Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ad10099a-0d1a-3b9a-b923-5da6a59c129e.roa
File:                     ad10099a-0d1a-3b9a-b923-5da6a59c129e.roa (raw, json)
Hash identifier:          +B9CvaEmYNguxw7qj7e7ixDxxBghAQ8JVD+HmXMM3O8=
Subject key identifier:   FA:8E:7D:0D:B5:B2:6F:AA:59:21:E1:02:D8:FD:AD:3E:0A:3F:8B:5F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F2957BA3B98A1E0EB06A17D00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ad10099a-0d1a-3b9a-b923-5da6a59c129e.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     202
IP address blocks:        2607:f028:a10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:ba:3b:98:a1:e0:eb:06:a1:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=527129b0-919f-4016-9911-4be775d56f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:42:d3:a1:4a:9b:90:eb:12:ac:c0:9d:54:
                    7c:d6:f9:0e:f1:cd:50:b8:0b:03:ac:19:f4:aa:18:
                    97:6b:cf:16:2d:46:64:c8:e4:5f:55:7d:60:ee:e5:
                    f9:29:8f:31:fe:aa:40:8f:d7:d6:ba:7d:09:4d:5f:
                    9a:4b:89:94:96:b9:d1:35:f3:67:cc:f7:e7:5f:30:
                    ea:30:b3:da:d8:0c:b8:b9:56:b8:fd:da:1d:2b:0c:
                    f1:ba:ec:73:7e:a2:5a:05:74:47:9e:62:a7:13:f6:
                    33:8a:5b:17:c7:90:71:03:9b:34:6e:8d:dd:b7:db:
                    a1:60:04:3b:9d:fc:02:5d:69:bb:06:89:a3:4f:39:
                    08:52:de:ea:bb:86:29:98:53:10:e6:e3:e1:98:64:
                    31:f1:13:a6:aa:2c:95:9f:08:df:59:92:5e:79:db:
                    0d:85:8e:54:92:b8:a2:e1:fb:87:18:ee:64:a9:21:
                    d5:db:82:0e:9e:6d:94:88:8a:fc:6d:d1:ad:fa:10:
                    6f:eb:a5:54:1d:39:da:79:25:e0:55:cb:74:e4:36:
                    b7:71:16:58:7f:65:78:de:5a:9c:1e:7e:08:f2:ff:
                    d4:16:d9:a9:cb:dc:44:f6:12:54:e3:b1:7e:03:7b:
                    5d:9e:81:86:5b:ba:30:12:42:06:cd:9c:62:09:f4:
                    44:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8E:7D:0D:B5:B2:6F:AA:59:21:E1:02:D8:FD:AD:3E:0A:3F:8B:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ad10099a-0d1a-3b9a-b923-5da6a59c129e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:a10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:30:cb:aa:d3:e9:8e:f8:19:7e:c2:c4:46:67:79:24:40:f7:
         47:c6:14:96:97:f6:1a:38:6c:34:9f:29:b4:69:33:7c:18:d4:
         5e:13:b7:c4:62:9e:3b:60:02:4a:46:8c:92:7f:81:b1:95:2a:
         f4:88:e3:07:c3:e8:90:fe:ed:96:ef:c2:fd:37:36:e5:fe:9e:
         11:72:f9:b8:b9:41:65:f5:48:0a:70:af:37:d7:c7:8d:be:b7:
         12:be:ab:e1:78:01:d7:c7:4f:84:ec:09:56:2e:9b:11:63:9c:
         d2:c5:ec:33:56:18:22:5a:27:d8:b2:d7:32:28:bf:ce:89:6f:
         d5:80:2f:4a:20:14:c0:64:56:5f:91:f9:57:cf:19:89:6d:63:
         f9:34:d5:d6:43:81:ea:9a:49:d4:b2:b7:15:ac:da:72:04:ab:
         7c:74:df:44:82:75:a3:7d:8b:e6:c1:7a:7c:1a:35:d7:a6:18:
         81:b3:ee:50:e9:5c:41:e1:df:96:ae:1b:30:6e:5d:95:44:76:
         de:1e:ee:ae:71:97:d3:49:f4:97:1b:b3:47:3f:8d:42:8e:42:
         8a:4d:84:6a:fa:0d:f7:e2:6f:57:32:ca:ab:3e:52:f4:4d:3b:
         ca:95:0a:8e:d4:43:4c:89:e1:07:b9:09:39:f4:5b:74:d5:17:
         dd:5a:d4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 05:25:20 2026 by rpki-client