Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6122f0f7-1050-3573-9b04-7c6a3f35fa63.roa
File:                     6122f0f7-1050-3573-9b04-7c6a3f35fa63.roa (raw, json)
Hash identifier:          2o9ncVrAj+2g1RW9aEa9gsI9ndxTaswGCHTyczQ+2GE=
Subject key identifier:   7D:42:4A:CF:70:52:0D:39:0C:F6:13:40:6F:C9:98:40:D2:F3:93:6B
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E858F88FFFC14B3A4D69A6B40
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6122f0f7-1050-3573-9b04-7c6a3f35fa63.roa
Signing time:             Thu 16 Jul 2026 21:00:12 +0000
ROA not before:           Thu 16 Jul 2026 21:00:12 +0000
ROA not after:            Wed 14 Oct 2026 21:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:906a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:8f:88:ff:fc:14:b3:a4:d6:9a:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 16 21:00:12 2026 GMT
            Not After : Oct 14 21:00:12 2026 GMT
        Subject: CN=3fd8c596-c75d-42dc-9422-c5c329e14263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c5:e7:9a:3a:70:29:d6:bb:7a:a1:bc:e3:d9:
                    28:3e:2f:16:9e:d9:cf:e3:a4:ca:2b:ec:ba:37:9a:
                    4b:5f:d9:17:16:aa:e2:df:9f:13:86:e0:1a:f3:17:
                    68:8d:5c:f9:11:4c:ba:57:46:b9:eb:71:a7:72:9d:
                    1b:d9:8f:22:d5:3a:b0:fd:5f:60:13:fc:d6:44:fe:
                    08:45:7d:1a:df:c2:1e:c0:d9:2b:67:31:ca:3e:da:
                    e0:2d:16:ef:8e:ae:9e:66:21:e1:08:00:f2:99:89:
                    ab:fc:ff:95:0e:28:20:31:18:35:5c:9d:63:b0:94:
                    33:81:f3:7f:b8:8f:28:72:52:0c:e2:e8:21:03:cf:
                    61:60:44:2e:8e:80:64:99:fe:3b:84:c9:58:1c:15:
                    9b:75:e4:f4:71:72:14:15:81:38:61:28:fa:bd:f5:
                    87:72:fa:8d:91:e6:ee:77:11:62:68:5e:91:e7:a2:
                    f6:69:a7:41:e4:af:a3:1a:b0:b5:04:73:66:74:1e:
                    9c:c8:f3:7a:ef:c3:d6:8b:b2:6a:2d:a6:de:b3:04:
                    21:60:ab:51:a0:4b:34:4f:e6:7b:ea:bf:c4:b0:a5:
                    73:20:55:82:f2:2f:13:f6:25:6f:d3:a5:ac:98:ac:
                    7e:03:32:f0:c2:a5:b7:c9:ea:9f:76:3d:7e:80:1a:
                    3e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:42:4A:CF:70:52:0D:39:0C:F6:13:40:6F:C9:98:40:D2:F3:93:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6122f0f7-1050-3573-9b04-7c6a3f35fa63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:906a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:77:4b:f0:19:ab:9b:97:c7:88:21:f1:ec:2a:f0:7b:a4:61:
         7f:92:6e:e6:9e:b0:4c:29:a8:0c:0d:d7:32:76:46:85:03:ed:
         2a:f4:bb:27:c6:2a:10:95:e7:5c:9b:c6:b1:66:48:33:d4:d0:
         c4:e2:22:7d:20:1a:05:95:10:52:5a:d3:78:99:18:21:3a:10:
         9f:a8:dc:a0:d5:6c:93:18:7f:1d:74:b8:2b:a0:94:27:24:9d:
         47:ce:23:79:64:72:e5:43:52:b5:cb:5c:b4:74:ad:cb:93:43:
         cb:14:e6:ac:7b:cf:17:10:d4:7a:79:1c:b6:5c:00:c4:84:35:
         9e:48:9e:a1:6a:66:e9:fb:d3:c2:d2:2a:ae:3e:07:1e:dd:75:
         dc:c2:ea:ea:e5:a5:0d:32:86:09:70:47:b6:31:89:73:fc:87:
         a2:e9:d4:98:fa:4e:90:ff:02:df:de:43:8a:09:c1:2b:fc:c5:
         eb:1a:2d:a3:18:82:a3:5b:44:55:74:c4:40:d2:8d:52:1c:df:
         2b:d0:42:ec:f5:97:c5:47:62:94:fd:3d:47:2a:3e:39:23:20:
         91:8f:c0:d4:13:85:c4:4f:fe:2b:dc:1b:40:cd:94:9a:30:5b:
         e8:3c:c7:cf:9a:f8:b8:c4:ba:b8:33:68:51:f4:b2:3c:9e:63:
         89:24:5e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:34:26 2026 by rpki-client