Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dcf371d0-52e0-3610-ad08-fa1541a43139.roa
File:                     dcf371d0-52e0-3610-ad08-fa1541a43139.roa (raw, json)
Hash identifier:          jtc3zsovdJm/IgZZNYoJpuaPmtgLRRq2qpyGkQ0BcbE=
Subject key identifier:   58:EB:A8:59:7E:DE:17:F1:5A:E6:DC:52:3E:50:4F:C9:C7:49:EF:61
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E779A1C926959F069A817AF90
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dcf371d0-52e0-3610-ad08-fa1541a43139.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     3356
IP address blocks:        2607:f028:b12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:1c:92:69:59:f0:69:a8:17:af:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=ee40a814-bc5b-4fda-914c-9e55d8f7649b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:97:52:22:2d:07:82:4b:2d:80:b6:b7:05:
                    f7:8a:5e:4e:a5:08:7a:e1:86:4e:12:22:f9:ec:fa:
                    5f:cb:5e:68:21:0b:0b:ce:0b:1e:54:b8:69:01:9a:
                    f3:2e:df:21:ef:4d:49:5a:9c:3c:ac:1e:8a:66:a8:
                    ed:75:8b:d8:89:91:74:24:95:50:a1:5d:1f:b5:ed:
                    5e:6f:82:09:00:e3:d4:c1:a1:12:73:52:b4:6b:3e:
                    27:f8:e7:14:0d:60:f1:55:78:4c:95:3d:dd:3b:51:
                    2a:7e:72:09:3c:22:01:aa:51:b0:0c:d1:87:c3:4e:
                    7d:a0:aa:10:ae:d2:b2:98:35:7b:e7:35:0e:53:a8:
                    48:ad:9c:08:80:35:96:b6:f1:84:89:e4:90:a7:eb:
                    78:13:8b:06:8d:19:6f:d5:10:7a:cc:49:79:82:92:
                    d8:dc:05:eb:94:e9:3c:36:ac:5e:38:72:41:99:92:
                    dd:b0:78:dd:09:d2:e4:1b:9b:c8:98:2a:ff:d7:9d:
                    12:5b:ed:ca:0a:f1:88:76:e7:59:27:87:0d:56:bd:
                    d8:ee:4b:95:09:fe:51:1c:19:ef:0f:f4:d6:2d:76:
                    31:53:10:65:ce:5b:c8:ab:bb:40:78:a0:a2:20:84:
                    53:fd:e2:c5:c2:1a:62:59:39:e5:d3:a0:df:70:9f:
                    1a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EB:A8:59:7E:DE:17:F1:5A:E6:DC:52:3E:50:4F:C9:C7:49:EF:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dcf371d0-52e0-3610-ad08-fa1541a43139.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:b12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:fc:37:98:19:64:cf:65:f5:5b:e4:df:ee:40:ea:43:10:66:
         b4:f2:56:21:38:a4:1e:08:13:17:92:11:61:cd:1e:7e:31:2a:
         62:0e:bb:69:a0:cf:92:3a:e8:76:e5:c7:e3:d8:fa:8d:8c:2c:
         6b:a6:6d:30:ec:37:54:fc:27:ae:35:f6:4a:ff:17:0f:bd:dc:
         e6:0c:b4:47:b7:c4:6b:fc:b3:de:be:72:b8:05:56:65:92:8a:
         1d:94:b4:c1:3d:9e:1a:c1:1d:de:01:c7:29:56:ed:10:29:4a:
         cc:b3:c8:8e:d3:0a:ea:7a:af:27:a8:15:c6:c6:09:7c:97:a3:
         90:6a:f9:8e:7c:9d:64:75:9f:16:4c:39:26:bc:a5:d1:0c:a6:
         47:07:f1:8b:f2:88:3f:6f:57:9d:56:86:fe:44:e6:b2:05:33:
         d9:0b:66:14:52:50:12:9f:b1:f3:02:3f:1d:1d:61:5f:e5:8e:
         e8:88:34:97:8c:9c:90:1a:2c:90:07:97:c1:4f:10:46:e0:f8:
         73:90:6d:d3:e1:be:00:bd:62:c9:67:1c:cd:45:c1:bf:98:23:
         24:5a:b8:f5:27:50:48:bb:75:b6:ff:33:03:7f:c6:56:e5:fa:
         d5:18:22:b0:06:db:e5:2e:2d:59:50:3d:c3:37:a8:36:d7:00:
         aa:b6:ca:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:37:40 2026 by rpki-client