Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fd784879-01fc-31d0-8a98-dc87aeb7174f.roa
File:                     fd784879-01fc-31d0-8a98-dc87aeb7174f.roa (raw, json)
Hash identifier:          GZ3VxdxI/9y39xUvlpXds899qZOtY8+sX/gZY1gbXqY=
Subject key identifier:   BC:25:AD:4B:60:C3:1C:81:5B:AB:CF:2A:17:F1:E7:BF:2E:20:E5:A1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E5619FDF282A8A5B21520A940
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fd784879-01fc-31d0-8a98-dc87aeb7174f.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     3356
IP address blocks:        2607:f028:51::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:fd:f2:82:a8:a5:b2:15:20:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=5ddc6db5-ec35-4a30-a9aa-231e333b1c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b1:06:d6:19:b7:24:11:e2:cd:4a:1e:db:31:
                    01:d2:e4:a3:03:77:9a:14:aa:69:36:a3:21:33:5b:
                    e1:ac:be:49:6f:8b:91:50:98:e0:99:b2:fc:79:7f:
                    c8:7a:16:97:ee:3f:36:9e:26:60:28:bc:02:53:79:
                    e6:9f:3f:37:3c:ef:ea:05:9d:9f:6c:d0:7d:f7:00:
                    de:69:73:f6:87:f7:7a:5a:1c:a6:d4:23:4d:6d:38:
                    bc:23:0f:5e:7e:8b:70:f2:5e:70:e2:0d:9f:62:56:
                    c0:21:a0:61:be:96:e2:6d:1f:b1:5c:da:b6:d4:97:
                    0b:6f:50:53:f6:82:33:b4:71:ee:3a:f5:c8:3b:af:
                    0b:50:9f:ab:1b:76:78:09:0b:9a:66:e1:8a:33:ec:
                    c3:19:bf:ce:1c:40:d1:f9:f0:ae:2d:64:70:cb:ff:
                    99:62:29:96:39:c6:bf:da:a0:7b:56:86:fb:48:00:
                    43:67:b1:6c:48:49:d9:26:e2:cf:75:14:bc:b9:d7:
                    1c:5e:f8:0f:16:fb:b2:ff:0c:f6:9a:28:50:ed:08:
                    62:58:36:6e:24:13:1b:b8:35:f5:c0:0c:30:5b:6a:
                    17:a3:6b:91:47:af:ef:06:77:58:d6:2f:45:4a:a2:
                    1c:03:7f:34:7d:a0:90:39:17:03:1d:fb:9b:9d:c6:
                    4d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:25:AD:4B:60:C3:1C:81:5B:AB:CF:2A:17:F1:E7:BF:2E:20:E5:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/fd784879-01fc-31d0-8a98-dc87aeb7174f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:51::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:82:7f:32:29:5a:1b:9b:4f:18:79:ab:fd:da:98:fa:8c:15:
         f1:fe:b7:24:db:6a:df:72:8f:85:28:55:0c:66:64:ec:98:28:
         ff:e7:b5:de:c5:25:a2:0e:8f:49:40:c1:aa:15:94:0c:94:ad:
         42:24:09:c1:1b:aa:0c:69:b3:44:37:a4:82:a0:27:ef:61:4d:
         12:52:35:91:2a:e9:ed:45:ed:a8:17:33:b8:35:85:20:59:f6:
         3a:ff:27:e3:96:0e:17:32:76:10:dd:79:f2:e3:7c:0e:91:b3:
         71:b0:91:60:b5:e8:13:a1:dd:12:00:c1:a2:95:15:a2:ac:0c:
         e2:93:07:a2:d6:0d:67:19:ac:05:f8:5f:56:cf:e2:7c:65:77:
         df:b3:54:21:b6:04:c6:47:fe:48:56:f9:a8:27:1f:fc:4b:4e:
         e7:01:8b:bd:13:37:d4:f1:b7:af:81:5e:b6:ae:37:19:63:46:
         70:e3:c4:94:3c:c2:28:ad:0c:23:22:7b:df:e4:47:b8:9a:2a:
         73:91:6e:68:af:86:34:94:2f:af:cc:22:05:24:19:2c:06:0d:
         98:45:75:87:38:63:a5:52:0c:d7:6b:3e:fb:e8:cf:d9:3a:59:
         9c:9c:1c:2b:d1:70:fc:2f:d7:8b:e7:7a:e0:88:d0:83:0e:7c:
         4b:66:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:40:38 2026 by rpki-client