Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b139b6d2-f19b-3b9d-bd91-52c20ace3047.roa
File:                     b139b6d2-f19b-3b9d-bd91-52c20ace3047.roa (raw, json)
Hash identifier:          FLdcUwDgCMpl84OrP1d6de57XfUAuBClHnwCzV4p6pg=
Subject key identifier:   CA:70:85:32:75:57:77:32:E8:4A:A2:73:69:BF:67:EA:BA:6B:2D:16
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D4A8F8CDBE257A602E6066B60
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b139b6d2-f19b-3b9d-bd91-52c20ace3047.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        2607:f750:1315::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:8c:db:e2:57:a6:02:e6:06:6b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=7191d2ea-9c2d-461a-bdc1-a9d69245e8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:08:63:a0:92:41:9d:36:fe:68:f5:9c:30:
                    5b:12:66:0d:e6:43:fd:b4:57:3e:f6:44:14:75:ce:
                    e9:b9:cc:11:88:92:db:20:4a:6e:69:a5:ef:ec:0c:
                    32:df:e3:b3:21:0d:89:75:bb:f3:49:4c:42:c1:c4:
                    77:b1:93:03:f5:32:7d:c3:53:ae:d4:85:32:91:c7:
                    2b:f9:33:a8:f6:ad:23:96:ce:44:cb:bd:12:76:27:
                    a1:41:4b:fa:f6:2e:50:20:6a:21:d6:1a:4a:67:66:
                    7f:c4:dc:37:44:23:26:84:11:77:96:ae:4b:92:f3:
                    58:33:c6:06:a0:9d:e0:0a:17:09:83:93:aa:87:3c:
                    8b:e0:84:92:ff:b2:3f:e8:22:a6:fa:c7:d6:35:f2:
                    9a:f4:68:2d:9e:1f:76:20:6b:38:4c:59:29:ae:1e:
                    13:51:fc:31:98:3c:d3:4d:81:1d:0a:e7:6d:57:28:
                    36:6e:05:6a:4e:ff:b9:ea:c3:cc:2a:32:a9:d1:df:
                    16:20:a9:7f:41:d3:79:b6:17:d4:50:16:3f:21:94:
                    6a:21:0b:7f:68:b9:ca:c7:7b:ec:0c:5c:66:d4:13:
                    3f:61:9e:a2:5e:b5:7d:f6:76:3f:87:31:a8:5b:9a:
                    af:56:ec:7f:fc:ba:6d:ca:6e:e0:5c:24:a3:92:00:
                    9f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:70:85:32:75:57:77:32:E8:4A:A2:73:69:BF:67:EA:BA:6B:2D:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b139b6d2-f19b-3b9d-bd91-52c20ace3047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:1315::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f5:87:8e:24:29:fe:8c:01:96:a6:6d:5d:4a:eb:07:70:43:
         f5:8e:1f:10:27:dd:85:69:9b:63:65:e3:6e:72:ed:bf:88:eb:
         d6:9f:74:cb:1e:91:85:49:30:e4:e1:93:d2:a6:5e:b9:ba:2f:
         a9:d4:7a:3d:f4:5c:12:94:59:c7:de:30:25:10:64:26:8d:61:
         99:99:71:b1:c6:f0:f9:2b:3c:b7:94:3a:86:ba:e7:11:93:6d:
         42:4f:f2:7b:36:77:8b:cb:cb:8d:16:0c:b6:17:a2:40:27:b2:
         bd:6e:17:ad:a5:90:55:d6:a1:4b:4b:fe:86:ff:0d:3c:0f:fc:
         bb:61:3f:1f:60:e2:63:75:46:9a:5d:fd:70:a6:5c:95:11:e5:
         55:80:35:88:cb:f9:d9:78:7d:9e:a9:20:00:67:ab:c4:a3:96:
         fd:92:e6:e7:c6:a6:4e:c0:e4:24:2d:db:24:68:00:ea:e2:5a:
         5e:35:c8:23:1b:eb:24:a9:a5:f1:db:e1:4c:e6:1a:7d:8a:e2:
         de:30:4d:dd:74:3a:2a:c7:cf:34:47:b2:60:15:d1:58:20:63:
         73:72:e7:93:10:da:9f:82:70:6d:91:77:1e:43:c7:29:11:2f:
         75:fd:ca:24:0f:48:fc:36:aa:3e:2c:47:31:c8:bc:a0:71:27:
         df:bc:09:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:26 2026 by rpki-client