Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/052f9bcb-2dc1-3bf3-b7de-d1840b1ac095.roa
File:                     052f9bcb-2dc1-3bf3-b7de-d1840b1ac095.roa (raw, json)
Hash identifier:          Rt0XVfRTRr5HkXbbphy64LgezEYGgx/ztd1vX91vNvw=
Subject key identifier:   F3:AF:67:35:E6:21:06:35:7B:66:B9:D3:92:8D:F7:BC:38:0F:76:B9
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584CB6B711983CB1875B17705E00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/052f9bcb-2dc1-3bf3-b7de-d1840b1ac095.roa
Signing time:             Sun 01 Feb 2026 02:00:32 +0000
ROA not before:           Sun 01 Feb 2026 02:00:32 +0000
ROA not after:            Sat 02 May 2026 01:00:32 +0000
asID:                     86
IP address blocks:        2607:f028:b11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b6:b7:11:98:3c:b1:87:5b:17:70:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb  1 02:00:32 2026 GMT
            Not After : May  2 01:00:32 2026 GMT
        Subject: CN=944f1ced-a065-46b9-85f1-8344b2c446b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:21:c6:7f:ea:a2:be:38:45:bb:88:f5:bd:68:
                    46:b8:94:e1:2e:74:9b:72:ef:8f:46:9b:12:ff:f5:
                    97:68:a9:b0:e9:84:77:f2:5f:c9:0e:26:06:e5:1e:
                    26:f7:8e:09:1e:22:65:1a:16:c9:67:8b:e4:0d:af:
                    52:b3:b6:57:8f:52:52:89:e0:fa:e9:24:8b:bf:c9:
                    0d:d7:d4:64:8c:ac:54:5b:39:06:fa:06:b3:b9:25:
                    91:87:20:87:e8:c5:e0:f9:a5:57:25:3b:e5:95:23:
                    c7:5c:6d:2e:70:38:cb:45:57:6e:39:48:63:ba:e1:
                    c7:16:cd:7d:28:2b:7b:9f:59:82:96:63:00:08:d0:
                    98:84:6d:a7:7e:93:1d:e5:10:5f:af:6b:52:3e:be:
                    00:26:f6:16:d6:1d:50:32:a1:fd:23:04:71:f9:80:
                    99:1e:f5:02:ad:c7:ac:ac:80:76:94:8b:0b:1b:f2:
                    68:37:fa:56:07:3a:fb:b4:28:e0:c2:38:38:26:d1:
                    71:79:74:63:f4:b1:e1:36:4b:ee:69:1c:98:30:b6:
                    b2:63:8d:6e:8a:ad:b0:2d:99:7e:da:4a:bb:f8:52:
                    11:09:e7:02:ce:e9:1d:3f:2f:4f:a3:88:22:50:22:
                    43:52:ce:17:09:09:fd:a6:d9:98:9b:43:38:57:3a:
                    f5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AF:67:35:E6:21:06:35:7B:66:B9:D3:92:8D:F7:BC:38:0F:76:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/052f9bcb-2dc1-3bf3-b7de-d1840b1ac095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:b11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:49:f4:a3:94:b9:43:e6:c8:0d:fb:d9:d8:07:9d:16:09:f9:
         6f:26:04:21:5b:5e:0e:56:4c:f9:05:13:c7:05:cf:c2:04:c2:
         52:dd:34:90:b4:b9:0e:6e:9e:0a:f5:ff:c5:d9:d2:35:95:d6:
         0b:bd:77:8c:d7:51:de:a6:5d:be:c6:bf:35:6e:2f:e0:86:4b:
         37:84:f7:e7:55:cd:9b:e5:30:af:d4:95:0c:3a:cd:4b:11:8b:
         a1:73:3c:f2:38:b9:ed:62:e0:02:d3:b5:80:b0:82:0b:78:a6:
         de:19:ba:b9:10:0d:1f:4b:95:0b:23:e4:10:73:d5:ad:45:05:
         83:7d:b5:60:6d:44:ec:2d:e8:37:2d:f2:10:3d:2d:b2:95:34:
         ff:ae:13:a4:6e:71:a5:0e:b6:1a:36:a7:24:73:3b:ea:ca:22:
         0e:bb:d5:2e:62:c3:c4:70:b1:6c:52:bd:08:b9:56:b0:55:12:
         67:57:c7:d1:5d:97:6c:06:5f:4c:84:86:cf:20:e1:02:02:c7:
         5f:d1:42:54:32:e4:c8:49:49:ad:86:e5:3e:4c:30:32:8d:ba:
         96:90:26:5a:11:ca:32:9b:62:6f:8e:27:13:8e:ef:bd:be:b2:
         fe:5a:20:06:cb:1c:26:13:b5:9a:f2:5d:c6:c7:f6:51:af:d3:
         81:a0:76:0b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEy2txGYPLGHWxdwXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk
OTQ0ZjFjZWQtYTA2NS00NmI5LTg1ZjEtODM0NGIyYzQ0NmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiHGf+qivjhFu4j1vWhGuJThLnSbcu+PRpsS
//WXaKmw6YR38l/JDiYG5R4m944JHiJlGhbJZ4vkDa9Ss7ZXj1JSieD66SSLv8kN
19RkjKxUWzkG+gazuSWRhyCH6MXg+aVXJTvllSPHXG0ucDjLRVduOUhjuuHHFs19
KCt7n1mClmMACNCYhG2nfpMd5RBfr2tSPr4AJvYW1h1QMqH9IwRx+YCZHvUCrces
rIB2lIsLG/JoN/pWBzr7tCjgwjg4JtFxeXRj9LHhNkvuaRyYMLayY41uiq2wLZl+
2kq7+FIRCecCzukdPy9Po4giUCJDUs4XCQn9ptmYm0M4Vzr1UwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPOvZzXmIQY1e2a505KN97w4D3a5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMDUyZjliY2ItMmRjMS0z
YmYzLWI3ZGUtZDE4NDBiMWFjMDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAsR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI5J9KOUuUPmyA372dgHnRYJ+W8mBCFbXg5WTPkFE8cFz8IEwlLd
NJC0uQ5ungr1/8XZ0jWV1gu9d4zXUd6mXb7GvzVuL+CGSzeE9+dVzZvlMK/UlQw6
zUsRi6FzPPI4ue1i4ALTtYCwggt4pt4ZurkQDR9LlQsj5BBz1a1FBYN9tWBtROwt
6Dct8hA9LbKVNP+uE6RucaUOtho2pyRzO+rKIg671S5iw8RwsWxSvQi5VrBVEmdX
x9Fdl2wGX0yEhs8g4QICx1/RQlQy5MhJSa2G5T5MMDKNupaQJloRyjKbYm+OJxOO
772+sv5aIAbLHCYTtZryXcbH9lGv04Ggdgs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:56 2026 by rpki-client