Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9c302c88-b997-38ac-a2de-72ea4684629a.roa
File:                     9c302c88-b997-38ac-a2de-72ea4684629a.roa (raw, json)
Hash identifier:          awqtNtce5qpMksM8aacLxlK9BRN9z9liM6i7Nz2KovU=
Subject key identifier:   92:F9:68:AA:2B:62:DF:16:37:C3:2A:D7:90:35:5E:BD:19:55:6E:C5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D300A4D32203DAF22FF7C0B00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9c302c88-b997-38ac-a2de-72ea4684629a.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     3360
IP address blocks:        2607:f028:41::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:4d:32:20:3d:af:22:ff:7c:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=48fb40e1-d6f8-44de-bd21-c050d5d0c5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:28:4b:b3:e1:13:1b:0c:17:26:43:bc:26:f4:
                    df:6b:5a:42:a4:45:c3:ae:01:63:8d:3b:e1:19:d0:
                    94:fc:78:f3:eb:49:66:5f:9f:b1:67:a9:25:23:38:
                    09:9d:9c:22:ad:51:a6:d3:c5:6d:7a:c6:dd:03:20:
                    57:1d:fa:df:f0:10:15:d3:12:98:9a:cc:fa:fc:7a:
                    e8:1c:36:18:9a:dd:a1:1f:cc:f7:42:2f:9d:bb:08:
                    42:e0:b8:62:99:fa:b1:61:16:d8:ee:9f:ed:59:0a:
                    2c:40:4a:fc:6e:d9:7b:e9:8e:90:b6:54:a8:7a:2a:
                    83:2d:79:5c:0a:da:54:e4:2d:f3:32:0e:8a:0b:cd:
                    e6:94:a8:5a:bc:fd:2c:20:02:7a:42:a6:ae:f9:81:
                    bc:00:09:2d:15:6e:f5:81:fa:3c:3f:3f:a1:30:8b:
                    71:07:92:f8:b2:cb:f3:b3:56:44:4a:14:be:52:0f:
                    e2:dc:68:82:a8:a6:7b:85:a8:b1:de:47:75:c8:d3:
                    9b:94:d2:fc:31:b5:04:ce:2b:8b:c7:e5:99:ad:af:
                    7e:2b:3a:b5:a0:6a:f6:3c:4f:47:fb:1f:76:13:d5:
                    29:d6:f6:c0:12:21:cd:09:ea:b3:d0:81:19:97:54:
                    fa:3f:8a:47:9c:81:85:5c:1d:af:13:fa:ad:03:6f:
                    a1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F9:68:AA:2B:62:DF:16:37:C3:2A:D7:90:35:5E:BD:19:55:6E:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9c302c88-b997-38ac-a2de-72ea4684629a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:45:11:ad:79:ce:b0:06:d3:95:20:d6:82:f1:47:96:02:57:
         d5:f2:e5:1a:db:4b:f1:c8:a8:49:35:62:d4:6e:aa:7f:75:78:
         ed:5c:64:9b:d0:9e:79:d2:bc:98:5e:62:4b:e6:69:87:49:b4:
         ef:08:4a:00:ab:f8:81:7d:be:3a:8a:59:ac:b2:8c:94:06:ed:
         ec:4a:8c:fa:b0:22:bf:e3:04:fd:b8:24:b9:f7:28:2e:3d:b4:
         c8:5b:2b:b1:da:2f:70:fe:3f:f3:17:14:cd:3c:20:a3:ef:72:
         a3:c2:7a:34:a1:bc:e4:97:28:d5:b6:a7:51:80:75:af:61:a8:
         1e:48:ea:f2:09:99:3c:74:d1:6e:c9:7c:2d:e4:d3:a8:02:fb:
         59:25:ad:aa:30:91:5b:b8:42:f7:b9:f5:dd:9f:74:64:90:3b:
         8e:ca:7f:5e:d3:e2:f7:d8:c3:85:70:54:2e:4f:e6:cc:04:4f:
         04:92:33:c1:30:30:d6:6b:7c:c5:de:b0:f2:1a:a1:13:c8:18:
         c5:13:7e:c3:95:c3:8f:9b:8c:93:67:d3:4d:27:e0:ed:89:da:
         a3:ca:7b:e7:6b:2a:e1:9d:7d:59:ac:f4:65:31:bd:f4:2b:c2:
         5a:27:2a:08:2f:87:75:0d:14:0c:8c:77:12:18:ed:d8:6b:14:
         13:70:45:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:09:04 2026 by rpki-client