Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/493d241d-e42d-3c5e-9b1d-e49e8e342cc6.roa
File:                     493d241d-e42d-3c5e-9b1d-e49e8e342cc6.roa (raw, json)
Hash identifier:          LQlGmVz3dOUMY871R+fV3pxDEu1VaGweoALoet3SbBc=
Subject key identifier:   EC:9F:1C:F4:F1:68:7F:A8:55:C1:4C:56:B8:3D:25:A8:44:D7:F6:3F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D24E11BA4D01CA6A79F1FDE80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/493d241d-e42d-3c5e-9b1d-e49e8e342cc6.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     203
IP address blocks:        2607:f028:97::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:1b:a4:d0:1c:a6:a7:9f:1f:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=f8d02bb0-5658-4165-aae7-4859555f5763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:20:68:7d:38:5d:12:aa:5f:b4:95:2e:53:42:
                    6e:6b:a8:51:b9:51:f8:87:3b:5a:34:3b:eb:8b:b7:
                    8a:6c:ff:85:0f:3a:9b:9b:1f:3b:d9:e3:f9:b0:1d:
                    0e:ad:fc:cd:4e:5c:8d:8e:dc:43:f4:f3:b1:ed:fd:
                    1a:cf:04:b7:88:c2:89:c7:30:6f:ea:9e:29:2f:34:
                    72:a1:39:43:e4:52:1a:64:e5:8e:34:71:a1:4e:0a:
                    85:22:25:2b:63:fa:63:fb:eb:6d:36:e1:80:85:99:
                    32:0b:46:6f:2f:9f:89:7d:b9:33:18:d5:74:fc:60:
                    e7:6d:1a:dd:ee:eb:bd:ba:03:2a:86:bf:44:3a:92:
                    92:d5:a9:f1:34:30:62:3a:32:ee:ac:22:c5:1f:82:
                    a9:54:11:97:75:f0:c5:da:e0:8a:37:9f:e2:13:cf:
                    fa:8b:3a:2d:9e:79:bc:9d:7a:a2:6b:95:24:89:51:
                    0f:ab:2e:5d:83:1a:62:83:c5:67:bf:08:7b:40:5a:
                    ac:98:00:c3:6e:10:31:e1:e5:c1:a8:3f:99:e6:d6:
                    67:69:b4:57:19:e1:80:2c:d0:6f:ed:eb:14:5f:68:
                    f0:e0:5e:19:7e:aa:02:d3:ab:7b:58:37:90:6b:8c:
                    b7:e8:4f:3b:38:d8:67:a2:b1:64:96:e9:8b:47:50:
                    5a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9F:1C:F4:F1:68:7F:A8:55:C1:4C:56:B8:3D:25:A8:44:D7:F6:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/493d241d-e42d-3c5e-9b1d-e49e8e342cc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:97::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e7:c3:ed:aa:2e:7c:22:5b:3a:4d:41:d3:87:35:3c:83:c9:
         ae:18:17:ba:cf:73:9e:df:99:65:73:89:f4:0f:8a:92:1e:bb:
         88:1f:e1:77:39:8c:73:18:6b:7e:7e:73:e0:c6:b7:84:0c:a4:
         7f:2e:ae:93:6f:77:37:42:c4:d0:d2:24:62:e1:13:2e:f4:fa:
         9a:72:c4:c9:19:c0:87:83:74:80:ab:7c:33:03:26:3b:9c:7e:
         7d:e8:5a:6b:99:19:73:b3:f2:a4:ed:a6:1d:46:70:00:0a:05:
         f9:57:c8:b1:21:d3:ac:be:72:24:9d:8b:a5:13:bc:90:d2:8a:
         41:5b:38:7c:91:2f:bf:fa:b0:94:dc:da:a2:79:fe:ec:72:65:
         16:83:74:57:ef:f2:9f:e8:96:7d:93:22:86:c4:48:10:37:74:
         dc:a7:75:5d:bc:d1:20:4d:03:69:86:93:44:7e:f4:d0:d3:a2:
         73:b7:50:80:46:ab:44:80:1c:78:de:b7:2a:a1:2b:27:93:cd:
         6e:be:a2:e2:ba:d8:69:a6:85:b1:5d:75:c8:07:98:b1:6b:c0:
         2c:99:be:ea:ab:25:a5:dd:79:58:42:ff:c6:cf:f4:50:90:e5:
         06:24:55:5a:41:d9:42:9c:79:64:7c:ca:26:43:59:a5:5d:1f:
         16:58:a4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:15:07 2026 by rpki-client