Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/79bcdb32-83aa-3ea4-a571-82541474b0d3.roa
File:                     79bcdb32-83aa-3ea4-a571-82541474b0d3.roa (raw, json)
Hash identifier:          sdQy2kyMTw/LzAaql9zDcYrmXqDYYxQ7mRclm6baZKg=
Subject key identifier:   93:53:41:07:98:0F:DB:4B:D2:C2:DF:12:A7:59:2B:9D:11:42:89:A3
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D624A5EB0CB2EACDC8A234B00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/79bcdb32-83aa-3ea4-a571-82541474b0d3.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     23473
IP address blocks:        2607:f750:2900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:5e:b0:cb:2e:ac:dc:8a:23:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=09a69a21-b62c-444f-82e9-d960d6ebf621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0c:bc:85:9c:8b:91:85:c1:fd:90:06:19:12:
                    a1:c4:8d:ef:04:93:69:38:b9:b7:5d:17:b0:7d:80:
                    6b:49:dc:51:18:df:79:14:44:07:d2:a4:47:3f:c3:
                    03:98:0a:7f:ac:fd:b1:6a:34:3b:b8:a2:f0:dc:97:
                    be:86:ca:a3:05:d7:31:9c:91:93:a9:73:ee:3c:20:
                    c0:4a:7c:c6:79:e8:ce:52:31:18:bb:25:08:d4:61:
                    0d:96:29:d2:93:7d:c3:bd:5e:90:2e:08:db:1b:38:
                    6d:08:19:86:7e:24:e7:07:a2:01:bd:cd:a5:50:11:
                    70:de:2c:5e:7a:6e:30:7e:c3:72:35:75:81:a9:96:
                    e7:d0:ac:02:23:bf:17:bc:bb:76:1e:0f:a4:0f:0c:
                    09:78:e2:d6:64:49:0a:89:aa:b2:fa:6b:1e:78:b4:
                    26:d5:4a:de:a9:1c:77:54:82:a7:36:55:52:c0:b3:
                    b7:36:ce:1f:39:76:0c:fc:e9:54:08:53:3a:6b:d4:
                    f0:4d:2f:e5:70:b5:2c:7d:d0:f7:c5:bc:10:5e:d4:
                    d8:6b:42:1e:4c:f1:c4:25:58:27:28:06:d8:75:22:
                    a3:e1:de:db:9a:75:08:b4:2f:a5:73:38:1a:7b:1c:
                    92:7a:05:5b:d6:82:30:f0:6e:2f:76:8f:1c:0c:06:
                    ee:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:53:41:07:98:0F:DB:4B:D2:C2:DF:12:A7:59:2B:9D:11:42:89:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/79bcdb32-83aa-3ea4-a571-82541474b0d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:2900::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:93:22:ec:c1:ec:5b:a6:58:4f:12:4b:78:c6:10:e6:b7:44:
         0a:72:eb:ce:b8:50:84:01:b3:20:8c:20:40:63:7d:0c:dc:eb:
         0e:01:93:10:f1:3b:c2:e0:5b:d3:f8:23:a0:db:6d:6c:f4:3c:
         10:d6:fc:9d:91:38:4f:41:82:e6:da:a8:d0:7e:58:a0:61:29:
         40:2c:07:47:40:a7:6e:0d:91:e2:13:e8:6b:8e:af:41:01:ed:
         4a:d8:85:64:06:df:a1:05:90:73:83:51:5c:06:55:9f:62:68:
         1a:80:ea:41:e0:f4:21:68:ee:29:db:a6:a0:cf:0c:28:df:f6:
         25:19:ca:f6:36:0e:93:62:b9:d0:67:97:55:6c:2c:db:3d:97:
         7b:dc:26:94:a8:22:81:70:c9:91:9c:7f:ee:f2:58:b5:bc:c3:
         de:ae:df:06:7f:c9:d7:2f:2c:45:cc:b9:a3:ed:62:8c:af:ae:
         bd:dc:04:f3:fa:f5:47:93:58:41:51:2d:ab:63:46:bc:af:de:
         17:cc:9c:88:43:e3:d3:b1:61:b1:d4:b5:40:37:df:7d:21:15:
         f7:5b:d5:6e:d8:f1:13:73:34:b7:12:6e:7a:6b:99:bf:ab:fd:
         f2:6b:c4:cb:c6:dd:a4:e1:f3:31:e9:ef:72:60:99:f4:77:c4:
         17:98:dc:44
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1iSl6wyy6s3IojSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk
MDlhNjlhMjEtYjYyYy00NDRmLTgyZTktZDk2MGQ2ZWJmNjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwy8hZyLkYXB/ZAGGRKhxI3vBJNpOLm3XRew
fYBrSdxRGN95FEQH0qRHP8MDmAp/rP2xajQ7uKLw3Je+hsqjBdcxnJGTqXPuPCDA
SnzGeejOUjEYuyUI1GENlinSk33DvV6QLgjbGzhtCBmGfiTnB6IBvc2lUBFw3ixe
em4wfsNyNXWBqZbn0KwCI78XvLt2Hg+kDwwJeOLWZEkKiaqy+mseeLQm1UreqRx3
VIKnNlVSwLO3Ns4fOXYM/OlUCFM6a9TwTS/lcLUsfdD3xbwQXtTYa0IeTPHEJVgn
KAbYdSKj4d7bmnUItC+lczgaexySegVb1oIw8G4vdo8cDAbuYwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJNTQQeYD9tL0sLfEqdZK50RQomjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNzliY2RiMzItODNhYS0z
ZWE0LWE1NzEtODI1NDE0NzRiMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf3UCkw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAYZMi7MHsW6ZYTxJLeMYQ5rdECnLrzrhQhAGzIIwgQGN9DNzrDgGT
EPE7wuBb0/gjoNttbPQ8ENb8nZE4T0GC5tqo0H5YoGEpQCwHR0Cnbg2R4hPoa46v
QQHtStiFZAbfoQWQc4NRXAZVn2JoGoDqQeD0IWjuKdumoM8MKN/2JRnK9jYOk2K5
0GeXVWws2z2Xe9wmlKgigXDJkZx/7vJYtbzD3q7fBn/J1y8sRcy5o+1ijK+uvdwE
8/r1R5NYQVEtq2NGvK/eF8yciEPj07FhsdS1QDfffSEV91vVbtjxE3M0txJuemuZ
v6v98mvEy8bdpOHzMenvcmCZ9HfEF5jcRA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:57 2026 by rpki-client