Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/18973c9d-731f-37a9-a2f9-cd0d1c7c88b0.roa
File:                     18973c9d-731f-37a9-a2f9-cd0d1c7c88b0.roa (raw, json)
Hash identifier:          3Z8aavZOrnPGbn0SYMBuyVlKqSCiP+0ewD2N7LmPxug=
Subject key identifier:   3C:58:A8:CE:C9:FF:47:05:DD:5E:C8:91:84:68:0D:53:C8:95:FF:35
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CC4AC76B33328BC0422E78A80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/18973c9d-731f-37a9-a2f9-cd0d1c7c88b0.roa
Signing time:             Fri 06 Feb 2026 02:00:30 +0000
ROA not before:           Fri 06 Feb 2026 02:00:30 +0000
ROA not after:            Thu 07 May 2026 01:00:30 +0000
asID:                     23473
IP address blocks:        2607:f750:906b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c4:ac:76:b3:33:28:bc:04:22:e7:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb  6 02:00:30 2026 GMT
            Not After : May  7 01:00:30 2026 GMT
        Subject: CN=1670eead-eb3b-4a8b-8c8b-b2d44cf70c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cd:a7:ed:6a:04:c7:5b:1a:1c:28:99:da:e2:
                    1c:e6:c9:cd:99:f5:a9:d2:8c:b7:1a:fa:b7:eb:b8:
                    bc:0c:e0:c2:be:39:65:d1:20:51:22:09:23:85:02:
                    9f:d5:3b:7d:2d:b9:fb:20:15:10:dd:8a:ae:7d:01:
                    60:24:4c:18:be:64:98:c8:35:83:f9:7f:8d:5c:a7:
                    1a:62:89:3d:43:3c:65:ac:69:01:cd:ea:bb:25:43:
                    ed:3a:ca:a9:9e:a3:62:e2:32:52:12:88:9f:23:f2:
                    c1:20:f1:ae:83:58:4c:0b:e9:26:38:79:cd:58:2b:
                    a6:0f:50:65:dc:10:c2:ce:c7:8d:ec:84:98:77:21:
                    bd:26:66:62:b8:8a:53:7b:75:fa:13:e2:56:3f:da:
                    18:1e:10:6e:b2:75:a3:d1:17:70:24:69:62:06:cf:
                    73:c5:97:c7:95:e3:73:20:c1:a1:2a:be:0b:d9:8a:
                    c8:09:d4:28:b2:9a:8a:1a:58:65:cf:db:d2:3d:14:
                    e6:16:df:ed:0c:5d:ea:e8:77:1d:39:18:2a:78:28:
                    81:2b:c2:b9:ea:15:f3:30:e2:f7:27:4b:cf:70:05:
                    66:a9:a9:f5:55:e5:5c:c2:68:29:6d:a8:eb:41:24:
                    10:0e:12:1e:7c:22:c8:4f:0b:4b:87:ab:f7:ab:e5:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:58:A8:CE:C9:FF:47:05:DD:5E:C8:91:84:68:0D:53:C8:95:FF:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/18973c9d-731f-37a9-a2f9-cd0d1c7c88b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:906b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:37:26:15:15:9a:d7:56:cd:85:b8:85:5f:27:0b:b2:3c:64:
         22:e0:ac:75:ad:c3:75:de:6f:e3:0f:60:4c:e3:c0:5b:67:ba:
         2a:52:df:22:f7:55:81:7c:36:24:57:47:7e:d1:4b:5a:9b:7e:
         9f:91:64:9b:80:b7:7e:e4:a5:14:77:2b:fd:ff:22:11:52:61:
         9e:39:f2:ff:68:a1:fe:a0:86:92:29:4d:be:e2:4a:7b:9a:60:
         ac:f5:8c:73:de:c0:86:2d:8d:10:2a:ea:0b:4c:73:80:71:50:
         92:0d:f8:23:b0:f3:bc:1b:b1:33:20:e8:65:10:e1:2f:5a:a9:
         05:e2:a5:55:92:67:20:e4:63:55:45:dd:21:a7:14:bb:b7:b7:
         af:fb:f7:17:d0:7c:b6:d2:75:c2:ad:4b:69:d4:f9:ea:b2:51:
         99:59:a0:b3:1a:84:3f:0c:48:cd:d8:29:40:ac:16:7f:68:5c:
         74:2f:50:34:c0:c4:5c:fd:3f:f1:35:2e:b3:9a:74:67:7c:c9:
         3b:f0:04:03:4e:d0:da:71:46:d8:6c:07:ee:30:72:38:e0:36:
         84:52:aa:d1:92:21:15:9b:f4:26:5a:75:f7:eb:aa:48:cf:20:
         28:f6:ad:ef:e8:c1:2b:04:1a:5c:a7:de:e5:50:bd:8a:7b:ec:
         97:f6:88:bc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzErHazMyi8BCLnioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDIwNjAyMDAzMFoXDTI2MDUwNzAxMDAzMFowLzEtMCsGA1UEAxMk
MTY3MGVlYWQtZWIzYi00YThiLThjOGItYjJkNDRjZjcwYzY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg82n7WoEx1saHCiZ2uIc5snNmfWp0oy3Gvq3
67i8DODCvjll0SBRIgkjhQKf1Tt9Lbn7IBUQ3YqufQFgJEwYvmSYyDWD+X+NXKca
Yok9QzxlrGkBzeq7JUPtOsqpnqNi4jJSEoifI/LBIPGug1hMC+kmOHnNWCumD1Bl
3BDCzseN7ISYdyG9JmZiuIpTe3X6E+JWP9oYHhBusnWj0RdwJGliBs9zxZfHleNz
IMGhKr4L2YrICdQospqKGlhlz9vSPRTmFt/tDF3q6HcdORgqeCiBK8K56hXzMOL3
J0vPcAVmqan1VeVcwmgpbajrQSQQDhIefCLITwtLh6v3q+Xt+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDxYqM7J/0cF3V7IkYRoDVPIlf81MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMTg5NzNjOWQtNzMxZi0z
N2E5LWEyZjktY2QwZDFjN2M4OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf3UJBr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEY3JhUVmtdWzYW4hV8nC7I8ZCLgrHWtw3Xeb+MPYEzjwFtnuipS
3yL3VYF8NiRXR37RS1qbfp+RZJuAt37kpRR3K/3/IhFSYZ458v9oof6ghpIpTb7i
SnuaYKz1jHPewIYtjRAq6gtMc4BxUJIN+COw87wbsTMg6GUQ4S9aqQXipVWSZyDk
Y1VF3SGnFLu3t6/79xfQfLbSdcKtS2nU+eqyUZlZoLMahD8MSM3YKUCsFn9oXHQv
UDTAxFz9P/E1LrOadGd8yTvwBANO0NpxRthsB+4wcjjgNoRSqtGSIRWb9CZadffr
qkjPICj2re/owSsEGlyn3uVQvYp77Jf2iLw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:37 2026 by rpki-client