Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d5b7bb11-efaf-33f4-8c8e-529c6c0e2394.roa
File:                     d5b7bb11-efaf-33f4-8c8e-529c6c0e2394.roa (raw, json)
Hash identifier:          rcYKuJX7MqylXggwfJTliEOp0lthfoCl2yIcQrhlKg4=
Subject key identifier:   DC:62:DA:1B:9E:B1:F3:CE:4C:A3:3F:45:07:D5:A4:6D:37:CB:7B:90
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EA787F6A364742D2F0E1829B0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d5b7bb11-efaf-33f4-8c8e-529c6c0e2394.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23473
IP address blocks:        2607:f750:b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f6:a3:64:74:2d:2f:0e:18:29:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1267439a-0b97-478a-ab39-fa77c0080699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:84:41:86:3f:da:56:4c:69:98:c7:02:cf:67:
                    f7:2d:bb:7f:89:ea:70:6d:eb:bd:82:57:cd:f4:05:
                    3f:76:44:16:ad:3d:58:81:3f:33:1e:50:7a:1a:d2:
                    f6:5b:6b:6d:44:7b:9a:f1:d0:d6:f7:1e:c9:48:75:
                    04:22:ce:29:16:80:2b:56:6c:c3:86:b3:8f:48:24:
                    22:ac:ab:3d:85:56:ae:a1:92:5c:bf:33:fe:10:30:
                    4f:08:a5:d7:c1:69:ac:d4:9f:b1:4a:e5:36:47:12:
                    09:ad:a8:22:12:60:57:70:1f:20:da:79:e2:4c:22:
                    0a:21:d4:f8:ad:83:e5:28:78:b3:9b:ad:11:48:73:
                    a8:d3:7e:b0:7a:01:5d:4c:73:c5:e1:5f:b8:99:20:
                    5a:d7:19:77:d8:b4:6c:17:43:f2:bd:31:57:08:0b:
                    5d:b7:b1:81:69:b1:c9:a3:66:db:35:1d:30:de:d7:
                    6c:1c:12:b7:16:f2:37:40:08:c4:56:8e:78:74:3b:
                    de:1c:5e:15:e3:ee:89:90:92:e2:33:83:c0:1d:1a:
                    88:23:a3:78:5e:fa:82:07:29:a0:a2:63:39:fe:ec:
                    9e:2d:1b:83:74:b6:28:de:39:db:6a:10:c0:71:d7:
                    8d:54:06:9d:d0:9f:73:59:91:e3:fb:a0:93:b1:ee:
                    39:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:62:DA:1B:9E:B1:F3:CE:4C:A3:3F:45:07:D5:A4:6D:37:CB:7B:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d5b7bb11-efaf-33f4-8c8e-529c6c0e2394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f750:b00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:5b:f4:02:f1:05:d1:29:c3:9d:c9:9e:bd:2d:14:f9:91:9b:
         bc:ee:7b:57:80:98:6d:6a:bf:77:3e:94:71:66:ea:a4:c6:26:
         ce:76:e9:9b:6b:79:0f:e2:a6:8c:15:57:f2:00:32:af:da:aa:
         a7:40:50:b2:37:d6:be:43:25:45:6e:a5:be:fb:ac:50:3e:00:
         4e:76:7a:5d:75:0c:3f:ec:59:ea:a6:a1:88:39:ae:b0:d1:50:
         a9:fe:8f:fd:82:e7:ad:db:ba:a8:50:86:10:20:07:09:0d:e2:
         60:ad:46:7e:b7:e1:a7:b7:26:c6:1b:0e:56:66:ea:a5:ab:44:
         8f:ee:37:01:72:17:ef:b0:00:47:86:65:d6:a6:13:21:45:ed:
         98:79:fc:db:aa:2b:a1:bd:ac:3d:f0:94:90:80:bb:64:f0:a3:
         cd:2a:77:c9:91:ee:2a:3d:58:e8:dc:14:35:b8:33:59:0e:88:
         85:8f:02:a3:51:d4:dd:45:0b:3c:0e:89:32:ec:84:94:2b:37:
         f5:e7:e5:1b:92:d3:25:eb:8a:f5:68:7a:08:50:32:95:15:c2:
         6d:46:1a:19:73:4c:2b:bf:ce:43:46:73:48:e8:65:b9:d1:f2:
         36:5a:48:9f:43:8f:d3:42:ed:2f:e2:a4:f4:49:f1:09:bd:0a:
         35:2e:e6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:10 2026 by rpki-client