Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a09449b-cc6b-3bcc-8d7f-7ff23fe41b9e.roa
File:                     9a09449b-cc6b-3bcc-8d7f-7ff23fe41b9e.roa (raw, json)
Hash identifier:          HdH5B6W2RCNIvL+g1a5Q6xwZMB/u2YrF3URxxO+63KQ=
Subject key identifier:   EA:01:C3:B1:B5:C3:31:51:31:64:FC:8B:8A:BB:65:46:3A:5B:58:5C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584DD0904B57BE582362DE28AE80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a09449b-cc6b-3bcc-8d7f-7ff23fe41b9e.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     203
IP address blocks:        2607:f028:a70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:4b:57:be:58:23:62:de:28:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=8d0fee17-5189-48a6-a061-b22a3bbfc42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:42:8f:27:92:29:e7:17:d5:bd:ce:4a:91:
                    92:10:76:7f:bc:e6:af:13:93:6a:6b:4b:98:7b:b3:
                    3d:10:81:d8:1c:10:39:c9:e6:ae:73:ae:6f:e7:8a:
                    40:f3:f9:1d:0a:64:85:05:2a:84:e8:44:5f:fd:27:
                    28:14:12:84:cb:34:20:e7:da:ed:6a:8b:8b:98:fc:
                    33:b7:f9:e3:9d:3d:29:92:25:e0:d2:f5:28:3f:04:
                    db:88:1f:52:49:f6:a5:92:9e:1a:51:e8:cd:2a:73:
                    9f:4b:58:bb:1b:5a:da:c6:59:8e:eb:18:72:e1:3d:
                    81:1b:01:af:2d:f5:db:ae:d6:54:32:d2:d8:19:f1:
                    50:3d:52:9d:06:80:e8:cb:01:4b:fc:2a:a0:51:1a:
                    94:21:67:c4:f2:80:65:51:56:fa:d9:81:3f:40:25:
                    38:59:ff:bf:a7:2d:81:bb:1a:42:dd:b8:78:01:fb:
                    2d:5e:1c:f5:46:bf:84:90:3d:98:e2:98:2c:c2:61:
                    ed:e3:ee:df:e2:83:a9:a6:f9:3d:19:88:6f:31:5c:
                    e1:2e:1e:97:e5:00:88:7c:5a:b4:44:ba:76:9d:43:
                    ea:00:da:ac:16:dd:13:c4:5b:c1:2d:15:bc:ac:8a:
                    dc:57:be:5b:fb:07:cf:25:46:12:b0:cc:58:8e:3b:
                    f9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:01:C3:B1:B5:C3:31:51:31:64:FC:8B:8A:BB:65:46:3A:5B:58:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a09449b-cc6b-3bcc-8d7f-7ff23fe41b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:a70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:80:ad:e6:02:86:fb:e8:52:1c:bc:17:46:f9:7d:a3:6e:12:
         e7:cc:5d:42:dc:00:6f:09:9f:db:38:b4:d1:b3:db:e0:5a:74:
         6d:e3:f0:c3:7f:66:46:19:45:70:b6:2e:8a:d8:4b:48:fb:31:
         86:ce:b0:0e:83:81:ed:bd:56:90:44:b6:d1:c7:09:d7:5f:2a:
         7b:6c:71:02:0d:c0:a1:60:a1:8d:fc:e1:5f:a6:4d:32:b2:ac:
         3b:e3:b2:83:30:df:b2:29:3a:6d:ce:40:78:e9:7a:5c:cd:a9:
         d9:b2:c9:d6:11:41:c3:66:0a:cc:91:2d:6c:ca:40:9e:d3:0c:
         d6:3b:5f:9f:3c:4e:b2:26:fd:6b:ce:78:3a:03:9b:ef:08:8d:
         7b:4b:a5:a3:e8:47:b3:08:31:bd:99:26:f7:3a:b4:a7:d5:f4:
         99:0e:7a:5e:fc:db:ad:5e:e3:5e:f1:cf:64:cc:9c:28:bd:eb:
         10:6a:7e:41:a6:ab:55:c0:e6:20:65:dc:d8:e1:b1:67:af:d9:
         e2:c1:3a:e9:ea:69:6b:cf:f1:25:7a:8e:3c:a2:d2:49:d8:19:
         28:86:d8:a4:07:39:d0:61:d2:45:ce:ab:03:78:d2:98:47:43:
         3f:90:91:b8:9c:ae:fa:fb:ea:cd:04:39:0b:74:71:47:d7:f7:
         a9:81:98:13
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3QkEtXvlgjYt4oroAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk
OGQwZmVlMTctNTE4OS00OGE2LWEwNjEtYjIyYTNiYmZjNDJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk1CjyeSKecX1b3OSpGSEHZ/vOavE5Nqa0uY
e7M9EIHYHBA5yeauc65v54pA8/kdCmSFBSqE6ERf/ScoFBKEyzQg59rtaouLmPwz
t/njnT0pkiXg0vUoPwTbiB9SSfalkp4aUejNKnOfS1i7G1raxlmO6xhy4T2BGwGv
LfXbrtZUMtLYGfFQPVKdBoDoywFL/CqgURqUIWfE8oBlUVb62YE/QCU4Wf+/py2B
uxpC3bh4AfstXhz1Rr+EkD2Y4pgswmHt4+7f4oOppvk9GYhvMVzhLh6X5QCIfFq0
RLp2nUPqANqsFt0TxFvBLRW8rIrcV75b+wfPJUYSsMxYjjv5dwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOoBw7G1wzFRMWT8i4q7ZUY6W1hcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWEwOTQ0OWItY2M2Yi0z
YmNjLThkN2YtN2ZmMjNmZTQxYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgfwKApw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHGAreYChvvoUhy8F0b5faNuEufMXULcAG8Jn9s4tNGz2+BadG3j
8MN/ZkYZRXC2LorYS0j7MYbOsA6Dge29VpBEttHHCddfKntscQINwKFgoY384V+m
TTKyrDvjsoMw37IpOm3OQHjpelzNqdmyydYRQcNmCsyRLWzKQJ7TDNY7X588TrIm
/WvOeDoDm+8IjXtLpaPoR7MIMb2ZJvc6tKfV9JkOel78261e417xz2TMnCi96xBq
fkGmq1XA5iBl3NjhsWev2eLBOunqaWvP8SV6jjyi0knYGSiG2KQHOdBh0kXOqwN4
0phHQz+Qkbicrvr76s0EOQt0cUfX96mBmBM=
-----END CERTIFICATE-----
Generated at Wed May 13 08:11:04 2026 by rpki-client