Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dc20eb5c-aa39-3ff8-8ea8-e1c351b5aa05.roa
File:                     dc20eb5c-aa39-3ff8-8ea8-e1c351b5aa05.roa (raw, json)
Hash identifier:          Ad3xEH1gN6Mrir9/T2wKz1kuvu9pVqMT8y0WF3xbEe8=
Subject key identifier:   C8:AA:19:11:63:C1:73:77:1D:05:0F:70:72:43:A4:69:36:41:A7:F2
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F27F260632EC88AD870AD0A40
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dc20eb5c-aa39-3ff8-8ea8-e1c351b5aa05.roa
Signing time:             Sun 13 Sep 2026 01:00:12 +0000
ROA not before:           Sun 13 Sep 2026 01:00:12 +0000
ROA not after:            Sat 12 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:1318::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:27:f2:60:63:2e:c8:8a:d8:70:ad:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 13 01:00:12 2026 GMT
            Not After : Dec 12 02:00:12 2026 GMT
        Subject: CN=fe00c218-a05a-4f26-8fba-96dbf0aeea42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d0:b4:a3:fc:79:96:94:4d:74:1f:4d:92:3d:
                    86:76:ff:57:c2:43:34:a0:1b:6f:83:36:84:8c:70:
                    ea:f8:8d:09:3b:73:4a:37:a0:fc:a6:71:01:ef:93:
                    76:52:fd:20:f5:08:d7:14:52:60:9a:1f:4f:94:ec:
                    9c:6f:53:e1:b4:4f:f7:96:7b:f7:1d:01:78:d2:78:
                    7d:f4:6e:cc:4a:88:61:71:e8:f6:2b:2e:2d:ed:e8:
                    ee:f5:8c:f8:bc:21:d5:eb:26:e5:58:f5:54:f5:b8:
                    c2:67:cd:0d:ed:c0:c3:54:e7:53:60:03:7f:7a:34:
                    5a:5d:6e:f8:af:95:e8:c2:9a:ce:b1:c1:24:ed:1a:
                    aa:f9:3a:d6:1c:6f:9a:a3:2d:ee:91:8e:9f:d6:1c:
                    a1:8f:8e:42:bb:48:64:50:60:2a:9f:39:25:54:b5:
                    82:d4:44:3b:e9:28:76:8c:e3:31:82:01:ec:aa:f8:
                    3e:64:fc:97:ac:25:14:8d:04:ad:71:a1:3d:45:8d:
                    91:e4:8a:00:3a:00:bd:ce:c3:d8:39:65:0c:04:4c:
                    c0:7e:da:14:a1:60:f3:c7:46:46:b4:e6:d5:35:93:
                    31:c8:0e:92:5b:3d:f2:1f:1b:3d:9d:5a:56:21:10:
                    88:5f:3e:5d:56:cc:2c:b6:f6:ec:91:d0:34:da:d5:
                    09:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AA:19:11:63:C1:73:77:1D:05:0F:70:72:43:A4:69:36:41:A7:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/dc20eb5c-aa39-3ff8-8ea8-e1c351b5aa05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:1318::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:cb:5c:46:76:1e:05:51:7e:c8:47:2f:c1:90:86:12:98:e0:
         2b:6d:be:fb:a3:e0:96:b3:09:44:55:c7:f2:f4:cb:cf:5c:0f:
         d5:30:1f:52:c0:99:21:55:e4:41:89:7d:c1:71:f0:18:29:19:
         94:da:a0:91:22:68:0d:87:21:f6:e9:b3:ca:da:05:05:3a:ae:
         29:8b:84:95:19:b3:a5:ea:be:0b:87:a8:20:ca:7c:c1:8e:b1:
         8d:d9:e3:a4:d7:b3:c0:f7:03:a8:e4:f1:3f:77:a3:c5:a6:c9:
         78:ac:8f:e6:5b:90:7a:5c:3c:68:30:47:77:8b:86:9a:db:e5:
         79:77:50:34:d5:72:44:23:56:44:55:37:b7:bb:52:86:3c:00:
         90:6d:06:99:48:33:b2:00:03:e5:3a:15:9e:58:16:b4:bb:1c:
         1a:27:98:a4:73:af:30:e9:64:29:aa:30:33:42:e8:74:37:f2:
         bd:31:a3:00:31:13:59:b9:b6:48:18:57:7d:2d:37:56:c5:f5:
         cd:68:68:f8:4f:9d:a4:65:e7:7b:d7:c1:2d:eb:58:71:f6:2c:
         0c:49:ab:88:a5:b2:d2:16:2f:ca:1b:dc:59:4e:15:0d:83:fc:
         2f:76:d8:40:97:ce:c5:ef:fd:43:09:27:41:e1:57:89:bc:da:
         42:b5:6d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:01:45 2026 by rpki-client