Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b139b6d2-f19b-3b9d-bd91-52c20ace3047.roa
File:                     b139b6d2-f19b-3b9d-bd91-52c20ace3047.roa (raw, json)
Hash identifier:          pJ19Hs8aoWmUNpTME1AHAK7p1GE4hbzins7XEEdML9M=
Subject key identifier:   28:54:FE:DD:16:BF:96:0D:C0:15:91:4C:EF:8B:F4:D0:54:55:5B:7D
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B8B1C7C27C231BD5E6D1968C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b139b6d2-f19b-3b9d-bd91-52c20ace3047.roa
Signing time:             Thu 16 Oct 2025 18:22:27 +0000
ROA not before:           Thu 16 Oct 2025 18:22:27 +0000
ROA not after:            Wed 14 Jan 2026 19:22:27 +0000
asID:                     23473
IP address blocks:        2607:f750:1315::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:1c:7c:27:c2:31:bd:5e:6d:19:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct 16 18:22:27 2025 GMT
            Not After : Jan 14 19:22:27 2026 GMT
        Subject: CN=e08c0a70-1fc0-437e-b4f3-09650b340f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c2:99:e3:5a:54:00:0f:c3:82:75:3e:dc:ec:
                    d3:79:77:90:6c:44:8e:64:88:6b:8b:8e:30:e2:fa:
                    97:70:2c:ee:a5:c7:83:0e:47:59:f2:03:63:1b:97:
                    8c:ce:a2:07:09:47:f9:c6:eb:d4:85:9c:e8:10:25:
                    af:14:93:28:02:58:d8:11:84:5a:18:2d:41:91:3b:
                    08:e5:fc:c3:11:e8:22:09:8e:4a:ac:f9:ae:18:9d:
                    b9:fb:d6:9f:b7:5a:c0:82:14:01:50:7a:2f:2f:67:
                    5c:d3:8d:de:09:a8:86:79:65:ab:fe:1d:4e:fb:ed:
                    ba:41:a4:d9:c9:51:86:72:cb:b3:ee:49:3a:e4:e4:
                    da:0b:bf:5a:1a:b1:37:1e:f6:21:24:ae:ec:e0:53:
                    c8:45:3e:8f:83:5d:f1:ab:b9:36:4f:25:e5:93:9d:
                    7e:b7:fd:a0:ea:a2:76:38:f1:25:50:26:07:b5:ad:
                    e8:68:85:34:d2:3f:7b:17:f0:81:cc:28:4a:49:b5:
                    9b:f7:5a:2e:8d:ba:c7:d3:10:dd:50:52:48:23:14:
                    62:28:01:49:75:84:44:c1:1d:5e:22:d5:9d:5e:15:
                    26:08:e9:69:e6:65:df:f6:fe:99:88:b1:24:02:5d:
                    56:34:c5:24:a2:31:8d:e1:19:6b:d1:a7:a2:a1:b3:
                    eb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:54:FE:DD:16:BF:96:0D:C0:15:91:4C:EF:8B:F4:D0:54:55:5B:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b139b6d2-f19b-3b9d-bd91-52c20ace3047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:1315::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:b0:88:68:6c:11:39:ea:58:88:18:39:99:7c:f9:ca:fc:f9:
         bb:90:5e:df:dd:53:ad:0a:5c:ed:e1:04:7b:9f:6d:27:88:e7:
         48:7e:53:a0:b8:0a:a2:ae:41:78:47:ea:14:4e:3c:04:2e:6b:
         46:bb:f7:73:99:7f:2c:bc:b5:55:e3:c8:a3:f1:64:4d:75:36:
         27:41:3b:aa:d7:4a:ea:6d:3b:e0:c1:0d:3b:ef:c5:2c:ff:04:
         42:1e:e8:4c:63:4e:9c:b8:6a:97:f8:63:18:41:bf:5a:3a:99:
         6e:84:20:01:ad:68:8f:47:ee:a4:b9:7d:62:15:76:10:f4:e6:
         e2:8a:60:00:03:45:8a:2e:f8:a3:13:59:79:4e:19:03:4a:2f:
         6b:e1:65:1a:39:7e:f9:ef:bb:d3:ce:91:14:c4:9c:98:4f:c1:
         2e:fe:17:1d:9d:f3:52:96:e3:fd:8f:51:0b:e7:7c:03:c2:c9:
         b0:69:ab:61:6a:eb:76:a8:ae:4c:99:ae:08:d5:06:31:8b:2a:
         2d:09:f2:e4:16:69:ff:26:ce:8e:6d:0f:db:ba:38:16:32:e8:
         a4:51:0e:08:bc:de:40:f6:45:08:5f:49:71:64:4e:95:15:bc:
         87:4f:55:1b:6e:d6:af:07:66:c1:ab:93:de:70:bd:a2:f1:6c:
         3a:2b:8c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:21:38 2025 by rpki-client