Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3964f2e6-ffe1-3467-839a-fa09f1904ab0.roa
File:                     3964f2e6-ffe1-3467-839a-fa09f1904ab0.roa (raw, json)
Hash identifier:          Lcf6qI5gYu7zHWx5++xQ3MjOZUy7Fcct9Z/CMaGMLp4=
Subject key identifier:   A2:06:0B:D2:12:8E:65:66:7D:4E:19:82:10:D7:45:98:1A:B7:DE:91
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DFEA071FCD4229C22DCBA7B80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3964f2e6-ffe1-3467-839a-fa09f1904ab0.roa
Signing time:             Fri 29 May 2026 13:00:10 +0000
ROA not before:           Fri 29 May 2026 13:00:10 +0000
ROA not after:            Thu 27 Aug 2026 13:00:10 +0000
asID:                     23473
IP address blocks:        2607:f750:9300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fe:a0:71:fc:d4:22:9c:22:dc:ba:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 29 13:00:10 2026 GMT
            Not After : Aug 27 13:00:10 2026 GMT
        Subject: CN=425e3d91-a58b-4606-96a3-40b7c8101be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b9:e8:f2:d0:ce:96:ff:7a:5e:3e:cd:32:ea:
                    fc:79:c5:2c:a8:c8:73:f1:63:bf:b6:c7:7c:3a:eb:
                    f8:13:80:5c:b7:55:0d:63:c4:a3:64:74:75:ff:ea:
                    af:1a:e5:0e:b3:aa:2b:ec:70:81:38:16:77:5a:76:
                    a3:9c:35:7b:86:dc:4c:63:47:0c:f7:81:06:5b:16:
                    1a:dd:d4:7e:18:a1:b1:ca:d4:e7:60:f8:8f:02:84:
                    d1:c5:c0:da:f5:06:74:96:cf:99:06:2d:72:0f:04:
                    d5:7b:a2:d8:45:74:26:a5:c5:53:06:31:cf:26:35:
                    4e:28:72:ac:bb:e5:ad:5b:11:19:ff:7f:4e:95:54:
                    52:a0:06:8e:c0:93:ec:95:05:d2:4a:44:cc:95:d3:
                    0f:09:66:75:b9:a8:18:df:55:b2:c1:7d:02:4c:ec:
                    a9:85:a5:87:83:9e:80:89:87:59:32:2f:67:38:05:
                    dc:17:6f:3d:7d:32:da:4b:0d:f6:a1:7e:03:e8:a2:
                    cb:ee:62:59:de:73:8d:46:c9:a6:4e:bb:66:a8:a9:
                    58:ee:b0:88:e0:7c:11:4b:3f:be:08:98:2b:ef:50:
                    4e:4f:db:51:34:3a:82:4b:6a:81:54:6a:3e:80:af:
                    63:08:c9:2f:fd:ed:00:6c:b1:93:03:04:f9:83:8b:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:06:0B:D2:12:8E:65:66:7D:4E:19:82:10:D7:45:98:1A:B7:DE:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3964f2e6-ffe1-3467-839a-fa09f1904ab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:9300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c5:98:2c:d8:a4:d2:8f:d7:c6:18:0f:e7:7d:d9:42:68:53:
         7d:4c:3e:f4:c9:84:4d:b7:e1:75:33:94:83:87:fb:30:66:eb:
         0e:d1:88:31:d3:22:6d:77:62:3a:23:95:5d:c6:a3:14:18:5d:
         9c:b6:c0:78:0a:eb:34:ee:7a:5f:52:26:15:e6:f7:c7:c1:21:
         e2:04:8e:12:32:db:bb:42:bd:a1:fb:96:38:88:7f:fc:b4:f0:
         9a:64:0c:e9:0c:df:4d:0f:11:d9:75:79:34:92:66:ca:bd:93:
         47:ba:15:8d:b7:c7:c6:4c:99:e4:c4:38:6d:4b:b3:4a:e2:a4:
         11:2b:ec:34:31:95:74:d2:e9:b1:0e:b6:91:a7:0a:00:05:a9:
         63:e3:5c:c7:90:cb:ff:93:53:d2:86:20:b6:6f:60:c3:4c:fb:
         be:89:75:4a:db:8c:a2:95:7b:9e:ae:3d:47:40:84:c3:7c:f2:
         38:2c:65:e1:7c:8f:66:1b:3a:f3:e6:68:16:8b:67:45:99:13:
         8a:4e:13:19:72:01:cb:b1:53:ed:88:7a:c9:5c:20:2b:ee:b5:
         e0:46:26:36:ec:10:1a:eb:aa:c9:0a:09:3f:14:ad:b6:06:c2:
         0b:ff:5a:36:41:8d:7c:22:ff:84:fc:67:28:a1:a2:cf:b6:c8:
         09:85:04:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:07:06 2026 by rpki-client