Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7fd129f3-1c17-3e2d-a77a-d605e894455d.roa
File:                     7fd129f3-1c17-3e2d-a77a-d605e894455d.roa (raw, json)
Hash identifier:          +CaW6N6LhNK5Gltb8qKFxgvVBojllKxR8jtEUJ7Ppsw=
Subject key identifier:   33:4D:02:BE:93:84:84:DE:DD:79:40:4C:3B:9B:B3:C8:D3:FD:37:6C
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E4AEF2E9BE9B5A6D7620D9400
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7fd129f3-1c17-3e2d-a77a-d605e894455d.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:6400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:2e:9b:e9:b5:a6:d7:62:0d:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=0b4eeb47-4b26-4a92-a5b4-619f4cd0b3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:d4:20:17:0b:e2:04:40:7a:ea:5c:8f:0a:
                    b1:2f:6c:45:58:19:43:d3:4c:d5:55:5a:3e:99:34:
                    0e:f4:96:12:3a:87:b5:a0:d9:da:08:41:ed:b1:cc:
                    06:dd:7a:e3:3c:c5:f1:3f:92:6a:c0:85:05:e4:7b:
                    fe:0f:84:a2:f8:6f:c5:27:04:19:c3:98:f2:87:a2:
                    bf:29:70:c4:69:1f:39:d9:19:2b:7a:1e:92:18:cf:
                    b2:94:7f:58:17:46:4a:45:7a:7b:af:5b:b4:ea:47:
                    24:a4:cd:9c:e7:28:3c:bf:73:44:53:8b:c8:3b:86:
                    78:03:7f:04:64:96:e5:7c:de:a8:f8:dd:dc:c2:48:
                    a6:0b:bd:e1:9b:b3:2c:dc:d2:f2:45:c4:79:6a:7f:
                    71:5d:28:53:cb:7b:f2:69:86:b6:5a:9e:ea:63:8d:
                    57:70:ee:b4:83:68:e1:f0:c1:2d:29:d7:3d:54:d9:
                    15:49:2d:ff:31:42:49:16:22:92:ec:e7:52:29:96:
                    ac:d8:1c:96:27:c6:97:b6:91:83:be:c7:44:55:c2:
                    2d:51:94:02:63:d6:69:2d:95:10:52:df:7b:df:b8:
                    a3:5d:a3:23:02:0a:d3:3b:84:93:b4:96:a5:64:49:
                    db:d5:a0:03:5a:8d:ca:5a:b6:d4:72:c8:35:25:3c:
                    e3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4D:02:BE:93:84:84:DE:DD:79:40:4C:3B:9B:B3:C8:D3:FD:37:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7fd129f3-1c17-3e2d-a77a-d605e894455d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:6400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:3b:45:be:b2:ea:18:b0:97:09:41:e0:37:27:85:58:6d:2a:
         f4:4b:40:ce:4f:cd:30:1a:c0:0e:c6:4b:0e:79:f5:3c:47:a7:
         b5:60:09:bc:c8:55:fb:61:4f:ec:48:3e:81:e4:f7:fa:ae:41:
         85:2b:1b:e2:bf:9d:95:51:0d:91:63:b5:07:a1:98:e9:79:c3:
         aa:50:32:4f:8e:19:31:43:4f:70:a3:72:df:00:7e:18:21:ad:
         ef:11:1f:92:16:09:a5:8c:26:e5:7b:ea:9c:49:22:e0:14:21:
         c5:51:84:ad:45:ce:8d:1e:cf:7c:da:2a:62:4c:15:37:6b:0e:
         4c:0c:cc:fd:f6:77:51:b7:7a:6a:bd:dc:10:52:61:4e:3e:76:
         c6:41:18:a0:3d:24:2b:2a:a4:07:41:b5:a0:dd:2c:17:fb:dc:
         13:28:ed:9d:a1:f1:fc:b1:a0:76:a0:d3:0d:6f:73:3b:b5:da:
         8f:bc:09:ea:bb:92:d6:8e:2d:fb:15:64:32:50:49:06:0f:01:
         38:f2:2a:ee:4b:60:1c:71:fc:f4:61:fa:5b:d4:94:eb:98:a7:
         bc:8b:c4:02:0f:0d:97:8e:1e:1e:eb:5e:da:48:e2:64:42:fb:
         59:8a:e5:19:26:f4:3d:2f:0c:b9:c2:27:cf:35:e1:02:23:93:
         f3:e8:ed:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:54:24 2026 by rpki-client