Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a9796996-09c1-3c15-bf4d-e8d051844c1c.roa
File:                     a9796996-09c1-3c15-bf4d-e8d051844c1c.roa (raw, json)
Hash identifier:          l6iVVN6lnwLNnXWs4zDMNIQv7QX/dFMPBFM46SR+sZo=
Subject key identifier:   5E:7F:D0:3F:34:08:7C:AA:41:3B:19:34:0D:A4:B0:E8:5E:09:0F:C7
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F4987BDBC0218B82281BD0960
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a9796996-09c1-3c15-bf4d-e8d051844c1c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:1016::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:bd:bc:02:18:b8:22:81:bd:09:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8d744f48-bdc6-462d-859a-8e6014f21300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cd:11:d5:59:2d:25:77:09:0c:74:0b:b8:e3:
                    26:db:b2:c8:df:7b:b4:e8:a7:1e:44:eb:31:a1:ff:
                    e8:78:92:f0:a8:99:53:8d:c8:44:2a:c5:50:96:80:
                    76:ad:66:b3:37:cf:5e:a9:e6:53:0a:ac:b3:be:16:
                    52:6b:3a:5e:34:b1:95:f9:cb:ba:de:3d:f4:36:fd:
                    ab:84:21:98:b1:4f:6c:9f:8b:47:52:43:78:94:6e:
                    9f:0d:c4:1b:3f:70:5f:12:ab:f2:3e:ba:25:e0:49:
                    a1:36:38:89:54:cc:9a:2e:04:7d:d7:6a:75:d2:ec:
                    00:9d:58:ac:55:0b:97:65:02:66:b1:5d:24:5d:14:
                    41:44:28:94:86:58:84:0a:91:ef:5f:cf:ee:a8:48:
                    56:9f:fa:5f:c1:68:10:73:b9:ac:33:ff:ce:c3:4b:
                    9f:06:f1:72:e7:c9:02:f6:88:8a:64:e9:90:32:e1:
                    a4:af:7a:97:1c:cd:bd:e1:2e:dd:ac:62:1e:f1:41:
                    d7:7c:3d:ce:f0:d8:0a:79:cf:a6:73:1d:89:07:41:
                    d7:07:a5:ae:bd:58:29:55:b0:6e:6e:58:04:a1:ae:
                    f8:01:03:87:72:20:0e:c2:d7:13:fe:e3:96:ae:cf:
                    c6:92:57:52:01:cf:99:18:e1:9f:1b:c9:ee:ca:6b:
                    46:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7F:D0:3F:34:08:7C:AA:41:3B:19:34:0D:A4:B0:E8:5E:09:0F:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a9796996-09c1-3c15-bf4d-e8d051844c1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:1016::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:9b:1f:86:06:b8:85:2f:67:45:8b:d6:c3:d9:7a:d5:1e:d9:
         f9:5c:81:63:55:09:79:37:ca:a6:78:24:9e:0f:88:b3:13:2c:
         88:90:87:ab:38:d4:07:c5:cd:82:e0:38:87:9d:4b:46:44:be:
         3c:c7:ec:96:0f:7a:07:61:fc:ab:be:a6:e3:52:ff:e7:46:8b:
         d0:b0:e0:d5:2c:f2:5c:79:65:aa:34:f9:48:c4:8c:49:b9:b5:
         5a:fb:a3:30:7a:44:94:3c:51:bf:f6:6f:4c:b4:48:b6:4d:c4:
         99:6c:6d:a4:c7:3a:1b:0c:de:3e:8b:45:6c:64:d6:77:e4:4c:
         6d:6c:bb:a0:61:db:3b:44:43:d1:98:1b:b4:7d:e3:ac:79:32:
         af:4d:c4:fd:40:8c:98:8f:e5:4b:13:8a:a0:34:63:3d:27:5d:
         df:12:c5:7e:37:2d:08:c9:27:33:2e:86:66:a8:f5:63:4f:10:
         92:69:33:1e:ca:3a:e0:ca:7a:e6:7c:6f:1c:6e:dc:52:2b:16:
         f7:9e:52:88:77:d1:9a:b3:9a:3e:e9:b7:4f:27:1c:19:73:50:
         d1:49:b7:43:92:91:66:e5:17:de:ac:f2:a5:05:a6:54:e7:fa:
         9f:a2:f7:e5:0c:fe:1f:f5:ab:fd:71:8f:13:e7:af:56:11:3b:
         f6:e4:b4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:04:07 2026 by rpki-client