0d:1e:6c:43:cf:a3:26:27:48:cb:bb:f8:0a:32:f1:
                    59:4c:a6:ca:25:50:61:df:35:b0:8f:a7:51:16:93:
                    e4:92:94:11:90:05:97:02:9f:93:f7:a1:0a:54:e8:
                    67:66:25:33:5b:03:70:de:20:70:59:a6:a9:11:22:
                    b9:09:55:31:a4:6d:ba:cb:d6:5e:8e:d6:fe:43:1f:
                    2d:52:28:1a:2a:24:e6:2c:fe:ee:14:c7:46:e3:d2:
                    7a:80:12:54:cf:3c:a2:62:8b:cd:d1:7e:bd:13:cc:
                    d3:c7:8a:3e:1a:a1:9d:41:13:e5:6a:de:5d:33:97:
                    56:94:47:6c:06:3a:33:d5:aa:d7:05:5c:b2:47:84:
                    b5:c0:cc:2e:5a:75:05:e8:8f:ed:e3:84:b3:c2:da:
                    49:a8:18:f9:ca:1b:89:cf:99:d8:5e:ab:48:56:79:
                    ce:a8:60:b6:2d:c2:d6:db:a2:ef:18:8a:ef:6b:9b:
                    c3:8b:7a:2a:53:65:c1:29:07:ba:18:77:5d:45:31:
                    aa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4F:8B:A3:80:9A:5E:1F:73:61:87:D0:69:23:1D:2B:89:B4:90:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/35ef1de4-ff3c-300d-bfa0-8257e15e7839.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:71a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:5c:9e:72:0f:be:d3:3f:a8:b0:c6:31:0b:41:8a:5f:13:5d:
         c7:8c:66:e2:9e:ad:bd:ad:05:cf:45:31:e7:92:1d:62:0f:b1:
         db:ed:4c:28:5d:cc:b1:73:a8:f4:1b:88:08:15:9b:9c:cd:6a:
         f6:d0:a7:11:6a:8e:61:bd:dc:87:c9:b0:ee:a7:48:fe:87:15:
         6a:71:91:eb:cb:5d:f6:d4:6a:99:41:a4:0b:c1:b7:4f:b1:14:
         ca:7b:ca:4d:52:07:1f:28:8d:5f:91:11:39:d7:e5:61:63:46:
         e8:67:c3:2a:bf:f9:c2:c8:47:8f:a3:80:91:8b:7a:53:b9:ec:
         a7:97:67:d6:9e:2c:ac:19:c2:14:49:25:a2:20:7a:eb:5d:87:
         b0:ad:ee:ce:25:58:e9:27:09:91:e5:b5:a3:89:1a:16:fb:94:
         37:d9:53:83:50:44:c5:4b:35:db:9e:ed:54:d6:16:7f:8e:5b:
         68:84:15:2c:b4:a9:65:f7:83:85:ee:cd:2d:14:d1:ce:72:59:
         05:57:93:04:aa:0c:48:87:99:50:be:4d:25:01:9d:e1:98:85:
         f2:c9:fb:7a:93:43:cb:90:a6:f8:26:7b:bc:8c:82:9d:8c:c3:
         4e:bc:db:7e:4f:89:ac:4a:d7:44:81:a2:20:61:3a:f3:22:93:
         a5:7c:77:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:41:00 2026 by rpki-client