Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/28dd97dd-f1f2-3e73-9a02-fa36adc480db.roa
File:                     28dd97dd-f1f2-3e73-9a02-fa36adc480db.roa (raw, json)
Hash identifier:          8JHXA7rgipNWMAWIyeKDEWYL2i2W1G3IgHf7N/3f6QQ=
Subject key identifier:   9D:EA:74:7A:B3:CE:CF:09:08:BE:23:D0:BB:5B:96:D1:D3:A3:46:81
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA7938E7CB9BE4A7648487700
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/28dd97dd-f1f2-3e73-9a02-fa36adc480db.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:6066::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:8e:7c:b9:be:4a:76:48:48:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=46bbd8ab-0407-435b-932a-b099d8cf1b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:86:70:1f:3a:ac:57:f7:bb:3d:2f:70:3d:
                    2c:50:b5:42:08:17:11:cf:b0:e8:5d:16:05:38:4e:
                    b5:9d:9b:78:b0:dd:09:87:fa:b8:1b:df:54:f2:9c:
                    25:c5:64:6c:37:68:fb:e8:b2:8e:26:44:1e:7e:6a:
                    01:63:c5:cb:06:e3:3f:13:04:00:34:e9:58:15:a6:
                    7a:c7:af:2f:0c:1c:d7:c5:d2:80:f8:db:a6:02:3c:
                    c6:3e:c7:bf:38:b9:0d:97:23:35:a6:a7:c7:eb:99:
                    c9:d0:1f:fd:14:2f:d1:a8:56:7a:de:58:94:82:30:
                    f5:5d:cd:bd:d5:d4:34:bf:70:ae:da:7a:70:2a:28:
                    3b:8f:69:a0:67:bc:31:f6:af:61:ef:f6:84:7b:26:
                    12:cb:9e:70:fe:ee:9d:2c:90:72:bf:c1:04:dc:48:
                    df:c5:3f:ff:93:d7:80:16:73:4b:5e:a2:e8:60:dd:
                    0f:dd:5f:9e:f9:fc:a1:80:cb:f1:bc:e7:b5:31:c3:
                    ff:8d:c5:50:dc:ac:e0:20:fb:69:d6:2c:39:e0:16:
                    bc:42:b6:e8:92:70:aa:2e:31:b4:70:ef:39:e1:f3:
                    05:d1:de:bc:94:58:95:10:1e:83:ee:26:1b:1d:36:
                    05:ed:69:2f:81:95:a9:bb:c1:6d:8b:e2:ff:df:2f:
                    c9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EA:74:7A:B3:CE:CF:09:08:BE:23:D0:BB:5B:96:D1:D3:A3:46:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/28dd97dd-f1f2-3e73-9a02-fa36adc480db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:6066::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:66:a4:08:58:2b:81:c3:aa:ac:2c:17:18:7f:8d:d6:db:2e:
         02:1d:3b:03:47:81:cd:27:88:af:62:c6:c8:00:2b:a6:e1:ed:
         65:37:29:66:59:70:81:d1:c3:f3:bc:ec:3e:77:2d:b3:0f:17:
         3f:2b:33:97:38:06:4f:fb:20:89:f9:e1:7c:59:06:0a:aa:e4:
         e3:5c:d5:48:67:e8:9e:0e:c4:cf:a1:34:78:76:03:08:f9:81:
         43:e8:00:0e:a7:e4:99:de:1b:45:18:f7:d2:7d:55:32:3c:08:
         38:50:70:0d:74:d6:2b:ef:45:1e:33:7f:d5:78:f7:7e:ee:47:
         28:41:47:9d:2f:00:03:7b:50:78:5f:f0:69:35:bd:f1:dd:e5:
         a5:66:56:a9:f7:a6:5c:45:a6:d4:7f:02:6d:de:01:51:4d:d4:
         c5:04:35:a6:83:49:d2:07:2d:0a:9a:27:3e:e1:ce:0f:f4:b2:
         27:f4:7e:c6:01:10:f9:88:2e:4a:37:68:2f:64:32:09:ab:e9:
         32:88:0c:91:55:32:ad:c7:e5:39:f5:e4:b4:0d:00:09:e9:83:
         9f:10:32:12:60:24:f4:59:be:04:71:d8:bf:f0:f5:f6:34:01:
         42:21:7b:f4:ec:cd:f4:37:61:de:c8:2a:34:21:fc:2b:17:5b:
         86:4d:45:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:51:27 2026 by rpki-client