Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/342a60b0-fd98-3b2a-a4c8-0d11674a798b.roa
File:                     342a60b0-fd98-3b2a-a4c8-0d11674a798b.roa (raw, json)
Hash identifier:          CeoOVjMGpbni1xMOxiEWbV89L2I0F6UU8aecL/fz/Jk=
Subject key identifier:   2E:24:C8:F5:9D:CD:70:BE:9C:6A:84:49:BB:44:EE:5F:8B:58:6B:4A
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA718490A521F62F1F24BC180
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/342a60b0-fd98-3b2a-a4c8-0d11674a798b.roa
Signing time:             Tue 28 Jul 2026 21:17:26 +0000
ROA not before:           Tue 28 Jul 2026 21:17:26 +0000
ROA not after:            Mon 26 Oct 2026 21:17:26 +0000
asID:                     23473
IP address blocks:        2607:f750:907a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:18:49:0a:52:1f:62:f1:f2:4b:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 28 21:17:26 2026 GMT
            Not After : Oct 26 21:17:26 2026 GMT
        Subject: CN=eaf82c41-8e3c-4608-b49b-4ba2abf586a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e3:14:e2:60:bf:35:49:90:75:22:54:25:3a:
                    86:66:4b:76:fd:0b:7f:ac:53:3e:bd:e0:d3:a6:b3:
                    95:ac:4d:07:f7:c4:58:ff:db:53:20:33:83:d9:a2:
                    21:4e:20:11:5f:0e:c4:bd:e6:48:99:12:e7:17:57:
                    0e:5c:db:c9:19:52:f0:f1:ab:9a:20:30:cb:df:82:
                    ed:a2:ff:b7:68:df:a1:67:de:e1:e5:91:68:c8:df:
                    4e:1f:11:23:84:9b:47:46:66:0d:d9:06:ff:c7:56:
                    f1:f1:e5:fd:ee:74:a0:be:98:3d:44:89:7b:c9:00:
                    71:31:bc:ed:c2:7c:30:1e:b3:8c:6b:fc:a4:77:9a:
                    5f:89:ad:3a:5f:fb:62:68:99:b2:db:33:5a:88:6c:
                    50:57:4c:92:4d:98:e5:99:e3:3e:db:5d:96:94:5e:
                    43:73:b6:9b:cc:42:e8:c2:76:af:35:09:63:e5:89:
                    2e:32:cf:61:11:ef:ca:60:1b:60:d5:f9:dd:0d:4e:
                    b8:9f:18:5a:55:39:8a:c8:ca:d1:e4:39:67:d5:da:
                    db:c6:aa:40:d7:3c:00:8b:9a:0e:c7:89:2f:cf:d7:
                    fa:5d:86:f0:64:4a:f6:73:ef:00:d4:3d:2a:a0:5d:
                    c6:07:5c:30:43:72:6d:43:b3:f3:58:a5:5c:27:e0:
                    bc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:24:C8:F5:9D:CD:70:BE:9C:6A:84:49:BB:44:EE:5F:8B:58:6B:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/342a60b0-fd98-3b2a-a4c8-0d11674a798b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:907a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:95:98:f4:9f:a7:c4:da:ca:af:c2:46:4f:73:e2:83:17:51:
         b6:93:a0:c2:62:3e:2c:c9:d0:17:a9:1d:39:93:e8:9e:fc:cc:
         85:76:84:cc:f1:25:25:92:b0:81:b2:6e:cc:8b:0a:81:2a:f7:
         b0:06:9b:2a:3c:4e:0a:0c:11:d2:39:fd:e3:fa:d5:45:01:3c:
         e4:3a:ff:d8:01:7f:a4:06:28:c7:32:cb:52:3f:df:18:33:0f:
         b5:f3:09:b4:4e:12:4e:53:1e:e7:6d:a5:c0:f6:95:77:0c:94:
         60:f4:56:9a:84:f1:4e:40:5c:cb:2e:65:b5:ad:f4:41:b1:9b:
         36:17:f9:88:a0:bf:7a:37:c5:19:27:18:9e:75:78:71:7a:5e:
         24:4f:92:d5:d1:7b:48:4c:ba:c1:c1:9b:51:97:79:6b:fd:c6:
         08:80:7a:b7:a7:06:20:14:5b:70:8e:f3:17:f2:84:43:7c:3e:
         f6:0e:21:60:7e:bd:f0:c6:9d:85:38:09:eb:44:2e:f6:4f:cc:
         73:f5:2e:ae:63:37:fa:d5:2c:73:4a:2d:9d:81:3d:29:c2:f4:
         d6:be:d5:03:f5:27:6b:dc:e3:eb:a3:e7:5a:d7:c7:17:4d:08:
         ea:a5:a4:b2:f0:8e:53:15:13:9d:79:e2:79:33:9b:de:3f:1a:
         7d:35:fe:4f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nGEkKUh9i8fJLwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDcyODIxMTcyNloXDTI2MTAyNjIxMTcyNlowLzEtMCsGA1UEAxMk
ZWFmODJjNDEtOGUzYy00NjA4LWI0OWItNGJhMmFiZjU4NmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eMU4mC/NUmQdSJUJTqGZkt2/Qt/rFM+veDT
prOVrE0H98RY/9tTIDOD2aIhTiARXw7EveZImRLnF1cOXNvJGVLw8auaIDDL34Lt
ov+3aN+hZ97h5ZFoyN9OHxEjhJtHRmYN2Qb/x1bx8eX97nSgvpg9RIl7yQBxMbzt
wnwwHrOMa/ykd5pfia06X/tiaJmy2zNaiGxQV0ySTZjlmeM+212WlF5Dc7abzELo
wnavNQlj5YkuMs9hEe/KYBtg1fndDU64nxhaVTmKyMrR5Dln1drbxqpA1zwAi5oO
x4kvz9f6XYbwZEr2c+8A1D0qoF3GB1wwQ3JtQ7PzWKVcJ+C8XwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFC4kyPWdzXC+nGqESbtE7l+LWGtKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzQyYTYwYjAtZmQ5OC0z
YjJhLWE0YzgtMGQxMTY3NGE3OThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf3UJB6
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGKVmPSfp8Tayq/CRk9z4oMXUbaToMJiPizJ0BepHTmT6J78zIV2
hMzxJSWSsIGybsyLCoEq97AGmyo8TgoMEdI5/eP61UUBPOQ6/9gBf6QGKMcyy1I/
3xgzD7XzCbROEk5THudtpcD2lXcMlGD0VpqE8U5AXMsuZbWt9EGxmzYX+Yigv3o3
xRknGJ51eHF6XiRPktXRe0hMusHBm1GXeWv9xgiAerenBiAUW3CO8xfyhEN8PvYO
IWB+vfDGnYU4CetELvZPzHP1Lq5jN/rVLHNKLZ2BPSnC9Na+1QP1J2vc4+uj51rX
xxdNCOqlpLLwjlMVE5154nkzm94/Gn01/k8=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:38:26 2026 by rpki-client