Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/12c98bee-4339-30a0-b1a5-e64b17859ffa.roa
File:                     12c98bee-4339-30a0-b1a5-e64b17859ffa.roa (raw, json)
Hash identifier:          cU27Jli4zCq/P6gKnLIOZvI4chUXsfZiZjLDV08Qm/Y=
Subject key identifier:   44:0E:6E:2A:19:58:AE:03:BD:E2:5F:01:A9:61:DE:9B:51:1D:F0:1E
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA7938D5D7076462989778C80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/12c98bee-4339-30a0-b1a5-e64b17859ffa.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:9075::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:8d:5d:70:76:46:29:89:77:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2ce57674-a889-49db-8951-ec0642f3756a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:bc:a1:d9:9b:23:15:cf:7c:1d:06:88:d9:
                    e0:a3:cd:d8:86:3d:b1:1f:91:8e:e1:38:0b:9b:d1:
                    1c:89:4b:55:e2:87:ce:96:af:c9:76:f9:d6:c8:4c:
                    22:f3:43:df:1e:cd:96:3b:eb:8e:79:03:d3:18:9d:
                    e3:fa:4c:a3:1d:38:32:4b:f9:b3:26:f2:8a:45:bf:
                    8a:11:df:e6:95:fd:f9:40:30:bb:66:ca:08:d8:52:
                    42:ad:aa:9c:75:91:81:a0:62:f1:57:3b:a5:91:90:
                    d2:ca:46:e0:7f:aa:ae:72:81:7c:5e:b8:c7:37:14:
                    36:bf:f4:66:08:94:5d:21:3f:50:9e:70:8b:20:f9:
                    53:38:2a:68:85:1d:3a:e6:c1:7f:1d:bd:43:aa:82:
                    a0:29:43:28:9b:49:92:d4:4f:08:bc:ce:74:96:c5:
                    e9:5b:88:c4:3a:7e:61:3a:ae:82:3d:d0:81:50:21:
                    5f:58:a1:82:41:93:bb:78:79:cf:38:94:2a:4b:67:
                    c2:c0:8d:5e:a6:f2:4b:19:35:e6:85:34:f3:1a:fa:
                    db:9f:7b:5b:ae:29:35:37:7e:ff:f8:b6:a7:9b:4c:
                    d9:2b:61:3d:19:17:4d:1f:db:0b:f8:45:69:af:be:
                    68:ee:04:10:ca:02:69:0e:35:65:d8:13:20:8b:30:
                    7d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0E:6E:2A:19:58:AE:03:BD:E2:5F:01:A9:61:DE:9B:51:1D:F0:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/12c98bee-4339-30a0-b1a5-e64b17859ffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:9075::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:0f:f1:10:b7:11:c5:fc:d1:33:3e:ba:dc:5e:77:82:be:1f:
         45:ac:ac:91:19:26:de:bc:08:ef:83:ef:60:b3:a8:4e:6a:0a:
         f9:ce:ad:d4:57:a7:95:45:0f:0c:7e:03:e4:26:01:7e:12:2f:
         2c:4f:6a:10:d3:e3:00:56:d6:1e:aa:0d:c8:e1:ad:5e:90:f6:
         ca:3a:6c:b5:df:ec:a3:14:df:06:01:6a:86:98:4f:ac:2a:9d:
         35:c5:d4:86:d6:68:d4:7e:26:b8:82:77:02:29:65:54:20:dc:
         ad:64:21:51:01:4f:43:3c:1e:c9:c6:68:fb:24:92:90:be:72:
         f9:10:81:4b:ee:eb:ba:c7:a6:1d:9c:2a:c5:f1:ce:18:63:30:
         61:1f:07:8b:4e:72:ec:ee:f0:70:e3:02:9e:40:bc:f2:70:3a:
         ca:e3:26:af:a9:9f:98:56:5c:d5:f7:5d:b2:2a:5b:c7:bd:6b:
         d7:cd:68:bd:01:e4:4c:9d:98:71:8b:fb:b5:aa:55:85:be:05:
         2d:a2:75:6f:a7:f0:2d:06:e4:98:e5:f3:be:17:d6:a2:68:4a:
         e0:58:44:c5:2c:d0:c1:68:b3:e2:a1:ec:90:22:6d:c4:a6:de:
         7f:aa:48:c1:05:38:e4:a2:20:b3:d3:f0:a2:db:d7:a4:81:b8:
         72:7d:1e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:45:34 2026 by rpki-client