Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c651a8c6-6091-32bd-9f7b-136ad390e55c.roa
File:                     c651a8c6-6091-32bd-9f7b-136ad390e55c.roa (raw, json)
Hash identifier:          xl67rb0VjLQ9Stf9PpIgTPWmZJsR+QHg8JWEIe453fc=
Subject key identifier:   22:1B:1B:8E:E3:EE:65:46:BC:54:21:0D:C9:43:39:71:42:E3:16:9C
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584E858F907917BB811F11242000
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c651a8c6-6091-32bd-9f7b-136ad390e55c.roa
Signing time:             Thu 16 Jul 2026 21:00:12 +0000
ROA not before:           Thu 16 Jul 2026 21:00:12 +0000
ROA not after:            Wed 14 Oct 2026 21:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:6062::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:8f:90:79:17:bb:81:1f:11:24:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 16 21:00:12 2026 GMT
            Not After : Oct 14 21:00:12 2026 GMT
        Subject: CN=c666f033-a5c8-402a-9df1-ce6f0940f896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e4:f1:90:0b:cb:62:b4:c0:7a:51:0a:d5:f8:
                    d4:80:60:b5:b8:11:97:7c:97:9b:40:98:68:ef:6c:
                    bc:b4:fd:e8:57:e2:3f:e0:eb:d2:84:51:63:b2:46:
                    97:f5:9f:d8:a6:f8:3a:cd:a0:56:11:4e:2b:fb:79:
                    3a:93:4a:3c:30:fc:e9:24:68:cc:3b:d5:f1:2b:df:
                    d7:44:ec:9d:e3:fc:9b:e6:4d:08:8b:e7:0d:df:8a:
                    d0:5b:15:ec:1f:61:f6:88:e9:29:19:7d:f6:c6:e1:
                    74:1c:52:56:bc:45:a9:21:cf:16:38:91:37:fd:51:
                    41:79:00:bf:b4:0a:61:bc:3d:23:e4:66:63:af:e5:
                    ba:ed:74:af:f3:08:51:27:03:b7:e9:45:7e:c6:82:
                    47:67:d3:e1:41:70:ce:34:7e:bc:f9:54:5e:62:24:
                    33:13:76:89:d8:9e:e8:bb:3b:52:fa:4a:1e:a8:3e:
                    f7:7c:db:d0:43:8f:e8:21:8b:f9:6f:90:81:b4:3c:
                    d1:7f:8d:10:28:17:96:a0:db:09:f8:3c:29:d5:30:
                    af:31:c1:16:fd:9c:41:b4:1d:0d:56:91:e0:bc:7f:
                    d4:67:ed:69:d9:09:65:a9:e3:c2:bf:0a:79:08:79:
                    d0:41:c3:ad:79:77:25:cb:0f:bd:9e:27:fb:08:75:
                    17:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1B:1B:8E:E3:EE:65:46:BC:54:21:0D:C9:43:39:71:42:E3:16:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c651a8c6-6091-32bd-9f7b-136ad390e55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:6062::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:45:e2:6e:90:f4:90:3c:07:a7:26:83:6b:d8:63:86:cd:9d:
         b8:79:2b:37:38:90:11:8e:87:95:42:da:83:8a:7e:cf:27:f9:
         2e:f3:96:95:e0:9e:0a:a3:60:09:96:1e:d2:33:64:0f:4f:8d:
         04:39:a6:ce:3b:20:38:e4:52:d9:03:a5:a0:2c:d2:ec:3f:17:
         83:8f:18:cc:19:07:e8:fd:cf:9e:3d:ae:59:2d:58:95:34:d5:
         aa:1c:42:47:6e:ba:7b:7b:43:6f:de:40:ee:a6:71:90:72:ee:
         fb:d8:92:32:fe:db:74:04:ee:17:6a:95:fc:3d:7b:0b:19:eb:
         43:cf:c7:e3:cd:be:db:41:c2:34:df:e6:4f:13:38:76:b4:64:
         cb:89:a2:9f:ab:83:f2:42:dd:82:84:ad:57:57:38:a3:db:d5:
         42:7c:1f:1f:06:12:d9:95:6e:6d:7c:c4:4d:c1:3b:9b:c7:32:
         0e:14:87:e6:88:a2:cb:8f:a9:7e:11:9a:5c:1b:4e:c2:64:b6:
         4a:22:72:18:28:5d:ac:df:20:ed:c6:f1:c8:8d:bb:49:9d:77:
         00:0b:e7:93:bc:24:37:d9:60:bb:dd:14:67:11:89:c9:21:0e:
         46:69:d8:14:fe:77:11:be:b0:e4:56:01:dd:95:c6:1c:39:11:
         7c:cf:9d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:58:37 2026 by rpki-client