Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1140cf10-de38-3ef2-b9f6-48d6b1fc3780.roa
File:                     1140cf10-de38-3ef2-b9f6-48d6b1fc3780.roa (raw, json)
Hash identifier:          kxVPMoXvH+LPAPvpQAZeYH6XjShnJdU/cBGrKQ1kp2g=
Subject key identifier:   75:89:41:C2:C4:5F:3B:EA:87:22:E9:50:32:ED:35:53:B6:68:79:A5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584DD0904F80FC0478CB47B81E80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1140cf10-de38-3ef2-b9f6-48d6b1fc3780.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     3356
IP address blocks:        2607:f028:a70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:4f:80:fc:04:78:cb:47:b8:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=f44cd73b-0cef-4a4b-82e6-66b48bc3a743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:74:17:6f:5f:f5:4b:b8:dc:52:f7:12:24:fb:
                    9f:b8:3d:e7:0b:c3:a7:bc:bf:96:ff:79:95:4e:d4:
                    71:c4:fa:d3:bd:fe:be:cb:4a:45:0c:f2:d2:90:56:
                    5a:e2:df:4e:37:8c:60:b0:ad:5b:0e:17:5f:63:fa:
                    8b:1b:91:57:31:26:15:2e:14:39:d0:6f:89:19:9d:
                    a7:35:bf:cf:a1:00:f0:5d:4d:9e:8b:db:a3:9a:7e:
                    17:dd:b6:2e:47:8e:bd:06:b8:60:29:e3:f7:d8:a4:
                    a8:fb:36:55:38:b3:3f:6c:0d:31:7a:c6:f9:45:bf:
                    bc:98:84:70:5e:18:7f:8c:86:1d:c6:a8:ec:74:00:
                    9b:70:14:b3:dd:f7:53:06:41:94:04:ca:06:27:07:
                    37:1a:48:f0:90:56:26:2a:ac:e3:f5:ee:ac:1f:59:
                    b6:91:49:12:ce:3d:c6:83:b5:f5:be:e8:fb:dd:5d:
                    65:84:9b:88:5b:fa:b0:18:61:1d:b2:3a:71:c0:3f:
                    33:7f:ae:5b:aa:14:92:e1:1d:5d:d7:54:a0:07:3a:
                    3d:eb:fa:ec:c6:4a:79:15:fb:b0:de:ad:eb:d7:eb:
                    69:a2:94:be:90:a9:5e:fc:e2:2b:12:61:1c:8c:be:
                    03:55:36:d2:6d:b0:ef:3f:3b:f5:96:da:32:84:75:
                    7d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:89:41:C2:C4:5F:3B:EA:87:22:E9:50:32:ED:35:53:B6:68:79:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1140cf10-de38-3ef2-b9f6-48d6b1fc3780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:a70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:52:13:68:2e:31:5e:47:2b:45:f2:ad:c2:a7:38:1c:bf:52:
         7f:60:17:31:b7:31:96:66:d8:43:04:c6:5b:15:e1:2d:43:29:
         c8:53:e1:1a:37:e6:ee:49:30:3c:dd:20:18:38:2c:3e:7e:ac:
         e3:4b:8c:dc:0f:55:d1:57:2e:08:43:7b:2a:64:74:ab:31:91:
         f9:8e:3f:1f:c2:8a:03:e8:e5:3f:69:c1:4f:df:3c:3f:78:01:
         5f:51:df:23:4e:2b:a2:65:64:37:5b:ba:1f:50:a0:ef:71:48:
         ff:04:b3:4b:4d:24:ec:04:47:87:fc:b7:06:f9:8e:66:f9:0d:
         29:72:e1:6e:fc:81:96:de:fc:e1:20:01:95:93:e1:23:4d:3c:
         58:ad:52:62:b5:ae:46:75:af:4a:68:cf:1f:4c:0c:af:af:63:
         3b:89:0b:26:0a:1a:eb:0d:5b:36:c0:50:1a:5f:aa:a9:15:28:
         67:09:09:54:fb:c3:ad:c6:38:a0:04:38:f8:d8:d8:74:1c:33:
         f5:a6:69:03:8e:21:12:4f:55:e7:cb:b1:12:59:2b:df:90:6a:
         82:34:de:0d:63:ce:58:b3:06:df:59:91:76:e1:f0:38:8e:79:
         5d:74:1f:24:ee:b3:ed:53:56:14:5a:e3:ef:37:3a:6c:f9:88:
         7b:23:43:b5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3QkE+A/AR4y0e4HoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk
ZjQ0Y2Q3M2ItMGNlZi00YTRiLTgyZTYtNjZiNDhiYzNhNzQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHQXb1/1S7jcUvcSJPufuD3nC8OnvL+W/3mV
TtRxxPrTvf6+y0pFDPLSkFZa4t9ON4xgsK1bDhdfY/qLG5FXMSYVLhQ50G+JGZ2n
Nb/PoQDwXU2ei9ujmn4X3bYuR469BrhgKeP32KSo+zZVOLM/bA0xesb5Rb+8mIRw
Xhh/jIYdxqjsdACbcBSz3fdTBkGUBMoGJwc3GkjwkFYmKqzj9e6sH1m2kUkSzj3G
g7X1vuj73V1lhJuIW/qwGGEdsjpxwD8zf65bqhSS4R1d11SgBzo96/rsxkp5Ffuw
3q3r1+tpopS+kKle/OIrEmEcjL4DVTbSbbDvPzv1ltoyhHV9bwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHWJQcLEXzvqhyLpUDLtNVO2aHmlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTE0MGNmMTAtZGUzOC0z
ZWYyLWI5ZjYtNDhkNmIxZmMzNzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgfwKApw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACRSE2guMV5HK0XyrcKnOBy/Un9gFzG3MZZm2EMExlsV4S1DKchT
4Ro35u5JMDzdIBg4LD5+rONLjNwPVdFXLghDeypkdKsxkfmOPx/CigPo5T9pwU/f
PD94AV9R3yNOK6JlZDdbuh9QoO9xSP8Es0tNJOwER4f8twb5jmb5DSly4W78gZbe
/OEgAZWT4SNNPFitUmK1rkZ1r0pozx9MDK+vYzuJCyYKGusNWzbAUBpfqqkVKGcJ
CVT7w63GOKAEOPjY2HQcM/WmaQOOIRJPVefLsRJZK9+QaoI03g1jzlizBt9ZkXbh
8DiOeV10HyTus+1TVhRa4+83Omz5iHsjQ7U=
-----END CERTIFICATE-----
Generated at Wed May 13 14:12:05 2026 by rpki-client