Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2561af2e-c1e0-3a98-aeaa-f4480b9dc47d.roa
File:                     2561af2e-c1e0-3a98-aeaa-f4480b9dc47d.roa (raw, json)
Hash identifier:          iCxtHDV+MscDsAFwQVrfGh3+HT27RLcOIkAF/M7lv38=
Subject key identifier:   59:F9:2D:92:13:2F:EB:C5:02:D1:61:F5:BF:A7:AA:3A:64:C3:8B:2F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E428F288D5C1AAE6A84FDCC00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2561af2e-c1e0-3a98-aeaa-f4480b9dc47d.roa
Signing time:             Mon 22 Jun 2026 21:00:12 +0000
ROA not before:           Mon 22 Jun 2026 21:00:12 +0000
ROA not after:            Sun 20 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        2607:f028:273::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:42:8f:28:8d:5c:1a:ae:6a:84:fd:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 22 21:00:12 2026 GMT
            Not After : Sep 20 21:00:12 2026 GMT
        Subject: CN=a8195add-343d-4db0-b2c2-8bfb9750b0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8e:47:58:8c:75:ab:b4:50:2d:7b:83:02:c7:
                    f3:ff:ab:45:9a:af:6b:96:a8:e1:e9:56:d1:2c:6f:
                    da:66:27:19:a4:29:47:9d:bf:3b:62:43:40:6b:9f:
                    88:dd:13:88:ec:c5:f7:69:9c:d7:0b:68:72:b5:30:
                    36:a2:92:a3:eb:6a:39:b4:10:d1:68:b3:48:1d:19:
                    b5:86:8c:11:6d:db:46:94:b2:93:82:24:d7:d8:b7:
                    d9:af:29:3e:0f:79:6f:db:ae:7b:32:7f:87:54:ee:
                    a6:8f:99:d2:f5:52:a8:9e:af:c0:85:91:de:66:8a:
                    68:51:c5:1a:a4:fb:01:91:d0:87:7f:6b:c9:b6:6a:
                    33:f2:fb:c3:05:ad:d4:88:1d:21:c8:47:2f:83:8a:
                    6e:ee:73:92:a6:c9:77:22:9f:11:94:38:37:b1:4b:
                    9b:27:ad:1b:7b:d2:04:d2:3a:75:c2:c0:f2:27:5f:
                    f5:f2:53:8c:aa:d2:c7:05:7a:bd:9d:1f:40:3b:c8:
                    c9:83:68:d4:4c:60:a5:fb:ce:de:ec:75:b9:ef:fd:
                    11:b7:0a:d5:9e:2d:87:f4:78:0b:9f:d9:c0:c1:65:
                    e2:a6:8f:95:17:74:52:40:47:f1:fc:08:c7:74:7f:
                    8b:0d:5a:db:f3:80:b9:71:06:fb:b7:27:c9:e7:ca:
                    10:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F9:2D:92:13:2F:EB:C5:02:D1:61:F5:BF:A7:AA:3A:64:C3:8B:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2561af2e-c1e0-3a98-aeaa-f4480b9dc47d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:273::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:fd:a3:10:12:75:a6:ed:16:92:4b:45:ad:75:f4:d0:f5:41:
         0d:0b:be:f7:54:79:7f:d8:04:fd:6d:d1:df:9c:bd:a5:fe:fa:
         bf:d0:17:a9:0b:18:93:34:a3:cc:1d:bc:83:00:1d:3c:33:28:
         5d:8b:d7:e1:ab:10:b0:4a:47:82:71:ef:ac:ef:eb:e4:08:2b:
         ce:17:63:df:e0:a1:db:67:f1:6e:fb:ac:5f:4c:8a:7d:73:0c:
         ad:a3:32:99:f8:36:e2:18:12:56:a0:97:aa:3f:6d:63:e9:9a:
         55:3e:9a:f2:36:ec:cf:d4:f9:c4:e0:af:b3:45:2e:69:23:83:
         15:4b:0c:73:fc:98:46:e5:51:e0:4c:e8:0e:66:f7:ea:06:6f:
         e0:09:f1:5b:96:a2:f9:b4:9f:4d:a8:83:b4:7b:3d:9c:ff:11:
         05:8c:da:a8:af:f2:8e:bf:aa:5d:db:02:76:bf:ba:81:20:07:
         de:1b:11:0d:4c:0b:fa:a5:e6:ef:98:51:a9:ec:9a:c0:89:35:
         22:0b:67:fa:c3:b7:f6:f2:d8:c6:60:97:0f:19:4d:cf:07:26:
         32:b7:c6:fd:11:eb:8d:ac:7b:9d:cc:18:de:41:43:88:ee:ea:
         01:9f:75:96:a1:7f:0d:d5:71:a9:7c:34:98:f1:25:19:f0:1b:
         82:2e:8b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:49:12 2026 by rpki-client