Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a3ac0099-cc48-3eb9-88ec-89afcc1d38bc.roa
File:                     a3ac0099-cc48-3eb9-88ec-89afcc1d38bc.roa (raw, json)
Hash identifier:          aa1VYvOwl6sm3f4DG+Gri+duRA18EuSzlU6oj3d11Tw=
Subject key identifier:   F5:D6:01:5E:A6:56:83:57:70:33:9C:6E:CC:76:30:C0:CA:74:AD:E7
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E8F54EE0CC9635EE501690B40
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a3ac0099-cc48-3eb9-88ec-89afcc1d38bc.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     23473
IP address blocks:        2607:f750:6800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:54:ee:0c:c9:63:5e:e5:01:69:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=269a8bbd-07bb-4dca-ae2a-5b5e6f5389aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e4:38:13:ed:c1:46:cf:96:23:e9:b5:b5:f7:
                    9b:72:52:5b:04:d2:1f:01:59:7f:5d:c1:53:b4:38:
                    d1:4e:20:09:ec:6f:26:23:94:f9:4c:2d:e6:6d:37:
                    5f:3b:c6:17:75:bf:1f:c7:79:6c:1b:4e:7c:97:5b:
                    7c:fe:97:87:00:cf:1d:c8:d1:8c:80:e5:9d:f2:ab:
                    db:d8:30:5d:9b:9a:80:e1:cf:c9:66:7e:b2:d7:aa:
                    d6:92:17:d2:32:01:06:4a:4b:c7:66:7c:06:a4:0b:
                    8e:6a:b0:94:c0:64:83:8d:b1:4f:9a:bc:75:61:de:
                    1a:d2:c6:ca:80:bf:89:d3:3b:d6:23:c4:87:41:e5:
                    af:99:03:83:12:aa:74:4f:93:b4:db:bb:31:b0:49:
                    7f:e2:bc:71:99:27:f9:2d:11:55:8c:20:b6:b3:f2:
                    f1:7a:0f:f8:a6:09:f1:58:b2:2d:fd:5a:6e:89:43:
                    0d:df:57:b7:cd:79:3b:d4:7c:52:cb:55:f2:35:62:
                    ac:e5:b8:c3:f3:61:ed:40:1e:ba:22:17:cf:71:19:
                    6a:8c:e1:c7:63:96:50:54:3d:43:6e:a0:b9:46:a2:
                    ae:1d:e8:5b:93:34:a6:a6:e2:8b:26:44:68:91:56:
                    8a:d7:3c:57:6a:45:d1:55:65:25:83:fd:66:fc:d5:
                    eb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D6:01:5E:A6:56:83:57:70:33:9C:6E:CC:76:30:C0:CA:74:AD:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a3ac0099-cc48-3eb9-88ec-89afcc1d38bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:6800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:98:ba:7f:35:6f:76:03:31:d0:95:5d:f6:13:5c:9e:b5:b0:
         a1:27:1f:b1:2e:1a:06:e7:06:39:70:09:bb:5e:1c:f2:71:d4:
         3b:78:ec:f6:b5:db:e9:77:49:d4:46:96:67:0b:66:68:06:d2:
         58:18:ae:3a:9f:bc:16:b7:c8:1f:ff:1d:fd:b1:c7:1b:16:db:
         45:52:16:6f:97:88:8b:84:27:73:58:a5:b2:75:f9:de:a7:59:
         17:bb:56:f9:68:3f:d5:a2:c7:cb:48:f4:52:df:2a:8a:18:ce:
         68:ae:1c:0d:16:11:bb:90:07:1c:74:52:97:f2:bd:6b:a1:27:
         41:ab:16:8f:74:20:2c:d6:60:4a:37:e0:9e:50:e5:91:3d:4a:
         67:09:14:9c:1e:a6:a1:ee:a0:c3:fe:64:20:e4:86:47:97:02:
         b5:36:09:15:6a:94:b1:9d:49:84:eb:ed:d2:d6:99:57:98:2e:
         98:61:7d:69:a7:2b:a2:a6:29:88:e7:cc:a2:72:0a:ef:07:c3:
         3a:ba:fb:92:a9:80:cd:23:eb:c2:ee:46:0c:fe:76:ee:36:a1:
         56:3f:73:41:04:d3:f6:c6:7f:1b:44:83:78:18:eb:d9:4c:1e:
         91:d0:d8:c6:3e:b0:2e:d8:15:f9:b3:b0:68:5d:09:ef:d0:0c:
         ad:72:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:10 2026 by rpki-client