Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/faf6e1ca-30a5-3b59-9d48-5f12a850e0e4.roa
File:                     faf6e1ca-30a5-3b59-9d48-5f12a850e0e4.roa (raw, json)
Hash identifier:          kqVlnZwTIe8EeW/tPIdbFJBL3K2rc40rWV8qFxbgbvE=
Subject key identifier:   D1:C5:9E:80:8B:A8:38:EC:6C:28:E3:DC:0A:2F:E2:F2:FD:94:3D:A8
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EED524649D90F71F0C6F7B400
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/faf6e1ca-30a5-3b59-9d48-5f12a850e0e4.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:46:49:d9:0f:71:f0:c6:f7:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=f76c3f0d-0372-4d3d-9fa0-68f0fc40b35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:25:01:96:97:ba:e8:e7:7c:9a:e4:a7:62:22:
                    c1:89:d6:47:bf:a0:86:9b:47:95:51:0d:64:9d:25:
                    2b:4d:1f:fa:2d:08:42:96:f3:4f:63:d2:ad:49:de:
                    84:e3:e5:4e:95:13:be:5b:63:26:9b:83:f1:2a:45:
                    c9:2b:48:1c:af:0f:fd:24:f5:28:bb:1d:5a:1a:dd:
                    7e:6b:f4:b1:b7:9e:25:2c:d3:76:bd:49:02:28:bc:
                    9b:48:20:69:07:da:e0:ee:a7:82:8a:72:a8:18:5b:
                    a6:75:f6:46:53:6a:14:f1:88:f8:ce:74:d6:8e:ea:
                    f7:65:03:c0:65:aa:32:d8:b6:ff:21:49:86:3b:f4:
                    65:85:bb:f7:9a:51:da:55:95:d3:9b:ab:e7:e9:6e:
                    5e:e2:8d:0f:8b:7a:82:72:33:27:3b:88:13:aa:dd:
                    a8:3b:fd:c3:4f:03:8c:6d:ee:c0:44:05:9b:c9:99:
                    d6:4a:aa:3f:26:d3:57:ae:93:c8:92:c7:ba:5b:48:
                    1b:5b:e3:bc:b9:38:12:20:5a:12:0e:e4:a1:4b:3c:
                    ea:60:e4:8b:2d:8d:46:92:48:d6:51:77:8d:79:14:
                    56:fd:92:0f:5c:56:8d:52:5d:11:01:21:e4:e7:31:
                    f4:c7:de:e6:68:34:c2:3e:bd:ee:ff:5e:94:41:c0:
                    7e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C5:9E:80:8B:A8:38:EC:6C:28:E3:DC:0A:2F:E2:F2:FD:94:3D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/faf6e1ca-30a5-3b59-9d48-5f12a850e0e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:4c:72:ca:68:6d:2d:c4:90:2c:f4:c7:a1:8e:94:28:03:d9:
         b0:38:d9:bf:be:94:bb:f5:2c:b5:af:2b:9e:79:37:f6:21:27:
         f8:87:f2:75:12:45:84:77:2e:ca:74:50:d1:e0:17:cd:79:9b:
         82:36:f7:b9:99:d8:33:6c:ec:53:f3:ea:f4:e6:3e:71:d8:c8:
         f2:e7:c3:43:d2:f5:bf:03:d3:ba:57:0a:e5:dc:d4:88:1b:1d:
         a5:60:13:02:52:c1:1b:46:09:98:dc:28:21:d0:bc:d1:bb:1d:
         b3:23:40:17:f1:11:fc:ea:2f:a2:57:89:70:16:34:ab:2e:d0:
         67:e5:c0:b9:1e:03:cf:af:e9:52:c0:73:e5:02:a2:39:65:09:
         e8:d0:4d:5c:28:a1:fb:b0:60:06:55:f3:fb:23:cb:24:6a:23:
         26:fd:bf:c0:03:59:06:d6:7b:e5:6b:56:3c:c6:a7:54:b9:86:
         b6:b9:a5:7e:f6:c6:13:03:fb:6b:f0:00:0e:e2:4c:42:cf:65:
         38:21:b5:3e:49:a2:60:73:4c:33:41:c6:10:eb:7c:69:77:33:
         bf:4c:e2:59:79:65:b9:6c:de:20:ac:81:71:69:a4:91:84:e1:
         cd:66:ca:bf:4d:da:8b:6b:89:28:05:3a:b4:56:df:7b:4c:6f:
         e1:ef:b4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:42:47 2026 by rpki-client