Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a78b7a93-0cd2-3bd8-aca4-58bcee9e6c83.roa
File:                     a78b7a93-0cd2-3bd8-aca4-58bcee9e6c83.roa (raw, json)
Hash identifier:          QASp5HkQ0wbeTM/KFhDhdp7H+Tv/OOZE9v3DGfDrAJk=
Subject key identifier:   94:68:C8:3A:E0:3A:EA:88:77:65:A5:EC:52:14:78:D6:3F:D7:CA:9E
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D5F7FA750BAEFEE9226296B40
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a78b7a93-0cd2-3bd8-aca4-58bcee9e6c83.roa
Signing time:             Thu 02 Apr 2026 13:00:30 +0000
ROA not before:           Thu 02 Apr 2026 13:00:30 +0000
ROA not after:            Wed 01 Jul 2026 13:00:30 +0000
asID:                     23473
IP address blocks:        2607:f750:1316::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:7f:a7:50:ba:ef:ee:92:26:29:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Apr  2 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=00ff4a4c-fc33-4dd9-bd14-c4c79fe87bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a3:a1:da:33:c1:06:c7:76:63:87:0e:8d:69:
                    6f:40:77:ea:2f:fb:e9:6a:f3:08:e5:a1:2c:9a:87:
                    43:7a:9d:da:71:82:18:de:52:bb:db:59:88:a5:33:
                    4d:9c:56:b4:ff:d4:a1:07:fa:30:09:c3:37:48:61:
                    8a:ee:95:c1:74:f7:ed:1e:0f:c2:6b:ea:fd:18:5c:
                    49:0f:47:dd:b1:18:e0:cb:26:a7:b8:f2:a2:b0:fb:
                    1f:93:0f:c3:3d:8b:ea:99:f3:92:93:56:a9:2f:b8:
                    ad:b2:c2:bb:8a:6d:0c:6b:f8:d6:6c:b4:ff:c3:db:
                    0d:19:79:c5:22:19:2a:83:8d:b0:40:ff:7e:7e:20:
                    01:82:7d:41:3c:72:98:df:9f:25:98:40:1e:2b:7a:
                    e9:f5:b9:75:d4:7b:a8:61:3e:42:55:e3:9d:0b:8c:
                    2d:4f:bf:3e:b7:25:61:af:76:57:9f:90:a6:ec:63:
                    71:da:ee:87:c6:33:86:94:d0:0e:71:b6:d7:24:34:
                    2d:15:78:97:3f:bc:cc:4b:86:53:0c:93:01:09:07:
                    d6:2f:3e:32:62:d8:ac:e1:ab:c5:14:0d:02:cc:2b:
                    bb:70:f9:45:26:8b:bc:e2:cd:da:c9:c0:57:e1:9f:
                    29:b4:df:05:9c:a7:75:fc:03:24:29:21:02:ec:b2:
                    21:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:68:C8:3A:E0:3A:EA:88:77:65:A5:EC:52:14:78:D6:3F:D7:CA:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a78b7a93-0cd2-3bd8-aca4-58bcee9e6c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:1316::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:29:25:05:b3:ce:0c:2d:6f:3f:78:eb:2f:d8:6e:86:13:7b:
         e4:a7:e3:f8:f3:cd:e0:f6:17:27:e9:6a:c9:eb:6f:89:c4:f6:
         a1:1f:ca:89:85:79:7a:9d:4a:cc:2e:da:2a:de:9f:b9:81:f9:
         e9:c9:b1:15:64:af:37:64:d5:93:20:66:42:1c:cf:13:0a:5b:
         52:24:bc:66:1c:f2:ae:0a:ac:75:ab:d3:c3:83:eb:e2:9d:83:
         e9:e1:5c:ee:dd:24:b4:74:0d:09:48:62:f8:65:a8:45:a0:51:
         ca:bb:53:01:9e:df:6a:b1:ea:9a:90:97:d7:3c:01:68:fe:66:
         6a:d2:04:be:d1:d1:0b:2d:e1:30:95:b5:fe:51:d7:3c:9a:ce:
         f6:7f:f9:84:4d:be:56:95:e6:b1:7f:07:f0:51:0e:2c:7e:c7:
         4b:c7:a2:9a:8d:88:64:7a:c5:77:40:0d:cf:ee:58:e5:0f:5c:
         61:e5:06:c1:91:e1:a1:11:95:f7:35:7f:7f:2d:6c:2c:3d:bd:
         70:15:2f:8b:c4:ff:0a:8f:e2:ea:4f:de:32:70:cd:7b:d5:30:
         3d:62:12:1c:90:54:a2:25:be:29:b4:fe:7d:2e:8a:b7:99:75:
         b0:81:fb:c5:a3:8c:2b:18:ce:43:31:6c:f1:02:dd:8b:ce:a0:
         d5:0a:cb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:00 2026 by rpki-client