Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9c55004b-d525-3ba6-95ed-5731fd6d418c.roa
File:                     9c55004b-d525-3ba6-95ed-5731fd6d418c.roa (raw, json)
Hash identifier:          iuqav+7uJ/lf/FsE8hI+kqmGONUlT2HuWrf4d86I6no=
Subject key identifier:   58:A5:35:95:53:B0:CB:B6:EB:77:83:25:9E:20:A9:61:2D:AE:5A:7F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E5619FDFDE5A8F8D164D46940
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9c55004b-d525-3ba6-95ed-5731fd6d418c.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     202
IP address blocks:        2607:f028:51::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:fd:fd:e5:a8:f8:d1:64:d4:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=cc70fc5e-234b-495a-935d-bcf39003f6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e7:ae:dc:e0:cd:f3:c2:c1:84:05:a4:52:c3:
                    77:cc:5b:fc:5a:06:e9:4e:3a:dc:b5:59:49:61:ab:
                    db:90:80:9a:e0:52:e3:d6:fd:f8:c7:f7:23:60:93:
                    c8:eb:b7:81:3e:6d:18:ee:da:dd:7b:df:88:d0:be:
                    d3:43:60:07:3d:fa:d1:59:72:91:b2:05:d9:0e:c6:
                    09:37:6c:8d:13:e2:02:51:c1:6d:3a:5e:5a:c5:c4:
                    6d:a2:85:7c:93:83:3f:6c:85:62:75:f6:fe:91:8d:
                    47:6f:c6:0b:67:33:49:b0:d9:7a:17:9b:6b:48:22:
                    9f:88:c0:6a:5c:be:c3:d6:2b:56:cd:7c:e9:36:e5:
                    99:5c:31:24:e4:7a:28:a4:ae:27:fc:7a:c1:e8:55:
                    de:2b:e7:c9:b8:9c:2a:01:17:64:e0:80:55:62:56:
                    53:a5:ba:91:d2:71:ca:da:37:cf:4b:96:26:9c:c7:
                    05:f1:8f:e6:93:b9:4b:91:7a:b4:d6:80:2f:4a:d3:
                    72:33:a5:ed:63:41:0e:0b:d1:95:2d:63:7d:56:5b:
                    08:5f:74:f5:16:aa:b2:7e:e9:aa:8f:2c:ca:aa:86:
                    e1:94:21:e0:a6:72:c9:39:b4:51:ca:08:b1:22:6e:
                    56:d8:bc:89:90:45:ee:bb:58:8b:44:12:7a:ad:07:
                    b5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A5:35:95:53:B0:CB:B6:EB:77:83:25:9E:20:A9:61:2D:AE:5A:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9c55004b-d525-3ba6-95ed-5731fd6d418c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:51::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:66:2d:87:5a:92:73:0b:e6:76:f7:1f:45:8e:80:99:27:78:
         57:dc:6b:81:7f:92:27:55:ea:01:9f:c9:e2:4d:e7:82:3f:3a:
         cc:e5:75:a9:9f:0d:07:01:cb:77:06:ca:e5:7b:9f:4e:9d:ae:
         75:e5:e6:5c:27:ef:67:3d:f4:09:cd:86:90:b6:16:46:0f:93:
         a1:ad:06:bb:f4:3b:dc:4d:00:da:68:f9:2d:87:c3:48:84:86:
         f9:4d:63:60:e6:6e:bf:8f:e5:a8:8c:3b:ad:b8:13:43:e2:c5:
         96:8a:ed:25:b2:68:8e:8f:c2:e9:5f:ac:e3:7e:ff:c6:7f:31:
         a7:91:fc:40:7d:5d:18:09:a3:a3:47:eb:89:b4:0d:5c:6c:7d:
         67:1f:a1:a7:90:b6:70:5b:a9:a2:1e:30:e0:43:4a:ea:cf:6e:
         25:41:e0:9b:44:b6:20:5a:af:aa:11:19:eb:b4:de:37:ba:ec:
         18:56:eb:8e:5b:be:d1:30:e2:b4:e0:ea:96:37:15:4d:da:23:
         ef:fd:af:d4:56:93:b0:6a:99:26:12:2d:89:fb:43:2e:79:24:
         3f:cf:f4:2e:47:9a:65:a9:62:99:4c:29:20:13:45:aa:63:9d:
         47:a8:04:84:fc:f8:5c:3a:68:a2:eb:b8:c3:f4:76:30:fc:b9:
         b0:3f:12:fb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5WGf395aj40WTUaUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk
Y2M3MGZjNWUtMjM0Yi00OTVhLTkzNWQtYmNmMzkwMDNmNmNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeeu3ODN88LBhAWkUsN3zFv8WgbpTjrctVlJ
YavbkICa4FLj1v34x/cjYJPI67eBPm0Y7trde9+I0L7TQ2AHPfrRWXKRsgXZDsYJ
N2yNE+ICUcFtOl5axcRtooV8k4M/bIVidfb+kY1Hb8YLZzNJsNl6F5trSCKfiMBq
XL7D1itWzXzpNuWZXDEk5HoopK4n/HrB6FXeK+fJuJwqARdk4IBVYlZTpbqR0nHK
2jfPS5YmnMcF8Y/mk7lLkXq01oAvStNyM6XtY0EOC9GVLWN9VlsIX3T1Fqqyfumq
jyzKqobhlCHgpnLJObRRygixIm5W2LyJkEXuu1iLRBJ6rQe1bQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFilNZVTsMu263eDJZ4gqWEtrlp/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWM1NTAwNGItZDUyNS0z
YmE2LTk1ZWQtNTczMWZkNmQ0MThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHhmLYdaknML5nb3H0WOgJkneFfca4F/kidV6gGfyeJN54I/Oszl
damfDQcBy3cGyuV7n06drnXl5lwn72c99AnNhpC2FkYPk6GtBrv0O9xNANpo+S2H
w0iEhvlNY2Dmbr+P5aiMO624E0PixZaK7SWyaI6PwulfrON+/8Z/MaeR/EB9XRgJ
o6NH64m0DVxsfWcfoaeQtnBbqaIeMOBDSurPbiVB4JtEtiBar6oRGeu03je67BhW
645bvtEw4rTg6pY3FU3aI+/9r9RWk7BqmSYSLYn7Qy55JD/P9C5HmmWpYplMKSAT
RapjnUeoBIT8+Fw6aKLruMP0djD8ubA/Evs=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:09:50 2026 by rpki-client