Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a715bdea-445b-3b2a-9c1c-11b2e25ad236.roa
File:                     a715bdea-445b-3b2a-9c1c-11b2e25ad236.roa (raw, json)
Hash identifier:          xb3xYy6p2X6O1KwhO5R2nivRVQ4clAy8lhoTT1GaKuk=
Subject key identifier:   D8:AD:04:46:D6:27:46:64:84:F6:0A:39:78:76:B4:CD:94:71:43:2D
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D624A510C0D2092D0A88BFF80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a715bdea-445b-3b2a-9c1c-11b2e25ad236.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     23473
IP address blocks:        2607:f750:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:51:0c:0d:20:92:d0:a8:8b:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=ff9c9421-adc4-43ca-b29b-11dbb1aae7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:f8:65:37:4f:c6:6e:07:56:6a:6e:18:58:
                    1c:61:4e:c6:00:d7:24:e3:2c:f7:88:9c:4a:6a:87:
                    2b:fc:ff:08:a2:c7:52:2e:d4:6b:3b:c1:fb:6f:0b:
                    78:2f:9a:a5:c4:53:3f:4d:2c:65:a7:e8:2b:7f:84:
                    01:69:14:4c:f1:94:00:6c:fc:46:7d:2e:f3:34:23:
                    9d:42:9e:30:1b:be:db:aa:27:83:d4:c3:cb:91:b9:
                    07:b0:1e:6b:11:9a:51:10:6e:21:81:8e:19:d7:67:
                    46:bd:1f:fe:a4:7b:5f:e2:73:b7:be:21:70:c6:13:
                    46:32:bc:97:f4:86:5f:c0:cc:9f:c7:57:f9:8c:af:
                    38:bd:ac:55:ce:f4:77:eb:90:08:a9:8a:13:16:89:
                    58:cf:65:13:ed:0e:ac:5a:cc:50:0a:64:b7:74:01:
                    21:94:3f:13:57:a6:6f:5d:20:cd:1f:90:10:c5:4b:
                    a7:54:74:b4:9b:11:e2:cb:84:0e:23:16:0f:61:98:
                    27:1c:96:ab:25:bf:35:45:ab:bf:b9:2d:79:4f:47:
                    aa:78:1b:7d:3d:04:4d:9d:88:d8:ed:c0:66:f8:07:
                    35:74:0e:d6:14:fb:57:1e:2e:3e:71:95:da:94:a2:
                    20:c5:17:79:07:6b:03:42:ed:3f:a2:cc:0f:b6:db:
                    fb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AD:04:46:D6:27:46:64:84:F6:0A:39:78:76:B4:CD:94:71:43:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a715bdea-445b-3b2a-9c1c-11b2e25ad236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:96:6f:81:66:e7:b5:d9:5e:6f:c9:73:93:d2:ef:91:4a:c8:
         44:fd:96:a9:1d:62:f7:34:8b:8d:a8:fa:ee:a0:c9:9a:3c:68:
         2d:5a:77:81:75:f8:1f:a9:c1:18:d7:94:4b:70:3a:6d:6a:d8:
         43:df:38:ca:7a:04:e5:eb:36:20:aa:6f:98:90:7f:43:63:20:
         8f:fe:59:df:78:2d:b7:ba:ec:b2:ec:8f:fc:ef:3c:c3:bd:09:
         82:67:3d:85:bf:96:2b:6f:18:a2:ca:60:56:6a:77:ea:42:e9:
         e1:50:43:69:b8:75:97:1b:64:fd:9c:33:9d:b5:52:d0:bd:bc:
         fd:9a:c4:14:63:34:47:86:42:8f:58:09:02:db:e1:58:dc:bb:
         56:29:df:59:2e:34:ee:d9:23:2e:2f:64:55:a8:b8:20:8a:e0:
         05:2e:86:75:e7:69:5b:0e:4c:e7:64:20:60:d4:20:e8:56:86:
         86:6a:4e:7d:68:15:74:d1:16:c8:45:a7:37:ed:db:10:7c:da:
         27:e2:1b:4f:ee:5a:25:e7:82:78:a7:6c:a9:b1:f2:09:fe:9c:
         d1:71:5d:17:9d:2c:7b:b0:e7:eb:44:22:b1:dc:a0:15:a6:b6:
         90:61:7f:86:1d:2c:84:2c:a7:96:f3:53:f5:a8:6d:87:ae:9a:
         76:3c:f7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:47 2026 by rpki-client