Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f359e910-8e0b-3e6b-b4ad-d28abc3c8def.roa
File:                     f359e910-8e0b-3e6b-b4ad-d28abc3c8def.roa (raw, json)
Hash identifier:          9Jwf1V6M7REZUrbCq9lLYPPPTHNJ2AjjmnjHQYVpc1U=
Subject key identifier:   6C:7C:31:3A:35:35:6E:02:D7:3E:0D:57:12:CF:49:54:DA:D2:96:94
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EE4F1F117DA1D7189BB7C74C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f359e910-8e0b-3e6b-b4ad-d28abc3c8def.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:3000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:f1:17:da:1d:71:89:bb:7c:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=5f31cb17-f3a6-487c-974f-828381b62e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:66:d1:15:cb:00:7b:b4:37:a5:9b:24:b3:c7:
                    d4:47:a0:25:eb:81:27:6a:38:9f:e5:47:b2:8d:ad:
                    57:69:2c:c7:f2:ab:d7:61:a4:f1:59:63:25:6a:cc:
                    a7:e3:f2:0a:d2:2b:75:4f:4b:b4:8d:47:00:86:fc:
                    44:85:a7:6c:54:38:7c:66:4b:d2:df:c3:b2:bb:be:
                    63:58:6d:e3:c3:79:f0:c2:7c:50:9f:cc:98:b3:b8:
                    46:81:ea:16:e3:66:37:d2:c8:a3:86:a6:2c:f2:fc:
                    8f:74:f6:c9:74:48:7a:a7:90:3b:99:d4:0c:ae:ea:
                    af:ee:2c:78:1c:42:a4:88:85:d0:74:92:9b:05:b6:
                    36:2c:e0:7c:c3:42:f6:91:44:82:6f:ac:6b:d6:20:
                    43:a3:04:d1:46:dc:70:4c:b2:85:14:cf:4c:aa:86:
                    25:a0:1e:22:8a:05:68:eb:0e:87:c4:7e:46:89:c2:
                    89:f2:9b:56:f0:c5:74:fd:f9:0b:77:db:72:a7:6e:
                    74:bd:b7:c6:17:84:31:7d:a2:a1:87:db:36:ac:70:
                    5d:c4:76:2a:30:33:11:e7:72:df:d2:c4:c0:15:47:
                    44:91:bb:d1:19:cb:58:5c:d2:7f:e1:6a:a8:11:f6:
                    de:7b:7f:45:63:5a:87:65:55:14:f1:91:7f:36:cf:
                    06:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7C:31:3A:35:35:6E:02:D7:3E:0D:57:12:CF:49:54:DA:D2:96:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f359e910-8e0b-3e6b-b4ad-d28abc3c8def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:5c:9e:24:ed:45:3f:d0:f4:86:2e:a0:88:01:27:a6:1b:e7:
         34:94:2d:ce:68:e6:16:40:83:41:2b:d4:03:92:c3:c4:c7:29:
         6d:c6:6e:6f:2f:14:34:a5:a5:14:12:aa:88:df:90:74:56:d0:
         25:7d:1e:27:33:06:c9:9e:25:dd:38:ae:15:ee:f8:8d:a2:02:
         75:42:a4:b6:de:df:56:17:49:bf:b7:8e:94:7a:28:7d:1c:02:
         ae:37:69:89:85:ee:86:9d:72:1e:b6:bc:3c:1b:ab:43:b4:77:
         c8:6a:41:6d:5e:9e:d3:07:e9:8e:2b:18:67:68:44:6a:86:a8:
         94:da:f0:33:25:39:d4:a8:ff:17:3d:23:7f:70:25:b3:06:a7:
         c6:c0:1a:ee:76:5c:21:69:61:31:66:5c:97:b8:a7:65:db:15:
         89:c2:96:fb:6c:78:de:f6:b9:ce:f3:a2:bc:37:3d:23:a1:6c:
         49:8d:11:f4:7f:e8:e5:d2:1f:11:dc:dd:f7:ff:0d:7f:07:07:
         42:ba:b8:bd:c2:a5:f7:16:85:b4:32:48:95:fb:23:3a:cb:22:
         70:71:30:62:a9:1a:36:6e:d5:97:ac:3b:79:31:3c:5d:f4:8f:
         7d:84:93:15:14:df:4e:82:e4:29:dc:bb:6c:2d:b4:37:39:df:
         90:bd:9f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:01:41 2026 by rpki-client