Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a965e827-26b8-3b7a-ac6b-68d37aec461e.roa
File:                     a965e827-26b8-3b7a-ac6b-68d37aec461e.roa (raw, json)
Hash identifier:          SyQbT979BTX/SUNmEK0xT4v597wq3Luaza3vDsd7Cfk=
Subject key identifier:   3B:6B:06:CA:07:11:51:B9:8A:72:C6:C2:64:99:B2:BD:5E:EA:48:62
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D83CB09FEA6585639BB7F5880
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a965e827-26b8-3b7a-ac6b-68d37aec461e.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     23473
IP address blocks:        2607:f750:9068::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:09:fe:a6:58:56:39:bb:7f:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=afd97e26-84af-4dd5-9bdc-801da1f4aefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b1:42:98:99:13:29:a9:94:6d:98:97:b5:4f:
                    b9:b8:ca:1c:2e:28:f6:95:ff:38:48:1a:22:1a:e1:
                    ef:6d:86:63:46:95:47:17:27:b7:16:26:ad:eb:33:
                    8c:4e:47:53:1a:f7:92:b1:e0:1f:81:74:bd:27:df:
                    88:8d:f5:d0:93:08:d1:30:a7:72:1c:d1:37:c7:9c:
                    ed:0d:fd:ed:02:f3:7e:8c:c5:2c:01:0b:82:87:b2:
                    f2:b2:e9:70:23:20:a8:37:25:95:d5:68:90:71:d1:
                    ff:55:42:f3:52:48:56:94:60:49:3e:59:ef:45:47:
                    9e:cc:71:25:09:ea:a1:bc:d2:d8:8a:c1:a0:30:00:
                    88:0f:e5:45:1d:3e:00:20:2b:a2:4d:08:d4:e8:ae:
                    1d:68:c0:f9:02:4c:dd:a0:c3:78:00:91:8c:3c:2e:
                    7d:de:80:03:fe:54:76:f8:e6:3e:92:84:14:f9:ba:
                    ff:a7:b1:43:63:cb:dd:e1:26:91:08:36:70:69:f4:
                    9e:9f:1c:d5:63:c1:77:da:22:70:36:11:4e:66:c3:
                    82:eb:5a:fc:ea:c6:1b:e7:7c:83:87:85:fc:07:5f:
                    70:9c:aa:12:d3:bd:dd:0c:66:77:2c:03:d3:88:54:
                    f0:98:3e:8a:67:10:53:7a:9d:db:a1:fa:ac:f4:4c:
                    ae:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6B:06:CA:07:11:51:B9:8A:72:C6:C2:64:99:B2:BD:5E:EA:48:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a965e827-26b8-3b7a-ac6b-68d37aec461e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:9068::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d7:1d:f7:ea:d5:66:7c:2e:8a:3f:2b:09:89:97:ee:0f:8e:
         33:eb:b0:74:99:18:00:c3:f2:bd:70:8c:5e:df:f4:ba:a4:47:
         c6:63:8c:67:af:d3:bf:d2:72:cf:87:0d:e1:5c:1d:01:25:69:
         78:c8:cb:9e:1b:9a:ef:23:ab:5b:41:80:bd:f1:09:87:a7:c2:
         8a:a1:dd:5d:e9:28:e0:a7:17:60:05:27:ef:20:5e:8f:f4:04:
         3c:78:2b:9e:6f:b2:38:3f:b3:64:32:0b:e0:f9:c2:ec:cb:92:
         fd:ae:a3:c0:43:5a:12:e3:60:c2:7f:90:aa:c5:1d:2b:a7:31:
         12:0d:72:5b:dd:30:f0:5f:54:7f:35:ce:a6:2f:1b:e6:84:8a:
         d5:c8:a5:6f:95:99:a4:4f:41:ab:e3:32:bd:6f:59:45:57:c4:
         bb:f6:e3:dd:0e:17:bb:ec:6e:2c:3f:ae:de:82:cb:e6:78:e4:
         7e:38:51:1d:21:54:56:83:6f:db:4f:34:54:f8:22:3c:e5:0a:
         03:a0:1c:7a:1c:46:04:8e:e9:81:bc:b0:b3:4e:02:59:d8:8a:
         57:88:22:a5:63:56:63:72:9e:36:9d:c7:36:79:b7:4a:e6:9a:
         9e:5f:7d:cb:94:47:b8:5d:52:0a:47:e4:f1:e2:6d:92:de:1a:
         06:eb:43:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:43:48 2026 by rpki-client