Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5dddc6b1-fb6a-3bcc-b9bd-2ae53b8d072a.roa
File:                     5dddc6b1-fb6a-3bcc-b9bd-2ae53b8d072a.roa (raw, json)
Hash identifier:          BMaWkF5BXXlxzAGvCzhd/q2FGfBLKgRrPzg3mDgJKGc=
Subject key identifier:   56:F6:F9:6B:A3:1B:FF:81:F3:1D:24:5D:AF:5A:03:28:DE:4A:E3:22
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F49729973C7F24E3A516ADDC0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5dddc6b1-fb6a-3bcc-b9bd-2ae53b8d072a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:907b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:99:73:c7:f2:4e:3a:51:6a:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=735c2c11-801e-4345-a8c2-ab9436550b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f7:cf:ed:ca:83:d5:12:1f:6c:e2:0b:b7:79:
                    f3:d0:4a:87:f6:f7:d6:29:af:b4:cc:63:fd:18:ad:
                    76:04:df:6b:80:a7:8a:02:c1:09:34:52:36:44:59:
                    b9:80:7c:c7:ac:e8:29:66:a5:a4:ec:a1:a3:93:4d:
                    a1:ae:39:82:eb:d4:64:01:a4:1d:75:85:68:b0:50:
                    85:81:4d:e9:be:fd:b5:3a:b3:c6:97:c9:d0:38:d4:
                    db:1a:8b:f5:d0:3d:37:57:ee:4f:d5:a5:de:e1:0c:
                    9c:b8:be:7e:59:1b:7c:6a:5b:e8:47:07:73:1b:41:
                    a6:5d:6f:3b:bb:1b:51:be:52:9a:2e:d2:1c:ea:b3:
                    b7:7d:8f:ab:cd:05:ca:1e:28:1f:00:3a:15:b8:36:
                    9d:3a:f8:6f:d1:f7:2a:f2:48:92:c3:46:05:b6:50:
                    19:6e:c3:dc:36:68:7c:ef:05:01:e0:67:9e:a3:3b:
                    78:e0:31:3a:44:09:27:0a:cb:21:f6:cc:2f:ad:e1:
                    1a:23:82:44:d7:03:dc:d8:21:86:52:9f:b9:7e:24:
                    fb:16:96:69:8f:7d:24:4b:df:b7:61:92:fb:b8:67:
                    df:f3:c2:bd:9f:77:12:0e:85:0a:ee:ff:25:cf:46:
                    42:ef:6f:b5:5f:bd:d8:c4:c4:d4:c7:cc:06:b2:57:
                    24:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F6:F9:6B:A3:1B:FF:81:F3:1D:24:5D:AF:5A:03:28:DE:4A:E3:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5dddc6b1-fb6a-3bcc-b9bd-2ae53b8d072a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:907b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:50:ee:5e:b2:6d:ac:14:7b:51:0a:7d:78:89:36:df:2a:f5:
         75:c5:f9:18:61:25:06:5d:ef:a5:d3:64:3d:22:11:c8:74:29:
         1c:14:50:9b:69:d9:2a:94:fc:8d:2a:12:b0:8c:9f:a5:a7:db:
         56:b4:54:9c:27:cf:f9:5e:d9:19:b1:18:2a:00:3c:c0:82:b0:
         f6:75:d8:dc:aa:5f:e5:7b:52:44:2c:1e:ff:3c:e6:dc:ba:00:
         cf:7b:f2:d0:15:a1:4a:2e:9e:55:ef:9c:3d:96:59:ae:8f:5a:
         d5:8d:85:8d:4e:4d:57:29:c9:54:a5:ab:55:3f:b6:21:5f:07:
         5f:7f:2f:40:b8:fa:42:b6:7c:17:31:77:9c:44:41:af:b9:a9:
         c4:ab:ae:a1:8c:d2:33:52:fa:ba:c4:dd:fc:a7:1a:e1:43:e7:
         26:b8:0f:c0:86:e1:eb:8c:6f:3f:ad:93:23:1f:b0:11:c4:64:
         4f:5d:0c:66:9b:a5:50:18:6f:55:a1:56:e2:b8:4f:13:42:60:
         b1:90:74:a5:71:36:0c:30:31:1f:9c:6b:87:a4:92:ed:14:38:
         ea:b9:25:4a:0f:83:00:04:4c:62:1a:b3:ba:2c:a6:c6:60:a8:
         1c:18:4c:e2:19:7c:55:9b:80:34:b8:87:01:4c:56:cb:f7:17:
         3a:ad:6a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:38:47 2026 by rpki-client