Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cee35c70-6697-3a13-b65e-c14e4a0fe342.roa
File:                     cee35c70-6697-3a13-b65e-c14e4a0fe342.roa (raw, json)
Hash identifier:          1M4YCwlIe1AWQ3VTuZ9jiIWQD7hmiyEZjMMEPqkN/bU=
Subject key identifier:   F9:F3:83:EF:C9:EF:57:AE:C9:BE:7C:0C:A2:17:D6:8F:AD:16:4B:F0
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D7A054FB1F75B557C1A8A8080
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cee35c70-6697-3a13-b65e-c14e4a0fe342.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     46925
IP address blocks:        2607:f750:7100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:4f:b1:f7:5b:55:7c:1a:8a:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=4392fb6f-0bc7-479d-9f55-277b74c10bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:1a:10:e4:63:3f:32:49:58:69:22:14:1a:
                    05:df:22:39:d4:62:e5:8e:54:7c:8c:d1:36:f6:6d:
                    70:80:ee:cc:56:8a:15:2c:a5:f2:e3:0e:6b:7c:73:
                    3e:ae:be:9a:57:09:2a:53:d4:8b:61:30:c7:57:eb:
                    70:1a:ad:ad:72:22:4e:e3:63:f4:bb:81:f4:97:2c:
                    e5:04:ee:a3:bb:da:99:01:dd:6a:4e:0c:0e:28:92:
                    d4:55:e9:ce:bf:1a:c4:de:b8:7d:c6:08:ce:f7:c5:
                    d6:f8:8d:f0:3c:95:5c:41:5e:1c:be:45:74:5c:71:
                    a1:2a:d6:65:5c:73:f8:e0:51:89:93:52:ee:cf:cc:
                    d9:78:d6:0f:3a:ae:1b:86:d8:61:38:9e:f0:83:81:
                    6b:83:ce:be:45:c3:ba:26:f6:a5:18:88:51:89:e6:
                    92:fc:3c:cc:7f:90:93:b1:ee:f8:7c:c3:ae:62:7e:
                    11:e4:f9:00:c4:e6:1e:c5:e4:4e:b3:62:b4:35:8c:
                    4c:7a:7c:fc:a9:ce:92:86:cf:5b:7a:da:23:43:90:
                    bd:36:2c:89:db:66:40:99:d3:e7:c0:13:ad:f5:f5:
                    e2:87:86:8c:cb:0c:c8:72:95:40:b7:f8:04:d4:91:
                    00:b4:c2:2a:4e:b6:aa:60:e6:51:c8:35:70:a8:16:
                    b6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F3:83:EF:C9:EF:57:AE:C9:BE:7C:0C:A2:17:D6:8F:AD:16:4B:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cee35c70-6697-3a13-b65e-c14e4a0fe342.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:7100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:58:43:29:09:34:f2:15:0b:cc:06:07:62:1d:3c:60:77:39:
         8f:3b:5d:31:b8:4c:88:fe:7c:4d:45:55:da:19:c0:c6:94:ec:
         7b:20:27:ca:51:b2:35:4b:06:08:4d:7e:6e:b6:df:2d:45:ce:
         13:d3:da:b8:64:55:2e:72:ed:a6:55:5f:e9:07:24:e8:ab:34:
         b7:87:57:fe:24:50:77:07:e2:22:eb:ac:4c:1d:e4:c0:03:63:
         c1:b9:c2:73:49:a2:0e:0c:8f:7c:d6:56:b0:8b:44:d3:ea:ea:
         5a:02:c2:e2:9f:a0:8b:30:8e:67:d3:b6:45:2b:45:66:dd:bf:
         3c:4e:a6:ba:66:72:0c:fc:de:99:31:80:e6:6f:4d:61:87:f9:
         93:fb:73:b8:b4:a0:ee:f4:5c:fc:06:93:a7:3c:52:a7:00:8b:
         1c:d7:29:e7:c2:85:d1:1f:c4:a9:91:68:3b:5c:e4:5b:8d:94:
         de:b6:d4:c7:3a:dd:8f:ad:8e:5a:6f:cc:3f:03:bd:e1:50:6e:
         07:fa:ec:b9:62:55:3b:6b:e8:c3:18:39:46:4b:db:a8:ff:8c:
         e2:a0:98:43:02:7c:e0:40:ab:7f:0e:ae:c4:8c:3b:9d:46:e2:
         8e:1f:43:9f:06:3a:09:3a:a7:aa:5b:fc:a2:79:5c:f1:7b:58:
         7b:a0:a4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:04 2026 by rpki-client