Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6d22ea68-46a4-31da-ad5e-09a1d3b8268b.roa
File:                     6d22ea68-46a4-31da-ad5e-09a1d3b8268b.roa (raw, json)
Hash identifier:          2S260tSUpu/+vBjN26qSum2fnaA8gOlz/jz9+TSaclo=
Subject key identifier:   DC:F4:BC:17:D9:2D:96:70:60:5E:6F:63:15:C8:1C:FB:FC:DC:B2:27
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E5619FF20712C39B68C2E3C88
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6d22ea68-46a4-31da-ad5e-09a1d3b8268b.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     202
IP address blocks:        2607:f028:131::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:ff:20:71:2c:39:b6:8c:2e:3c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=44a8a53e-37ce-4a2b-99dc-206dd29d40aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:50:fd:e7:e6:df:af:ac:33:a8:c5:d1:48:ae:
                    26:9a:b6:06:d3:92:de:b8:81:64:84:54:63:68:c1:
                    7d:df:e7:b7:00:70:00:d7:ca:1d:99:d4:9b:1b:d3:
                    ca:df:93:84:f6:59:2f:7d:ba:d9:92:96:d5:00:0f:
                    03:b4:46:f9:6d:b2:00:b2:f9:a5:18:f1:85:ab:c4:
                    47:33:e3:ae:e0:33:00:6a:57:00:e9:75:a9:5f:7d:
                    3e:23:28:aa:13:e9:fa:fb:06:ae:6e:67:85:1b:ec:
                    45:10:ae:75:b2:89:b9:fc:a3:a8:01:c9:f1:a7:43:
                    30:05:3b:f4:86:12:7e:c3:ea:93:50:88:fe:8f:bc:
                    85:1b:3b:d2:5e:e7:06:c6:18:54:d8:5f:11:b6:5b:
                    08:67:70:c1:71:3b:e3:23:eb:0b:3b:92:47:8c:56:
                    f1:01:bb:f7:18:52:c5:8f:b6:fc:13:b7:d2:a7:a7:
                    20:81:9b:5c:7b:52:65:62:b0:ec:76:7a:61:c1:86:
                    20:8a:0b:4c:fa:8d:8a:d8:6b:94:f0:bc:b8:fe:85:
                    81:1e:27:37:7c:f5:f4:b8:4e:2f:d8:75:cd:01:47:
                    15:c0:1b:7a:b9:12:b8:6e:9f:44:c4:52:73:1a:fd:
                    47:9d:a7:2c:73:1a:62:38:d1:ee:d9:87:af:81:0d:
                    2d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F4:BC:17:D9:2D:96:70:60:5E:6F:63:15:C8:1C:FB:FC:DC:B2:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6d22ea68-46a4-31da-ad5e-09a1d3b8268b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:131::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ae:ee:1c:2e:ed:77:ef:79:d0:fe:d8:f8:a2:dd:9f:28:68:
         e0:09:0f:7f:5a:35:12:6c:b6:d4:ee:1e:e3:26:af:99:c0:e1:
         56:d5:db:28:3c:33:24:e9:7d:f4:d0:ec:f7:0c:eb:de:e0:52:
         9e:59:30:c5:11:7b:85:94:b8:7f:71:ae:0a:32:d0:d4:7f:8d:
         9b:0f:57:06:0e:e0:fb:b5:07:62:e5:5b:dc:7b:19:6b:74:e3:
         ff:67:eb:95:16:c9:e8:ab:fa:fd:39:33:55:b6:1e:e7:f9:ff:
         58:51:dc:39:e4:53:e5:80:9d:0d:ef:96:4c:5a:93:57:2f:50:
         d5:75:3f:6e:7d:20:e9:20:51:be:ee:e4:9e:f2:9d:33:64:c8:
         3c:10:b7:bd:b8:ad:ad:f7:ae:8f:94:c9:ee:7b:ab:88:8a:23:
         b8:43:a8:1b:81:ca:d3:fe:cc:f6:ed:74:9f:7e:39:29:18:91:
         cf:37:04:b5:72:b0:99:0d:6e:c4:62:e7:37:6f:e7:66:75:cb:
         f8:ef:65:a3:8a:d3:0c:53:b5:26:3e:6d:a3:8d:3e:a4:e9:f7:
         96:60:02:cf:2c:2b:b5:33:ac:33:53:45:b5:5f:07:2f:3a:59:
         62:1e:2d:9f:1b:4b:79:17:07:a0:8f:fc:72:13:bf:d3:d0:90:
         72:d5:71:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:47:55 2026 by rpki-client