Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4261ae10-5ac3-3613-9426-1acfba8a2a69.roa
File:                     4261ae10-5ac3-3613-9426-1acfba8a2a69.roa (raw, json)
Hash identifier:          gwwpFK7z9JSp5QAOxSdIUmmdZf8ZZkAX/G5fQqQf14M=
Subject key identifier:   8B:D1:66:09:DE:B1:18:5D:95:E2:0F:7C:21:0A:44:4C:85:F3:4D:BB
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D624A5767F18B0344C71DC9A0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4261ae10-5ac3-3613-9426-1acfba8a2a69.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     23473
IP address blocks:        2607:f750:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:57:67:f1:8b:03:44:c7:1d:c9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=5ee3384b-b84f-44d1-83f5-f463446beef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:34:22:c0:4f:0c:3b:f8:7e:f2:46:3f:37:81:
                    51:37:08:83:ba:db:e6:4c:f1:a6:e2:66:85:99:66:
                    0d:c1:a6:4b:e9:ba:11:1c:f3:9d:5a:f0:b2:1a:3e:
                    b8:cd:3b:83:d4:ba:1b:2f:51:6b:e3:32:55:5d:76:
                    e2:5e:94:eb:b8:d5:d2:c2:d0:64:6b:8f:f2:5a:6a:
                    af:a6:8c:e2:5b:be:24:e0:d9:6f:21:5d:6d:7d:0e:
                    fd:a8:fe:e3:fe:42:f9:c9:22:54:ec:d4:19:c9:cd:
                    7c:96:4b:a1:6b:8a:fd:b2:c9:b3:1f:59:b1:03:3c:
                    64:d5:72:9b:fb:69:d9:d8:8f:0c:64:03:0a:b8:3e:
                    71:12:f3:6f:e2:cd:f8:38:d6:99:a3:9b:d4:43:5c:
                    c1:f1:05:76:21:21:76:d2:ca:a5:ba:6b:ba:f5:29:
                    b7:e2:de:04:9a:35:c0:80:43:0d:63:66:d3:67:5a:
                    cf:d9:67:1f:96:cc:27:80:7c:d4:75:08:8a:d4:ad:
                    6c:24:b9:19:8d:e7:e5:84:3d:2b:63:a2:31:d3:b6:
                    44:33:74:00:8b:31:76:c3:6a:a8:c5:8e:53:75:2c:
                    91:7d:14:45:dc:03:2d:08:dd:c0:58:61:17:c4:4e:
                    fb:36:13:97:55:33:f7:d6:2b:5b:eb:22:79:34:dc:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D1:66:09:DE:B1:18:5D:95:E2:0F:7C:21:0A:44:4C:85:F3:4D:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4261ae10-5ac3-3613-9426-1acfba8a2a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:4000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:50:6e:12:d1:dd:af:11:43:7c:60:c2:b3:97:d1:57:d3:be:
         5d:f9:92:7e:1e:d1:4a:0f:6d:e9:95:cd:10:83:0a:3e:09:95:
         52:d2:f1:a7:7d:89:51:4c:40:36:46:3d:f0:4d:aa:83:89:37:
         c1:d1:43:80:cd:3b:c7:92:a8:81:09:67:5b:76:8f:8b:e9:1e:
         9d:73:b2:c7:55:38:42:af:56:c5:bf:45:93:6b:f3:8d:8d:9b:
         49:0d:ea:ed:2c:a3:4f:62:73:3a:05:ab:ed:0d:49:a1:25:10:
         4a:d1:22:88:4c:c3:22:15:89:95:c9:90:3e:7b:23:41:b0:9d:
         77:37:f6:18:43:34:7f:f5:89:29:98:7c:d8:e5:12:fe:02:bc:
         c7:8f:7f:82:2a:ec:67:ea:6f:57:da:26:1c:2b:4b:cd:04:b0:
         b6:00:0a:11:91:22:fc:f9:a9:cb:35:ab:a5:6a:fb:ec:9d:4f:
         11:ba:ce:67:66:f6:a0:52:7f:4f:78:3a:eb:c4:b7:0e:ca:62:
         7b:f1:43:85:bc:41:3c:2d:0a:02:c9:08:1e:e7:4d:bc:ed:a5:
         d6:57:07:98:b3:27:9a:ae:83:db:c8:13:37:3b:5a:b3:2c:c4:
         eb:5a:05:5c:db:05:92:49:d6:77:83:3a:8e:e8:44:45:42:a9:
         ba:03:de:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:24 2026 by rpki-client