Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1220970a-8457-3184-855a-d35cd08bc00a.roa
File:                     1220970a-8457-3184-855a-d35cd08bc00a.roa (raw, json)
Hash identifier:          gL1lJD1ZMPmO5kpa4vpIzaAbWyH2CeIA0kf/81NtgMY=
Subject key identifier:   1E:1D:DB:49:A0:D6:D8:AC:13:E9:07:9C:86:C3:0B:05:C5:C8:AE:11
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D75D53A0F3CF26BA8D6018580
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1220970a-8457-3184-855a-d35cd08bc00a.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     3360
IP address blocks:        2607:f028:51::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:3a:0f:3c:f2:6b:a8:d6:01:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=6aa77900-7bf9-4f2e-9a4f-942d8528379b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:61:7c:7e:19:5e:3a:70:8f:dd:5a:7e:22:
                    87:a1:32:ec:c3:f3:5b:7a:2e:55:2d:32:d3:96:ac:
                    39:10:d2:84:a5:ab:3a:29:5e:89:b1:5e:3e:a1:eb:
                    31:5d:b3:4e:3a:8f:df:a5:98:9b:1a:a0:c5:70:a8:
                    21:60:c1:e5:e5:d0:6b:f8:24:0a:d3:ed:17:9d:e4:
                    da:fa:5f:a7:5a:1b:28:22:8c:e0:78:03:37:a5:39:
                    e2:16:30:00:32:9e:2d:2f:aa:55:6e:7c:65:7c:24:
                    21:e1:eb:a9:47:a1:ee:4e:3e:8a:0e:91:e6:f6:fc:
                    d6:9c:25:0d:fe:3a:d5:86:9f:37:2a:55:6a:3e:f5:
                    2b:77:b3:2d:ad:ea:f0:89:f1:1a:7a:51:b5:1a:2a:
                    9e:da:f8:55:ff:4f:b2:80:f7:0d:d2:e0:de:72:6b:
                    da:e4:5a:6a:91:c2:e7:05:87:5c:6c:4e:d3:da:e6:
                    86:ed:ea:f5:14:1a:e5:05:e2:bd:d9:d8:57:9f:48:
                    fa:74:34:df:82:49:41:f4:9f:79:87:03:7a:cf:de:
                    66:65:8c:bd:9c:0e:ed:43:11:7b:f0:c3:d7:8b:ec:
                    e4:1f:01:48:57:52:c7:1e:c5:40:83:29:bd:97:69:
                    06:1d:a9:50:65:1e:b6:42:9e:49:e9:b2:6b:43:21:
                    1e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1D:DB:49:A0:D6:D8:AC:13:E9:07:9C:86:C3:0B:05:C5:C8:AE:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1220970a-8457-3184-855a-d35cd08bc00a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:51::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:37:63:de:25:ef:26:56:97:d6:63:4a:2e:67:0f:54:20:fd:
         e5:c4:cc:6d:43:18:84:e0:d6:3f:30:d3:85:29:cc:5b:f8:10:
         00:c6:83:56:8e:b8:2d:e4:1e:a0:39:ea:cf:2a:93:95:73:b8:
         a9:25:aa:82:a3:55:0c:22:fe:76:37:d6:52:7a:4f:cc:3f:43:
         39:52:cf:66:8c:a9:48:4a:09:18:1e:ff:ac:1f:8e:d4:3f:91:
         d4:ff:bd:0c:6e:be:a8:70:23:08:6b:47:35:25:75:df:94:bf:
         96:d9:b6:7f:6b:d4:28:47:e7:28:88:58:32:6f:39:1f:bf:24:
         d7:6b:7e:d8:63:36:3b:74:99:a5:97:07:64:a6:0f:97:7b:15:
         37:f5:75:8b:35:33:83:c5:53:05:fa:2b:1f:01:41:80:8b:39:
         aa:d8:2d:14:c4:fa:94:42:f5:78:2e:5c:65:5f:4d:52:e5:02:
         c4:0d:6e:f2:d6:8f:f0:22:44:28:1a:2f:c4:1d:67:6a:5b:e5:
         b0:6c:99:79:2d:82:a5:90:8d:77:3d:fe:4f:be:51:c3:55:7e:
         0a:03:97:56:ee:cf:90:eb:6e:a6:81:50:a1:cc:41:25:2d:c8:
         4e:1c:12:58:99:39:35:2f:78:f1:8a:b3:dc:34:b2:f5:b2:b8:
         a1:4a:df:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:50:04 2026 by rpki-client