Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c0d2452-9b55-3695-b35b-a6d65bba0a66.roa
File:                     1c0d2452-9b55-3695-b35b-a6d65bba0a66.roa (raw, json)
Hash identifier:          OB2ufZcvuXbATp6t1yLzEmwgikTfv8YZ2OkVhKTa8nI=
Subject key identifier:   11:2E:3B:2D:B1:23:7A:0B:05:D2:F3:92:B9:A9:BD:7E:64:6D:85:39
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D75D53B184B68B4BDAE7C83A0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c0d2452-9b55-3695-b35b-a6d65bba0a66.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     202
IP address blocks:        2607:f028:72::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:3b:18:4b:68:b4:bd:ae:7c:83:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=df18e10e-296a-44a7-9b61-d6a885b21c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:57:3b:d6:7b:a9:76:3f:86:80:30:b5:04:
                    76:26:c9:23:ad:f8:ba:89:9b:78:30:0e:1f:9b:a2:
                    70:a1:de:ae:3c:79:a2:3b:31:f3:2e:03:21:8b:73:
                    1a:75:f7:ed:fa:d4:a9:ce:08:87:5d:e0:02:63:d0:
                    c9:18:3d:4f:0c:4b:dd:27:75:a0:24:c9:8e:c8:85:
                    cb:c2:42:66:7f:f8:ab:0a:90:dc:08:50:2f:34:09:
                    47:75:0c:80:e5:ce:6d:e1:d7:a5:a9:36:e2:22:e3:
                    47:68:8a:6f:29:fb:0a:86:db:3a:87:9e:bb:f2:3b:
                    24:68:fe:74:bd:61:36:72:b4:40:48:be:85:e8:f4:
                    ec:61:99:8c:58:5a:90:c2:89:cc:ee:b5:45:07:f7:
                    94:ad:7f:10:13:87:e8:f6:94:99:f6:01:76:28:d8:
                    ac:fc:1b:cd:26:89:99:49:05:90:9b:e1:dc:f0:9f:
                    95:b9:dc:e0:d9:ae:0a:f6:6e:60:a4:36:81:5b:35:
                    9f:e6:f5:eb:b7:da:08:24:27:78:30:46:4d:75:00:
                    b7:97:3a:9e:07:fd:0b:be:2f:cc:23:71:71:e7:a3:
                    cb:c7:68:41:bb:89:2a:0e:35:92:8e:fe:e2:9d:2a:
                    cd:dd:48:6b:8a:c6:e0:d8:7e:a5:0e:63:7f:1d:18:
                    05:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2E:3B:2D:B1:23:7A:0B:05:D2:F3:92:B9:A9:BD:7E:64:6D:85:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c0d2452-9b55-3695-b35b-a6d65bba0a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:72::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:86:b7:44:0c:aa:b2:5d:05:b2:9f:d2:ea:b2:b3:b4:c2:bf:
         1e:20:e0:cb:4a:6b:55:62:f9:69:d2:94:ec:83:34:69:8e:31:
         86:45:67:90:78:02:95:42:b2:1c:92:ac:bc:3d:3b:ca:87:e3:
         bf:53:bb:3b:e9:70:7d:ad:de:97:e5:c7:f4:c8:15:2f:54:07:
         18:a5:9e:9a:a0:7b:ce:0d:a5:8b:f6:2b:28:59:82:cf:88:45:
         cc:f9:6a:ac:be:8b:85:c6:b8:7a:fb:c6:46:f5:61:ac:ee:81:
         32:b8:91:4d:4b:fc:56:7a:64:51:3d:e0:4a:b2:93:19:ca:83:
         a6:a8:6a:19:f4:50:a4:4d:ca:52:c3:37:80:55:dc:3c:53:e5:
         ec:27:3e:a9:20:5c:66:53:4a:c6:60:3e:a1:fd:62:f5:b9:08:
         c4:e9:0d:b7:e5:eb:25:34:58:67:5a:2d:8f:37:33:2b:e8:16:
         dd:fa:8e:2a:ba:d3:98:2f:ff:3a:b0:f3:34:7c:dc:5f:09:86:
         08:c5:11:e6:db:fd:2b:79:49:de:77:7c:89:fe:71:0d:95:b4:
         cf:b7:f1:af:63:d3:17:ba:81:3c:51:f2:61:7d:77:55:df:e4:
         e9:25:40:bb:a8:48:d9:79:cb:72:2e:a1:e8:df:d5:30:09:99:
         a7:22:77:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:31:23 2026 by rpki-client