Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/363b18b4-37d7-3e95-88a5-83f735aa4c64.roa
File:                     363b18b4-37d7-3e95-88a5-83f735aa4c64.roa (raw, json)
Hash identifier:          +Ril0mYcXx6B18Z5gtOYkGIj21PGJRyv85XgdBbY91E=
Subject key identifier:   E2:A8:27:9D:DB:D4:88:79:4E:11:5F:AD:27:C1:1D:69:25:FE:76:49
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EF87CE0B55571CD752EE0B080
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/363b18b4-37d7-3e95-88a5-83f735aa4c64.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:906f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:e0:b5:55:71:cd:75:2e:e0:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=60407e5b-f7e4-443b-88e6-b02f0f20465a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e0:22:b1:77:60:55:42:6a:9c:21:9a:2e:bc:
                    31:2f:5c:4e:f9:3c:13:2e:be:7d:52:e7:62:d0:67:
                    e4:e3:f6:3b:c1:ed:3c:eb:de:29:a1:ac:ad:74:56:
                    13:e8:d9:f7:a8:52:6c:55:9d:f8:d1:35:0a:a2:1b:
                    9f:e8:dd:4f:f9:08:a7:7d:f3:8d:eb:d9:86:85:cd:
                    31:7a:79:08:73:6a:c0:49:07:7b:7e:2b:11:b7:36:
                    b6:b4:97:25:86:83:cc:29:a6:6a:ad:0e:86:fe:98:
                    e8:70:eb:fe:5d:12:62:02:27:92:e3:0a:06:31:c9:
                    bd:40:fb:00:fb:d4:97:41:45:e1:8f:9b:2b:06:fb:
                    98:da:5a:0a:38:ad:bc:e3:88:4c:95:74:43:2d:b8:
                    01:d6:76:8a:2a:a5:39:22:25:88:5e:d3:a9:ce:ee:
                    9b:1f:cd:14:6c:99:6c:47:31:c3:b3:1c:82:e9:11:
                    5a:1c:1f:69:41:2b:c4:8e:0e:b1:08:c4:4a:ac:f5:
                    e4:60:2e:df:8f:f1:44:6a:6e:4c:61:e3:08:00:e0:
                    b1:23:c9:5e:5e:28:ed:16:93:35:ec:43:d8:b2:8a:
                    31:83:df:26:a7:3e:48:b8:74:09:d5:44:d0:92:d6:
                    dd:33:bd:a6:c9:9f:40:98:a8:a8:bc:6d:39:0d:8d:
                    0f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A8:27:9D:DB:D4:88:79:4E:11:5F:AD:27:C1:1D:69:25:FE:76:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/363b18b4-37d7-3e95-88a5-83f735aa4c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:906f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:cd:0e:ed:1f:82:4c:97:23:45:21:44:ab:38:a0:4c:7c:55:
         d4:95:27:67:b1:b7:9a:34:df:6b:9d:f2:da:8f:b3:74:54:af:
         96:27:aa:a4:86:7d:a3:9c:e5:b0:72:68:68:95:9e:f1:1a:0b:
         8c:7a:a4:df:3b:fb:fd:bc:52:d4:90:05:74:c7:7d:78:09:db:
         a0:71:14:96:0c:cb:fe:a4:55:04:22:7a:45:42:f3:7c:3d:95:
         97:a4:72:65:89:e1:0b:55:f4:38:c7:78:ea:86:94:93:43:74:
         63:22:3c:10:5d:07:cf:da:cc:3d:e3:08:b1:50:e4:fe:ff:24:
         5d:95:b3:b8:f9:80:f7:ea:25:66:8b:50:62:b3:c1:31:ae:bb:
         a9:d5:87:bf:92:00:73:e2:4a:ab:a1:64:7b:26:d9:ad:e0:5b:
         25:4a:ed:15:6f:99:d4:7a:ac:93:cf:66:41:9f:0d:97:cc:97:
         54:bf:fb:38:08:45:6a:c9:f8:38:ba:9d:67:9b:4e:cf:e4:4d:
         ed:c1:5d:54:27:5f:93:1f:fb:7f:a9:c0:d9:f8:34:1f:ec:ea:
         66:d0:42:cf:32:26:e6:24:4e:d3:84:5f:76:08:60:fb:d2:cc:
         4d:bd:fb:91:fd:e0:3e:c7:53:91:f6:7c:44:ea:9d:93:e8:56:
         81:bc:db:82
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE74fOC1VXHNdS7gsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk
NjA0MDdlNWItZjdlNC00NDNiLTg4ZTYtYjAyZjBmMjA0NjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OAisXdgVUJqnCGaLrwxL1xO+TwTLr59Uudi
0Gfk4/Y7we08694poaytdFYT6Nn3qFJsVZ340TUKohuf6N1P+QinffON69mGhc0x
enkIc2rASQd7fisRtza2tJclhoPMKaZqrQ6G/pjocOv+XRJiAieS4woGMcm9QPsA
+9SXQUXhj5srBvuY2loKOK2844hMlXRDLbgB1naKKqU5IiWIXtOpzu6bH80UbJls
RzHDsxyC6RFaHB9pQSvEjg6xCMRKrPXkYC7fj/FEam5MYeMIAOCxI8leXijtFpM1
7EPYsooxg98mpz5IuHQJ1UTQktbdM72myZ9AmKiovG05DY0PyQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOKoJ53b1Ih5ThFfrSfBHWkl/nZJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvMzYzYjE4YjQtMzdkNy0z
ZTk1LTg4YTUtODNmNzM1YWE0YzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf3UJBv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEHNDu0fgkyXI0UhRKs4oEx8VdSVJ2ext5o032ud8tqPs3RUr5Yn
qqSGfaOc5bByaGiVnvEaC4x6pN87+/28UtSQBXTHfXgJ26BxFJYMy/6kVQQiekVC
83w9lZekcmWJ4QtV9DjHeOqGlJNDdGMiPBBdB8/azD3jCLFQ5P7/JF2Vs7j5gPfq
JWaLUGKzwTGuu6nVh7+SAHPiSquhZHsm2a3gWyVK7RVvmdR6rJPPZkGfDZfMl1S/
+zgIRWrJ+Di6nWebTs/kTe3BXVQnX5Mf+3+pwNn4NB/s6mbQQs8yJuYkTtOEX3YI
YPvSzE29+5H94D7HU5H2fETqnZPoVoG824I=
-----END CERTIFICATE-----
Generated at Sat Sep 26 11:38:56 2026 by rpki-client