Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a02a9680-a97a-37ef-9732-9c4697176902.roa
File:                     a02a9680-a97a-37ef-9732-9c4697176902.roa (raw, json)
Hash identifier:          eE8400ru3J9iIttzDtaTqIJB1cqRhGwTi/OxC4+JWbo=
Subject key identifier:   E3:42:94:78:57:B2:32:E7:92:75:C3:8D:4B:6B:08:D8:E8:F7:B0:6C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E5619FC0CC78B2206A869FE00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a02a9680-a97a-37ef-9732-9c4697176902.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     3356
IP address blocks:        2607:f028:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:fc:0c:c7:8b:22:06:a8:69:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=4d311555-9652-4bad-8818-c18cfa7ea1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:90:5f:42:17:da:8e:c9:c9:62:ff:37:52:8f:
                    88:57:40:7e:5d:4d:da:79:ca:94:77:cf:6a:10:95:
                    31:ed:c3:01:52:59:70:50:07:11:0a:bc:d6:b2:9a:
                    e8:00:d1:65:0a:25:1e:9a:29:ec:ed:4e:c7:bb:b5:
                    af:68:54:34:a6:c4:ef:d5:6c:1d:5a:10:59:50:56:
                    c7:05:fd:74:c9:f8:fa:67:b4:5d:c7:d2:c5:0b:29:
                    3a:96:72:0d:c7:09:56:e7:75:ba:a6:63:a7:d6:1f:
                    d7:2d:33:64:a7:24:41:71:5c:b0:4b:cd:6b:2f:1c:
                    fc:64:42:d8:af:ba:58:52:d5:70:f2:e6:11:d0:15:
                    62:4f:ba:a9:96:9b:1e:52:86:0f:43:24:e2:fa:18:
                    cc:58:23:35:93:d0:75:d2:af:9c:c6:64:24:fa:cc:
                    7d:5c:a5:26:b3:31:1d:1d:e9:57:0c:57:a6:22:e4:
                    86:90:fa:50:86:ef:a2:4b:2a:a7:7d:a4:f0:19:3e:
                    55:eb:c0:bb:bc:0b:10:5f:69:37:b4:86:5a:d1:87:
                    83:43:59:42:53:c9:7d:74:e0:27:ea:2e:39:f7:f4:
                    6f:51:c5:0c:2a:b6:a2:76:68:94:46:ca:2f:a4:ed:
                    2a:1e:78:22:b6:21:2b:5d:e8:ef:47:4d:f9:dd:5e:
                    1f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:42:94:78:57:B2:32:E7:92:75:C3:8D:4B:6B:08:D8:E8:F7:B0:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a02a9680-a97a-37ef-9732-9c4697176902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:41:1e:2b:e2:e2:04:63:d0:e9:99:ca:69:df:14:d7:9a:7f:
         9d:61:67:1a:a3:10:25:11:8c:d0:5a:a3:8e:17:ff:f1:75:a1:
         01:06:bc:17:fb:ab:c0:7b:db:6b:26:17:ac:95:e7:c1:ba:54:
         e6:a7:07:a3:ba:b2:f6:48:e0:d5:ea:72:1a:8e:42:ce:92:cf:
         9c:d3:f6:af:60:b3:a7:85:a1:a1:55:59:73:d2:34:bb:74:cc:
         55:ae:d8:e2:46:1e:58:31:e9:43:98:2f:1d:fb:4c:55:a5:9a:
         f1:83:f1:3c:ad:25:9c:7f:61:92:af:5e:20:19:6f:a9:79:29:
         51:50:83:35:18:e3:5f:ac:76:bf:28:47:19:89:8e:41:da:fa:
         27:81:78:93:34:90:b7:d2:ce:01:e3:b1:1e:7f:f8:0e:69:0b:
         46:a8:04:4f:80:9a:6f:03:82:0a:7e:57:4b:ee:c8:0f:6c:52:
         0d:af:9b:cf:77:9b:b8:f4:64:9f:ce:c6:2f:2b:75:e4:dd:99:
         ce:ed:73:69:e0:3b:d6:a9:4a:48:39:5e:74:93:33:99:d9:ab:
         6c:3d:7c:30:90:5a:d8:f9:bc:24:69:43:34:db:5c:99:85:2a:
         03:35:22:09:9b:69:16:0b:fe:b1:a1:7c:e3:03:98:92:30:3b:
         12:99:96:5f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5WGfwMx4siBqhp/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk
NGQzMTE1NTUtOTY1Mi00YmFkLTg4MTgtYzE4Y2ZhN2VhMWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5BfQhfajsnJYv83Uo+IV0B+XU3aecqUd89q
EJUx7cMBUllwUAcRCrzWsproANFlCiUemins7U7Hu7WvaFQ0psTv1WwdWhBZUFbH
Bf10yfj6Z7Rdx9LFCyk6lnINxwlW53W6pmOn1h/XLTNkpyRBcVywS81rLxz8ZELY
r7pYUtVw8uYR0BViT7qplpseUoYPQyTi+hjMWCM1k9B10q+cxmQk+sx9XKUmszEd
HelXDFemIuSGkPpQhu+iSyqnfaTwGT5V68C7vAsQX2k3tIZa0YeDQ1lCU8l9dOAn
6i459/RvUcUMKraidmiURsovpO0qHngitiErXejvR0353V4fZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFONClHhXsjLnknXDjUtrCNjo97BsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTAyYTk2ODAtYTk3YS0z
N2VmLTk3MzItOWM0Njk3MTc2OTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEFBHivi4gRj0OmZymnfFNeaf51hZxqjECURjNBao44X//F1oQEG
vBf7q8B722smF6yV58G6VOanB6O6svZI4NXqchqOQs6Sz5zT9q9gs6eFoaFVWXPS
NLt0zFWu2OJGHlgx6UOYLx37TFWlmvGD8TytJZx/YZKvXiAZb6l5KVFQgzUY41+s
dr8oRxmJjkHa+ieBeJM0kLfSzgHjsR5/+A5pC0aoBE+Amm8Dggp+V0vuyA9sUg2v
m893m7j0ZJ/Oxi8rdeTdmc7tc2ngO9apSkg5XnSTM5nZq2w9fDCQWtj5vCRpQzTb
XJmFKgM1IgmbaRYL/rGhfOMDmJIwOxKZll8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:38:09 2026 by rpki-client