Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f2f8d9ea-5420-33f8-82f7-a43d52ab9ea1.roa
File:                     f2f8d9ea-5420-33f8-82f7-a43d52ab9ea1.roa (raw, json)
Hash identifier:          nB1kIfQsRMLz0fIXwkQg4oqxW/blAdEAuerQPIYo7hI=
Subject key identifier:   15:76:7F:1B:6F:D9:36:09:77:76:AC:F1:72:A1:40:1E:9E:27:8F:4D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584DD0905A0F5B98A07CE6B39E00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f2f8d9ea-5420-33f8-82f7-a43d52ab9ea1.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     202
IP address blocks:        2607:f028:b70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:5a:0f:5b:98:a0:7c:e6:b3:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=880ecc45-36e1-4339-9b4c-0dd0056b5202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:b0:86:17:42:b6:23:1d:76:77:3e:8d:d3:
                    79:c0:d6:66:fe:2a:9f:25:31:51:5f:9d:41:44:ae:
                    d5:bc:03:3c:2f:97:e9:8f:ea:3b:95:5d:e4:d3:9e:
                    dc:62:a0:95:e1:3d:93:0b:06:22:b8:2e:e6:25:ce:
                    c5:c4:cd:cb:cf:08:7f:e7:e5:71:a1:73:d4:86:6e:
                    ce:b3:f3:06:f2:50:b2:82:76:cd:31:9e:e4:2a:e1:
                    42:80:a1:e5:b5:9f:d1:71:ae:76:03:e2:9d:10:74:
                    5b:54:6e:c7:71:da:fe:36:99:83:b5:7f:5e:b5:3c:
                    ae:51:2c:5f:04:90:73:bb:c9:c9:8d:78:b3:14:e6:
                    77:09:55:b1:0a:3e:20:80:f7:b7:74:52:33:9a:ae:
                    3c:3c:e7:de:63:f4:39:c5:40:90:9f:7a:34:41:b6:
                    6d:4c:6c:ef:be:7d:3b:ad:fc:91:4c:98:15:03:af:
                    84:53:3d:0a:26:ed:26:16:dc:c0:c4:cd:2d:73:3e:
                    31:60:b7:4c:3d:fa:81:8f:3b:9c:21:22:0b:91:1e:
                    b2:60:89:3e:89:69:db:5a:76:3d:a0:d0:90:19:81:
                    7a:58:0d:ae:73:d4:7a:80:c0:81:31:fd:42:ca:14:
                    77:b7:e9:c0:4e:90:f3:6f:6d:b6:80:26:22:20:b5:
                    88:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:76:7F:1B:6F:D9:36:09:77:76:AC:F1:72:A1:40:1E:9E:27:8F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f2f8d9ea-5420-33f8-82f7-a43d52ab9ea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:b70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2d:96:d7:af:3f:86:83:81:bc:cd:8f:1a:db:5e:36:f4:18:
         ef:68:42:b9:85:c2:bc:0e:0a:1b:cc:ee:26:57:2f:6a:87:43:
         61:76:88:50:77:83:a6:b5:81:71:2b:60:2d:40:e1:85:57:c5:
         4d:d3:30:45:a8:71:d9:89:16:2b:29:d1:7b:6a:af:39:d0:89:
         be:02:ca:e1:6d:1a:7b:87:74:d3:20:fb:35:f8:91:90:2e:55:
         37:9a:d2:17:13:40:f7:56:d0:11:4a:58:f9:30:12:42:c0:29:
         8f:fa:c7:e9:51:82:e0:15:bf:51:82:30:a7:fc:0e:80:d9:d5:
         59:3b:93:36:37:24:4e:d3:df:21:5a:51:07:c6:94:40:c8:76:
         a9:f0:9f:0c:97:01:43:a1:10:39:f1:67:9d:a4:9f:ec:b4:32:
         07:6c:7c:69:0a:c9:12:ec:be:bb:0a:eb:a8:8e:50:14:57:1d:
         f5:b2:ad:54:58:81:0d:09:c0:73:5b:47:a1:04:8f:20:b5:a5:
         ec:34:48:c5:1f:e4:ae:e1:2d:c8:11:e1:43:67:92:7b:fe:18:
         6b:c3:7f:59:b1:8c:2b:12:49:dc:88:10:27:e5:39:43:64:06:
         92:c4:b0:c3:61:ba:5c:d0:42:04:fb:7e:ce:a2:58:97:7a:69:
         a5:02:c0:33
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3QkFoPW5igfOazngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk
ODgwZWNjNDUtMzZlMS00MzM5LTliNGMtMGRkMDA1NmI1MjAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjGwhhdCtiMddnc+jdN5wNZm/iqfJTFRX51B
RK7VvAM8L5fpj+o7lV3k057cYqCV4T2TCwYiuC7mJc7FxM3Lzwh/5+VxoXPUhm7O
s/MG8lCygnbNMZ7kKuFCgKHltZ/Rca52A+KdEHRbVG7Hcdr+NpmDtX9etTyuUSxf
BJBzu8nJjXizFOZ3CVWxCj4ggPe3dFIzmq48POfeY/Q5xUCQn3o0QbZtTGzvvn07
rfyRTJgVA6+EUz0KJu0mFtzAxM0tcz4xYLdMPfqBjzucISILkR6yYIk+iWnbWnY9
oNCQGYF6WA2uc9R6gMCBMf1CyhR3t+nATpDzb222gCYiILWIewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBV2fxtv2TYJd3as8XKhQB6eJ49NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjJmOGQ5ZWEtNTQyMC0z
M2Y4LTgyZjctYTQzZDUyYWI5ZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgfwKAtw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEotltevP4aDgbzNjxrbXjb0GO9oQrmFwrwOChvM7iZXL2qHQ2F2
iFB3g6a1gXErYC1A4YVXxU3TMEWocdmJFisp0XtqrznQib4CyuFtGnuHdNMg+zX4
kZAuVTea0hcTQPdW0BFKWPkwEkLAKY/6x+lRguAVv1GCMKf8DoDZ1Vk7kzY3JE7T
3yFaUQfGlEDIdqnwnwyXAUOhEDnxZ52kn+y0MgdsfGkKyRLsvrsK66iOUBRXHfWy
rVRYgQ0JwHNbR6EEjyC1pew0SMUf5K7hLcgR4UNnknv+GGvDf1mxjCsSSdyIECfl
OUNkBpLEsMNhulzQQgT7fs6iWJd6aaUCwDM=
-----END CERTIFICATE-----
Generated at Wed May 13 10:48:35 2026 by rpki-client