Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8bd35fb1-b663-3b2f-a111-dd4cce8f3124.roa
File:                     8bd35fb1-b663-3b2f-a111-dd4cce8f3124.roa (raw, json)
Hash identifier:          63KAVl3Tg6r8TxwNlu6QMb9Lea9MztsxpYz/HGh5Fwo=
Subject key identifier:   77:B4:D2:F3:C7:F0:EB:8A:10:CF:DB:16:F0:7A:FB:59:F7:C7:34:9C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584DD09047B8C14A553154689B00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8bd35fb1-b663-3b2f-a111-dd4cce8f3124.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     202
IP address blocks:        2607:f028:a70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:47:b8:c1:4a:55:31:54:68:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=27ff0890-6e3f-49b6-a623-176715d56aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:84:60:a6:68:02:7c:3a:d2:68:d1:52:62:
                    8b:13:21:91:46:66:da:7e:3c:12:c0:8c:21:74:19:
                    c7:f1:52:8b:4a:6a:d3:54:55:b0:b4:2b:fd:17:c8:
                    79:b0:bf:2e:de:7a:73:61:26:d0:31:a2:a9:e9:e4:
                    2e:21:2a:a0:f9:71:24:a1:5c:0b:dc:b5:a1:a2:20:
                    90:22:8f:99:a9:dd:19:06:83:8f:1c:6a:98:98:bf:
                    eb:a4:0c:aa:52:68:26:4e:df:6c:f2:e7:85:de:65:
                    40:8d:0d:97:c2:b9:e3:cf:6a:c9:f1:3c:71:11:3e:
                    17:de:62:67:6f:ce:44:a7:03:5a:78:05:8a:73:62:
                    31:11:55:93:51:4a:87:7d:2d:34:4d:f3:75:f7:67:
                    55:c3:a5:84:ff:e6:37:c2:78:7f:88:92:09:6c:6c:
                    11:6a:dc:fa:02:d4:0f:7a:df:c5:29:3d:44:60:db:
                    73:43:cd:f6:83:6e:ae:01:d4:d1:5a:ca:9f:25:25:
                    55:69:09:84:e2:bc:d9:c2:d3:9a:ba:ba:47:f5:4b:
                    90:5c:fd:a0:20:db:e7:1f:db:27:e4:6d:89:6c:2c:
                    a9:5a:56:29:86:3a:b6:3a:5b:b1:f2:f7:bf:e5:31:
                    0c:e6:96:5e:ad:a5:fa:3c:6a:9c:c8:da:09:ee:12:
                    f3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B4:D2:F3:C7:F0:EB:8A:10:CF:DB:16:F0:7A:FB:59:F7:C7:34:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8bd35fb1-b663-3b2f-a111-dd4cce8f3124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:a70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:a1:d8:ad:b7:94:b9:66:d5:a3:92:90:e9:75:5a:dc:0b:55:
         9b:81:6d:21:61:a3:e7:ca:96:e2:01:40:46:85:ec:25:79:9f:
         c2:d1:fd:5f:de:19:a2:d9:0f:49:81:a9:bd:6b:1e:28:52:2f:
         ce:bd:60:36:a4:62:d9:59:8b:34:e1:5f:e4:9c:be:17:21:6a:
         bc:6e:d7:c3:d4:b7:5e:82:9d:0e:08:c9:2f:e8:65:b9:a3:cb:
         ba:8c:88:3c:64:63:21:fa:ce:28:10:56:a8:d0:f7:f8:ea:11:
         b0:96:8a:2d:aa:19:2d:22:25:2e:23:90:b7:d2:26:e1:56:51:
         68:45:93:45:12:8e:d2:1b:cb:f8:6e:e9:de:7b:36:6d:2f:96:
         84:5a:02:7c:ee:51:e3:fb:35:15:e4:17:a0:0c:2f:89:f3:33:
         a1:df:ad:fa:28:3b:b2:ba:06:6c:3f:9c:27:00:1c:fa:8f:16:
         90:a2:21:37:7a:f1:5c:00:bd:2a:35:5b:2b:26:09:86:6d:d7:
         ee:95:38:a9:4c:b6:6d:68:21:02:ff:51:f8:5d:0e:05:8c:ea:
         b9:d1:ef:1f:71:24:72:94:74:ad:41:25:fc:0d:14:8f:81:73:
         f7:9b:43:7a:e5:33:91:eb:32:58:cb:a8:32:92:86:3f:22:ad:
         87:cf:2f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:04:40 2026 by rpki-client