Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5b28f16c-50b4-32a2-8775-18d4cf2cc3bf.roa
File:                     5b28f16c-50b4-32a2-8775-18d4cf2cc3bf.roa (raw, json)
Hash identifier:          IwqabyZ9xLOxFwg+C2FHU7bx4ZyN4xRz/dDLD+5UneQ=
Subject key identifier:   50:DA:20:27:31:04:52:A5:70:B2:4B:9A:EB:F8:A2:36:A7:1C:0A:79
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E5619FCADC57577839D117F1C
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5b28f16c-50b4-32a2-8775-18d4cf2cc3bf.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     203
IP address blocks:        2607:f028:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:fc:ad:c5:75:77:83:9d:11:7f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=0f192c27-e802-431f-b6fe-d27776bc6dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d9:76:89:59:ae:a3:59:69:50:7e:4f:8d:0a:
                    81:e9:da:fa:0b:87:c6:77:f7:2b:14:6f:ba:e4:74:
                    9b:70:3d:33:28:dd:cc:5f:2f:3f:11:94:1a:14:1b:
                    26:e9:af:c5:fa:fd:28:98:b2:56:da:3b:64:df:d9:
                    5e:70:53:21:b0:93:62:85:0c:2e:b5:e7:aa:28:fe:
                    3e:e0:43:9a:fb:a9:6f:88:d6:cb:7d:5b:13:3a:23:
                    aa:91:fe:ee:f4:6f:fa:98:51:1f:f7:e4:88:9b:22:
                    51:0a:e5:55:01:3e:de:f3:34:cf:92:e1:35:b0:65:
                    a5:81:90:3b:22:ba:fa:2b:c8:42:71:7d:e8:f1:b5:
                    9b:9c:77:2b:07:03:a5:53:67:41:ef:56:1c:3c:08:
                    8d:b8:58:5c:4a:97:4f:ed:19:99:4e:46:07:4c:62:
                    51:5b:cc:81:6a:c7:32:c5:d5:68:88:4d:0f:73:da:
                    6f:b5:b1:3a:b3:5f:d1:b3:86:80:45:40:49:51:b9:
                    66:a1:f6:8d:13:57:b2:96:f0:99:1b:99:c4:36:67:
                    a7:d6:c4:b2:c7:5a:51:3b:84:5f:a0:f4:a8:eb:e6:
                    96:ab:92:1f:8a:07:4b:0b:e3:69:96:06:5a:db:7e:
                    8f:34:37:6f:2a:d2:1d:10:54:77:70:e1:96:f3:db:
                    51:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DA:20:27:31:04:52:A5:70:B2:4B:9A:EB:F8:A2:36:A7:1C:0A:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5b28f16c-50b4-32a2-8775-18d4cf2cc3bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:83:38:8c:ec:03:f8:a0:63:e1:66:21:00:ef:7e:b2:13:e2:
         96:7a:8f:eb:82:7a:87:48:0f:c6:ae:ed:cf:01:c0:c3:e3:23:
         24:28:eb:f0:47:d9:97:02:ef:2a:c1:83:1e:2d:bc:3f:25:da:
         5c:50:ca:4b:33:07:ce:ea:c4:15:40:d6:08:32:de:0d:4c:91:
         f3:65:eb:73:1a:53:51:19:e8:d6:a3:a4:f3:f2:2c:2d:b0:a6:
         0e:31:58:88:40:64:53:80:5c:b8:35:c8:db:21:29:c3:7c:7a:
         b3:2b:0f:b2:a8:02:bc:cb:86:20:55:91:bf:4d:d6:ed:3d:50:
         48:da:27:b3:51:96:52:8a:cb:6e:52:b6:f3:51:33:09:de:c3:
         18:97:2d:fe:22:d6:d7:bc:dc:53:4d:d3:69:15:da:4d:43:8c:
         59:59:c4:8e:c6:66:bf:b3:68:79:85:ab:a6:ce:36:92:8f:51:
         8e:b2:31:e0:c0:70:58:89:b5:93:75:02:e7:54:76:b3:d3:29:
         83:8a:ed:42:91:b1:fa:35:b4:6c:8e:a3:6d:18:ea:82:3d:99:
         d2:f0:a9:35:de:ba:f0:e0:f8:05:16:e8:85:b5:0e:fd:3f:13:
         8d:22:57:fe:50:51:cb:6c:7d:e0:6d:84:17:69:56:49:13:78:
         7d:d1:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:48:30 2026 by rpki-client