Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c8a270d-94d9-35ec-8fc2-c3555d1dd20a.roa
File:                     8c8a270d-94d9-35ec-8fc2-c3555d1dd20a.roa (raw, json)
Hash identifier:          KeXTuJjd8o82U8DtL4XTixGLNOBYe6NZDhyYtqngwpA=
Subject key identifier:   B7:20:F6:1D:B7:70:3A:9B:58:A5:10:1F:1A:B8:44:58:A8:C9:03:76
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E779A2293D8BB026B28209D80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c8a270d-94d9-35ec-8fc2-c3555d1dd20a.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     3356
IP address blocks:        2607:f028:b42::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:22:93:d8:bb:02:6b:28:20:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=4662da2e-28d9-4588-9254-36f999352043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:58:a2:14:b2:96:bb:b4:0e:4a:06:fc:2c:
                    91:7d:25:5d:b7:34:24:fc:dc:62:02:64:b0:c5:68:
                    cf:b1:ec:36:97:4b:0d:8a:e4:e1:d2:6e:fe:39:a4:
                    e9:de:2f:aa:aa:60:b2:cd:e7:fe:a0:a4:15:e5:c8:
                    a0:52:c3:86:41:86:c2:cb:15:73:5b:7b:2e:e7:a7:
                    52:6c:a7:bd:3c:ba:c2:ad:f5:16:5a:04:57:a5:dd:
                    7e:df:8c:a2:91:9e:61:37:c1:7f:2a:1d:7c:8e:fb:
                    31:94:4b:54:2c:cf:01:d7:a0:86:04:b8:24:28:52:
                    76:87:87:80:35:0e:0b:26:3b:5f:04:d3:f2:75:93:
                    62:8b:50:53:07:a2:49:1d:33:50:d8:98:7d:e3:24:
                    1e:a5:a2:d8:78:a0:89:4f:9d:89:22:62:c3:30:5f:
                    1a:5f:9b:65:5b:70:10:ae:1b:20:bb:cb:7e:a6:0d:
                    3e:46:28:ce:19:62:67:84:00:33:72:96:8d:07:5c:
                    19:49:14:27:da:fe:7c:4f:35:86:b7:e6:3c:f8:88:
                    13:64:b9:c1:20:f0:9f:28:45:66:8a:50:92:79:ac:
                    86:14:6d:54:42:2f:d0:c6:b7:a2:6b:3a:27:9b:5b:
                    e9:00:61:6a:15:d8:b4:e8:df:fa:da:0e:e9:b3:9a:
                    cf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:20:F6:1D:B7:70:3A:9B:58:A5:10:1F:1A:B8:44:58:A8:C9:03:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8c8a270d-94d9-35ec-8fc2-c3555d1dd20a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:b42::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:16:61:0f:b8:df:3b:77:e6:b5:27:01:36:e7:fe:70:98:81:
         19:d7:86:be:d7:b0:f0:72:bd:d0:e4:ea:91:5a:0e:cb:b4:39:
         a2:e2:4f:50:d4:aa:2b:00:78:46:49:e0:3d:c0:74:05:44:cf:
         8e:a5:e1:30:44:35:2a:ab:02:61:9f:fc:8f:c1:40:69:27:80:
         55:89:ad:66:12:56:af:08:79:53:db:ec:86:18:05:84:82:01:
         eb:39:23:d1:1e:9d:41:63:4c:8f:3a:3a:d6:23:36:b9:dc:66:
         fe:fd:83:3e:36:46:bc:2c:3c:35:f2:45:a9:19:32:d2:85:64:
         de:d0:5e:ba:b0:70:b7:0a:09:2e:4e:3a:83:2b:63:44:31:f4:
         71:1f:78:c6:3e:4b:53:8b:b4:4a:87:3d:5d:af:e6:5e:1c:5a:
         b1:cb:3c:d9:fb:63:a5:9c:cb:5b:7a:80:a5:d8:63:29:45:0f:
         6a:87:96:7b:ef:07:77:36:ef:23:ce:9a:13:e2:58:af:6f:48:
         22:5e:5d:1c:d8:16:d5:f7:18:73:36:54:ad:6d:d7:49:51:17:
         25:1d:21:b6:2d:20:20:d7:21:be:1d:76:33:8f:21:33:a9:02:
         f2:92:81:b0:51:a6:28:f0:36:94:40:ad:17:fc:4e:d9:d6:2f:
         48:9c:ba:bd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE53miKT2LsCayggnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk
NDY2MmRhMmUtMjhkOS00NTg4LTkyNTQtMzZmOTk5MzUyMDQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4pYohSylru0DkoG/CyRfSVdtzQk/NxiAmSw
xWjPsew2l0sNiuTh0m7+OaTp3i+qqmCyzef+oKQV5cigUsOGQYbCyxVzW3su56dS
bKe9PLrCrfUWWgRXpd1+34yikZ5hN8F/Kh18jvsxlEtULM8B16CGBLgkKFJ2h4eA
NQ4LJjtfBNPydZNii1BTB6JJHTNQ2Jh94yQepaLYeKCJT52JImLDMF8aX5tlW3AQ
rhsgu8t+pg0+RijOGWJnhAAzcpaNB1wZSRQn2v58TzWGt+Y8+IgTZLnBIPCfKEVm
ilCSeayGFG1UQi/Qxreiazonm1vpAGFqFdi06N/62g7ps5rPnwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLcg9h23cDqbWKUQHxq4RFioyQN2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGM4YTI3MGQtOTRkOS0z
NWVjLThmYzItYzM1NTVkMWRkMjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAtC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADIWYQ+43zt35rUnATbn/nCYgRnXhr7XsPByvdDk6pFaDsu0OaLi
T1DUqisAeEZJ4D3AdAVEz46l4TBENSqrAmGf/I/BQGkngFWJrWYSVq8IeVPb7IYY
BYSCAes5I9EenUFjTI86OtYjNrncZv79gz42RrwsPDXyRakZMtKFZN7QXrqwcLcK
CS5OOoMrY0Qx9HEfeMY+S1OLtEqHPV2v5l4cWrHLPNn7Y6Wcy1t6gKXYYylFD2qH
lnvvB3c27yPOmhPiWK9vSCJeXRzYFtX3GHM2VK1t10lRFyUdIbYtICDXIb4ddjOP
ITOpAvKSgbBRpijwNpRArRf8TtnWL0icur0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:31:23 2026 by rpki-client