Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b51c3523-f9d0-335f-8e26-db350d5a5469.roa
File:                     b51c3523-f9d0-335f-8e26-db350d5a5469.roa (raw, json)
Hash identifier:          kTeeY+RqmIpatFuwkd8hpxlBkRPYj5tlL+6C6CcdnbY=
Subject key identifier:   0F:D2:65:A5:BF:49:1A:BD:0D:58:99:AC:F6:55:52:FE:D3:80:04:F9
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E86F4E92BA25D33FBD9C1C880
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b51c3523-f9d0-335f-8e26-db350d5a5469.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     202
IP address blocks:        2607:f028:b60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:e9:2b:a2:5d:33:fb:d9:c1:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=a5052e5f-5494-4294-9e60-8fca1f0e6bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:ac:93:55:43:50:3a:be:e3:10:e6:10:d2:
                    90:83:bf:cf:a7:75:59:be:76:2a:2f:75:44:48:b8:
                    36:28:3d:68:cf:c2:bc:f5:01:29:d1:73:fe:64:91:
                    3b:61:f3:04:a9:ea:c9:db:f7:ec:b5:40:34:1d:eb:
                    2c:4a:21:9a:bc:1b:3b:65:da:f0:14:4c:b1:44:90:
                    47:b8:34:d6:11:18:52:21:b6:7c:bd:af:54:a6:a8:
                    19:6f:fd:d6:6b:50:91:f8:e5:7b:60:45:57:01:1a:
                    e0:45:de:3a:94:8b:f9:e9:51:8d:e4:ff:96:4e:af:
                    67:db:bc:a9:c4:8f:c3:ef:f0:ff:4a:62:7a:1e:cf:
                    0f:97:f8:c0:4a:ed:89:75:45:57:16:9a:4c:8b:0a:
                    5a:cf:5c:ec:59:7d:96:99:e8:09:f8:a4:31:27:f2:
                    2e:e5:47:71:83:58:6d:ae:f2:e1:98:a9:e2:fa:af:
                    45:f8:b8:3f:2f:4e:ad:1a:cb:c4:f8:1f:fe:88:f5:
                    64:21:c9:f3:09:94:59:d2:6a:77:fe:1d:ad:f5:f5:
                    df:ff:03:f3:c4:a3:5d:74:10:c9:1f:f5:64:5c:cd:
                    6d:8c:9d:95:51:d6:46:5d:20:fa:2b:fe:3a:97:be:
                    b6:fb:0f:8f:9c:85:c1:90:08:f1:92:2a:50:b6:82:
                    73:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D2:65:A5:BF:49:1A:BD:0D:58:99:AC:F6:55:52:FE:D3:80:04:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b51c3523-f9d0-335f-8e26-db350d5a5469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:b60::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:49:6b:58:43:dc:d0:af:9e:79:ef:fb:9a:ee:61:35:0a:43:
         06:0e:38:d8:e9:72:13:fb:18:01:05:ea:64:6c:8d:0e:52:0d:
         57:74:12:40:8a:3e:81:86:f4:2a:d2:d8:e0:df:59:a5:b8:c9:
         99:3f:2f:dd:e9:c0:06:8d:ce:b4:e1:4f:97:bf:56:4d:46:72:
         6b:3b:5e:3d:70:ee:da:3c:92:1d:49:0e:a9:0b:5d:53:91:13:
         7a:7f:ef:d5:02:ee:27:91:b4:7e:b3:76:9d:fb:bd:85:8e:8c:
         0c:60:40:6d:6a:df:ea:ad:1b:48:b0:90:f3:67:85:9f:68:08:
         0e:ea:12:e2:89:23:e7:c7:28:ed:25:02:a7:f4:0d:fd:ae:27:
         12:f0:b6:bb:30:c8:68:27:36:23:94:f9:d8:f1:6e:5e:c8:ca:
         a6:0b:6f:31:70:fb:6b:1e:15:5e:71:c7:e0:95:44:1f:aa:f7:
         db:6c:5b:8f:a4:5d:f7:90:16:cf:cc:71:1a:be:5c:07:23:a7:
         00:01:c0:96:67:7b:5b:31:ef:a0:df:ee:62:f2:5e:97:6b:6e:
         9d:cf:14:f6:ac:0f:1a:16:98:28:14:6e:b5:a1:61:63:86:cf:
         72:05:5b:02:5d:09:fb:68:22:ee:8c:39:43:6d:0b:62:05:c5:
         5e:29:d8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:53:05 2026 by rpki-client