Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/66f98184-a54c-3985-a866-d199463b174e.roa
File:                     66f98184-a54c-3985-a866-d199463b174e.roa (raw, json)
Hash identifier:          9GB493XPH2i+1nWrQNa/sZnSaChRgOR+TkeNT/VUPDA=
Subject key identifier:   1E:35:20:96:7A:13:68:36:C0:20:DA:8C:F7:BA:39:42:80:A8:DA:49
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D7664F7493E3521A8B1FDE4E0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/66f98184-a54c-3985-a866-d199463b174e.roa
Signing time:             Fri 10 Apr 2026 17:50:24 +0000
ROA not before:           Fri 10 Apr 2026 17:50:24 +0000
ROA not after:            Thu 09 Jul 2026 17:50:24 +0000
asID:                     23473
IP address blocks:        2607:f750:9200:63::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:76:64:f7:49:3e:35:21:a8:b1:fd:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Apr 10 17:50:24 2026 GMT
            Not After : Jul  9 17:50:24 2026 GMT
        Subject: CN=34f2256f-89df-472a-a9ac-3668b3b71634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d1:96:89:93:35:ca:ed:8d:25:6e:81:5c:2a:
                    4e:b2:8a:58:09:65:02:3a:07:07:76:ce:24:f3:b2:
                    95:79:38:61:11:0e:31:c5:82:83:72:e9:fa:01:0f:
                    b8:78:76:e6:49:d0:c6:a8:b2:46:a8:64:da:4a:f5:
                    5b:65:73:23:35:35:d1:b0:1d:62:8e:96:7c:61:77:
                    7e:11:32:65:41:64:b6:37:4a:3f:f6:0a:b3:ba:67:
                    1e:ac:52:b7:93:0c:32:f0:9f:6d:7c:59:71:e6:6b:
                    79:4d:a9:65:33:ca:59:e8:3c:bb:a1:ba:6b:95:bd:
                    fb:09:3a:ca:4b:15:86:62:3e:06:a0:c1:c8:e5:87:
                    53:15:a9:e8:a6:6d:9a:d8:9e:26:62:ab:ef:75:59:
                    8b:1a:85:34:53:de:d5:54:4e:cc:2e:96:dc:c1:c9:
                    dd:1d:5d:e7:33:97:84:cf:21:85:86:cd:9c:d8:5e:
                    8a:8f:e9:14:f0:31:5b:14:3a:8e:db:d3:fd:f0:70:
                    12:08:9b:2f:60:e4:bf:e6:06:59:9c:70:8f:c3:a3:
                    6a:11:c2:3c:db:0c:1b:df:52:93:f4:55:e3:3e:87:
                    8e:a7:80:a4:24:89:06:c1:b2:9d:66:10:9e:fd:47:
                    ef:4e:b3:d2:10:97:70:3d:86:f7:ae:f5:b7:c6:db:
                    3b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:35:20:96:7A:13:68:36:C0:20:DA:8C:F7:BA:39:42:80:A8:DA:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/66f98184-a54c-3985-a866-d199463b174e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:9200:63::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7f:4a:9c:f1:0c:fa:f2:55:4d:4c:fe:a3:a9:22:ed:05:b6:
         dc:b1:9e:dd:07:0f:e4:d1:77:68:6e:30:01:1e:63:ca:e3:ea:
         eb:f6:d6:9d:f5:10:0a:40:a1:c8:a2:36:2e:df:06:a1:d9:43:
         44:ae:03:11:70:54:b4:c6:88:d3:a1:d3:c9:07:50:ba:43:a5:
         db:fe:35:0f:6d:94:6c:47:12:8f:09:75:48:bf:7f:bc:95:4c:
         ec:ff:b8:3f:2b:3c:37:0e:5b:9c:a3:86:2d:ca:bd:c2:61:d2:
         66:30:e6:68:8b:13:0b:e3:35:3a:75:9a:10:e8:62:54:30:7d:
         58:dd:f9:13:d1:74:25:32:b2:98:a3:dd:58:da:4b:33:ba:1b:
         0c:59:ed:59:6d:33:ae:ec:0c:bc:12:3e:26:96:72:91:1a:a4:
         28:c2:7f:78:44:a2:9c:92:c7:9f:5f:0c:15:a7:89:2e:a1:1d:
         d5:4c:ef:02:bb:81:a9:38:d8:fe:48:d0:8b:c9:02:ee:92:59:
         52:bc:df:74:04:9e:52:0f:f5:d3:25:c4:50:16:21:ae:80:a6:
         f2:65:90:b2:64:23:72:08:43:cf:2f:37:10:fa:5e:6d:ae:88:
         a0:b2:bd:2f:4b:a5:00:30:52:4c:2d:43:89:3d:80:eb:ed:88:
         2a:f3:fe:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:28:28 2026 by rpki-client