Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e9f06fd-5bf3-3403-ab2e-3a4a6d646a9e.roa
File:                     1e9f06fd-5bf3-3403-ab2e-3a4a6d646a9e.roa (raw, json)
Hash identifier:          s34vwLtU1an2yrBK1AhkmDoCCJlgeHsvdEYSIS98L4Q=
Subject key identifier:   A1:1D:EB:D4:31:AE:4C:9F:91:C2:B3:D4:7F:83:BD:DC:45:23:7C:DF
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584CB6B71592DC7F1D81E3AEFE00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e9f06fd-5bf3-3403-ab2e-3a4a6d646a9e.roa
Signing time:             Sun 01 Feb 2026 02:00:32 +0000
ROA not before:           Sun 01 Feb 2026 02:00:32 +0000
ROA not after:            Sat 02 May 2026 01:00:32 +0000
asID:                     203
IP address blocks:        2607:f028:b61::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b6:b7:15:92:dc:7f:1d:81:e3:ae:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb  1 02:00:32 2026 GMT
            Not After : May  2 01:00:32 2026 GMT
        Subject: CN=edb48553-0421-42f6-bf72-2292ab7c42ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e3:5d:35:d0:33:6b:47:3a:8c:2c:21:8f:f7:
                    30:45:ac:87:7d:36:26:65:b5:9c:37:b8:9f:99:ce:
                    98:2f:9a:85:97:23:0e:49:ec:3d:01:44:e8:27:9d:
                    c7:a9:f7:cb:68:8d:cd:64:7a:c4:0c:b4:ad:08:4e:
                    b2:01:d4:6a:77:79:db:cf:82:60:69:95:26:b8:d0:
                    71:40:9b:09:e8:2a:f3:a8:88:36:7c:a3:6a:b3:b5:
                    d5:09:f0:93:55:25:51:54:a0:fa:85:a6:06:0c:53:
                    79:89:e9:dc:fb:eb:fd:fb:61:06:d5:c5:44:7c:70:
                    c8:f1:f1:4a:93:8f:a7:f4:77:7a:df:36:1a:9a:51:
                    5f:42:35:77:2d:94:1b:37:37:31:86:e4:60:fb:9c:
                    2c:61:39:66:57:d8:ff:de:00:9f:05:50:aa:81:ab:
                    a3:02:b1:67:8b:54:c9:2f:b9:7b:31:af:75:31:2e:
                    c2:2e:97:88:27:95:70:a9:2b:0c:88:ca:dc:28:d1:
                    ba:48:59:d6:f1:7f:53:b6:0a:a9:e0:f2:2c:0e:cd:
                    f9:4c:2b:b3:d1:01:29:3c:06:30:5e:ef:7e:3d:a3:
                    5f:67:bf:0f:34:24:a8:da:c4:c2:d0:e0:59:f7:6c:
                    94:4f:f0:8d:a3:1e:a7:54:3d:47:ae:53:e8:d0:e6:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1D:EB:D4:31:AE:4C:9F:91:C2:B3:D4:7F:83:BD:DC:45:23:7C:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1e9f06fd-5bf3-3403-ab2e-3a4a6d646a9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:b61::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:6b:f4:c5:dc:e5:d9:45:ee:ea:3d:16:05:b1:c4:13:00:85:
         a7:0f:00:3b:03:b8:ac:8f:25:18:07:84:b2:55:23:7f:3f:37:
         71:b3:fa:92:7f:68:b8:9b:9c:bf:1a:5b:d9:0a:0f:e7:dc:22:
         99:52:47:5a:d7:f5:e8:2d:98:3e:01:52:78:f4:fd:54:1b:2f:
         b4:c4:e0:49:69:e1:1d:7c:97:d5:c8:e2:42:ca:d5:27:9d:f5:
         b8:f4:6b:7a:4e:f9:05:3e:9a:89:0d:02:97:8f:2b:0c:6c:f5:
         02:65:37:05:ce:c2:e2:4b:44:54:b8:1b:70:d8:c2:46:71:9f:
         f2:35:f9:0b:54:2e:54:1c:5c:3f:05:96:91:50:27:fc:0f:0d:
         7f:3d:48:95:62:82:dd:7c:f2:29:e0:6f:a9:76:7f:b2:26:b7:
         6f:e0:0e:12:78:3b:7a:5b:26:d9:a7:db:b4:7d:c9:56:c0:6b:
         2f:3b:9f:d1:b0:63:04:43:b4:84:a5:40:3e:1f:b0:5b:28:46:
         19:98:2b:a8:b6:c1:1c:56:c9:eb:a8:41:37:f7:00:9a:80:e0:
         34:c2:60:d8:30:05:78:bf:d1:ed:c0:7a:bc:b8:7b:08:98:6c:
         cf:cd:a7:e6:f8:24:f1:6d:02:47:b7:bf:d8:ac:e7:13:f2:46:
         04:d7:45:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:39 2026 by rpki-client