Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b25a5eb-212b-3c8e-8c03-69d1c18976c0.roa
File:                     9b25a5eb-212b-3c8e-8c03-69d1c18976c0.roa (raw, json)
Hash identifier:          cZIDdGnw0EmYHTbFKio0LCu5CYXNAeNQVldDk+y+xGA=
Subject key identifier:   60:EC:67:5B:9E:B4:F7:29:90:E5:6F:C6:81:59:D1:AB:3E:CE:26:09
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E561A03D731D8069057863300
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b25a5eb-212b-3c8e-8c03-69d1c18976c0.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     202
IP address blocks:        2607:f028:110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:03:d7:31:d8:06:90:57:86:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=b353ebb1-16f9-490d-98bb-d1edc35879f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:cd:66:59:99:fd:5e:fd:4f:64:9e:98:c9:
                    ee:e7:0b:c6:80:75:7d:fc:24:8b:9f:62:3a:76:f9:
                    cd:24:58:c9:fd:8b:e5:0e:2a:35:8f:45:4f:db:e2:
                    cd:04:90:1b:3e:ad:25:af:e0:07:17:31:d1:ba:e5:
                    67:4d:68:c6:fd:a0:32:b7:bb:97:2a:09:b0:43:59:
                    8d:40:49:94:84:e1:3f:6a:b9:e7:f7:a8:9b:0f:e1:
                    08:03:aa:49:21:ad:0f:28:ac:cd:81:35:8b:64:dd:
                    eb:83:a1:57:80:b5:06:16:7d:0d:dc:8e:fe:46:70:
                    c5:d1:7f:9e:c1:27:e5:87:7e:e1:56:0d:40:d8:43:
                    a6:89:6d:26:71:56:b4:d7:b3:bf:5f:b9:99:b9:0e:
                    3a:37:be:40:2f:cc:f2:e5:90:c7:27:28:3b:d0:2d:
                    1a:b7:39:d0:e8:f4:3d:5f:08:e2:0f:29:82:0e:33:
                    08:c7:61:4a:73:3f:cf:c3:55:d7:c6:db:e8:64:a2:
                    c0:1c:ec:fc:a5:bf:ff:46:d6:4d:5b:6c:94:a8:2e:
                    13:06:53:7a:5a:27:92:ba:8a:57:c8:a5:96:9d:51:
                    78:7a:c6:3e:57:e4:ce:3d:d1:ae:cb:c5:d4:e8:ef:
                    cc:3b:98:5a:14:c7:0a:35:f7:db:fa:ea:65:38:11:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EC:67:5B:9E:B4:F7:29:90:E5:6F:C6:81:59:D1:AB:3E:CE:26:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9b25a5eb-212b-3c8e-8c03-69d1c18976c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:41:ae:2a:d9:67:65:fd:a2:6b:0b:83:f1:03:c3:4f:65:de:
         5e:d5:5c:f5:ea:d6:ea:cb:2f:57:08:f2:22:03:66:f5:7c:34:
         43:e8:e1:29:6e:77:76:40:6c:f1:f0:52:4c:39:ba:c9:26:1e:
         cd:94:62:ff:fc:52:3c:2d:9d:d4:fc:83:1a:f0:3f:f3:7b:fa:
         0c:5e:39:06:de:6b:5d:8a:99:35:9b:2d:fb:f6:46:f2:50:9f:
         b1:66:33:3f:57:06:62:1a:29:3f:48:2b:0d:87:7a:e9:d6:70:
         9b:aa:60:b5:fc:31:54:61:9a:9b:7b:62:69:ff:d9:a2:bd:18:
         e1:df:9d:48:5a:ef:cd:e1:63:c6:ae:95:69:48:23:04:df:fb:
         a1:20:41:e6:14:a0:15:c6:a6:34:fb:a7:6f:18:9e:b7:f0:8a:
         8f:0f:b2:67:47:76:6f:5d:9c:fc:1c:f2:ca:91:6c:92:66:7f:
         77:c3:c7:57:f0:80:e5:7c:41:70:4f:c7:0b:b1:2c:d6:35:74:
         78:24:be:78:c4:fa:db:23:6d:8b:c5:d4:9a:ad:04:20:b9:5f:
         da:62:82:0a:36:2e:2b:b8:6c:3f:35:b0:96:4e:0a:1f:9c:ff:
         32:ab:1f:36:a9:89:dc:48:4c:5c:4a:33:4c:04:cb:f6:a6:67:
         5e:b5:fd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:53:24 2026 by rpki-client