Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/53f5e127-829c-3673-95ef-b15b53f6e2de.roa
File:                     53f5e127-829c-3673-95ef-b15b53f6e2de.roa (raw, json)
Hash identifier:          PFSFPfWuFlwbZpFf78+KeohY948guo2D0n+aEFke+H8=
Subject key identifier:   BC:4C:6F:18:B9:64:E3:63:D6:CE:56:30:90:AC:4F:AE:75:6D:15:06
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584BA237911F797757FD60903130
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/53f5e127-829c-3673-95ef-b15b53f6e2de.roa
Signing time:             Sat 25 Oct 2025 01:00:31 +0000
ROA not before:           Sat 25 Oct 2025 01:00:31 +0000
ROA not after:            Fri 23 Jan 2026 02:00:31 +0000
asID:                     23473
IP address blocks:        2607:f750:2f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a2:37:91:1f:79:77:57:fd:60:90:31:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Oct 25 01:00:31 2025 GMT
            Not After : Jan 23 02:00:31 2026 GMT
        Subject: CN=6f8c1689-61c6-4bb8-94ab-e1566acdfe00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f4:d5:6a:c0:26:a7:82:5c:56:47:79:27:f4:
                    e4:85:d2:c6:39:62:1a:61:5d:54:73:ce:ab:c3:b2:
                    3a:f6:28:1f:b1:3d:6d:99:1a:6f:75:9f:e8:95:b6:
                    2f:e0:3b:23:11:58:76:44:18:e4:47:9a:e2:5b:84:
                    d8:44:9e:1b:97:52:a2:ca:9a:82:37:bc:09:c8:c8:
                    b4:77:1e:43:f2:8f:1b:18:55:18:2b:3d:1f:8d:af:
                    10:27:d2:73:2a:7f:ee:9e:cd:7d:eb:7a:92:e8:a5:
                    47:c8:c0:55:bf:68:d8:fe:6f:9e:53:42:b8:1e:a0:
                    e6:81:18:ab:a0:5b:0e:b4:ec:8e:d1:6f:69:2c:c6:
                    cb:97:b0:83:59:41:0b:51:7f:20:6d:94:20:14:f8:
                    0b:a2:0d:bf:8b:c6:67:85:77:b5:b2:62:a6:3b:e8:
                    f5:3c:55:10:52:fe:ba:d9:50:0b:e5:1e:ac:4c:3a:
                    7e:22:9e:35:1e:63:e0:26:2f:73:3d:5c:cd:7e:4a:
                    67:b9:08:ee:93:04:d4:55:30:9f:c1:af:73:e9:b3:
                    00:95:f0:15:49:65:94:06:a6:8a:de:68:0c:3d:85:
                    be:b4:8e:ac:3d:ce:1f:73:45:79:78:e0:68:f6:c0:
                    78:d4:bd:70:6b:4e:32:ef:3d:09:e8:16:4a:5a:d0:
                    77:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4C:6F:18:B9:64:E3:63:D6:CE:56:30:90:AC:4F:AE:75:6D:15:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/53f5e127-829c-3673-95ef-b15b53f6e2de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:2f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ab:7e:f1:d6:33:ac:79:cb:dd:4d:0c:12:94:62:57:dc:65:
         36:c1:00:cb:64:29:b9:a7:f8:44:52:d4:2d:96:60:f1:a1:c7:
         0d:4f:e7:85:53:01:86:78:a9:72:97:f2:b9:29:f1:e9:0a:8a:
         a3:3d:8d:aa:a3:b5:f1:8e:5c:b7:b2:29:5b:9e:8d:71:1f:ce:
         38:b2:15:96:80:68:29:03:2b:a9:4c:f6:54:f2:eb:0c:d9:91:
         b9:13:41:ce:35:27:bf:11:01:5d:a3:92:5a:85:26:86:97:b3:
         36:dc:c0:4c:25:d3:ba:d0:f7:e4:41:9b:e0:35:28:80:cb:9f:
         44:ef:bd:f6:3a:1e:bd:76:37:da:1b:1d:fb:de:77:bd:4c:ea:
         3f:ee:4e:43:5f:51:ad:a1:39:e0:21:94:d7:c5:dc:e6:d0:b5:
         0f:82:ac:6f:ba:49:13:fd:e2:dd:ad:58:1d:c6:60:98:48:a6:
         19:6c:8b:eb:8a:24:23:de:48:92:8c:97:6b:c1:87:0b:b0:cc:
         9d:30:a3:37:2b:64:17:9f:fe:eb:83:e6:93:22:0e:bb:cc:30:
         e9:0b:60:f7:95:a4:48:c7:e1:17:53:ae:10:06:a1:c7:e4:ed:
         71:03:ff:88:d6:45:fb:73:50:7b:48:75:28:34:85:bf:b6:13:
         7e:6c:aa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:56:40 2025 by rpki-client