Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4cb58656-27bb-361c-ba37-271c6f9fe3ad.roa
File:                     4cb58656-27bb-361c-ba37-271c6f9fe3ad.roa (raw, json)
Hash identifier:          OGXBSKboTlQpIJtc/lf5B+GrSmAKrJqqOB+74735Uk8=
Subject key identifier:   08:E8:1D:97:97:18:C7:86:E0:D7:17:F1:74:7D:A4:EA:83:85:DA:FA
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584CCE71FB1D9D8E9A8335FA4700
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4cb58656-27bb-361c-ba37-271c6f9fe3ad.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     23473
IP address blocks:        2607:f750:6300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:71:fb:1d:9d:8e:9a:83:35:fa:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=736169eb-cc02-428e-9994-e731d8d9616b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:aa:ba:de:f2:e0:19:bb:77:ae:44:50:bd:e4:
                    dd:9d:55:be:87:87:8f:bb:6d:ce:9a:d1:e8:8f:f0:
                    6b:93:30:8d:bc:e7:b9:fd:a8:a5:2a:04:50:5b:ec:
                    e8:79:25:72:98:64:7a:4d:bd:18:00:32:b5:c5:fe:
                    1d:b9:b4:7a:b8:ab:56:f1:a4:60:4d:7c:8e:b3:38:
                    fa:f2:be:13:7a:db:b3:89:8f:ad:86:93:5f:f5:1c:
                    d8:36:97:ca:94:60:4b:8a:bc:5d:6f:70:05:1c:b7:
                    cf:6c:de:48:09:f9:44:47:df:fe:b4:c9:83:2c:9a:
                    44:93:98:9d:a4:ff:f9:ff:bd:8f:7d:37:11:73:84:
                    10:1c:8b:47:a1:b6:2f:63:df:35:5b:60:12:8c:4f:
                    98:ae:3a:30:69:82:37:cc:b4:32:0f:0c:81:a1:dc:
                    f7:31:d6:d2:f2:ed:eb:fe:a9:11:56:f6:f3:80:24:
                    c4:93:0c:80:3a:cd:e2:94:90:cd:52:8f:e2:cd:83:
                    60:26:d3:41:da:0a:f9:ed:df:1e:06:72:2a:c9:91:
                    2c:88:5d:c9:b1:f0:31:af:52:81:9f:55:b6:7c:f0:
                    77:0b:ab:41:13:4a:64:32:90:26:cd:16:82:7a:9f:
                    1f:a8:05:cc:b3:62:94:53:b6:d5:98:19:29:0b:09:
                    3e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E8:1D:97:97:18:C7:86:E0:D7:17:F1:74:7D:A4:EA:83:85:DA:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4cb58656-27bb-361c-ba37-271c6f9fe3ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:6300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e7:7d:34:9b:33:61:63:83:43:d7:e0:63:b3:e8:78:8b:ef:
         cf:8a:75:3c:ed:03:d1:70:cc:83:5f:71:d1:4f:58:f8:87:be:
         ee:6e:ad:ed:70:32:aa:46:a7:fb:fd:cb:36:c6:20:ca:a2:ec:
         a0:d4:83:97:a8:a8:57:bf:25:3f:7e:de:3e:66:2b:93:f5:d3:
         74:c7:93:cb:de:4d:54:5f:10:90:87:22:46:2e:b7:9b:0e:8d:
         4d:91:99:e2:b4:0f:db:fd:2a:f0:40:0d:5a:25:da:5d:f1:1d:
         0f:f6:2d:d2:ee:36:6f:ac:4f:63:05:af:cc:ae:43:75:1a:66:
         b8:7d:a6:8a:7f:40:4f:7b:08:5e:63:29:c0:9a:e4:c8:cf:30:
         09:ae:80:c0:67:5f:da:23:63:d8:c3:81:59:c7:ab:bb:98:31:
         24:e3:b3:86:ad:55:d6:50:41:35:94:46:43:97:94:ea:cf:37:
         62:99:b7:a2:94:f9:a7:0e:90:87:5e:f9:1c:0d:f2:21:ab:87:
         19:1e:55:46:58:6b:eb:37:9c:0c:78:7f:18:7b:c4:e6:ff:2b:
         2d:79:d1:7f:46:dc:b0:bb:56:a0:b2:c5:52:2f:4a:a1:16:be:
         9a:e6:68:13:f0:aa:0d:01:23:93:9b:72:80:85:6f:5e:cb:76:
         e2:94:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:12 2026 by rpki-client