Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/27ad6e45-7775-341b-a270-31e4034cab7f.roa
File:                     27ad6e45-7775-341b-a270-31e4034cab7f.roa (raw, json)
Hash identifier:          DPkrar+Cclo6dMurY47lBR7Qa37ZgRmytFIkP1LvGvE=
Subject key identifier:   D2:4E:AC:27:20:BF:A8:D3:2C:CB:18:AB:27:D4:14:40:D3:7B:AD:59
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D75D5381FBC1EBDB0BC5DDD80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/27ad6e45-7775-341b-a270-31e4034cab7f.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     202
IP address blocks:        2607:f028:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:38:1f:bc:1e:bd:b0:bc:5d:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=2f08e92f-d44e-4102-81a3-a5da4c9cd5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:83:b7:57:93:3f:6f:67:d5:fe:0c:32:d9:a9:
                    52:87:e2:eb:19:f2:30:1d:b4:89:74:d9:de:da:76:
                    d4:80:7f:6e:e8:6e:c0:19:35:3a:46:4d:f0:cc:a1:
                    cc:0b:ba:1b:af:27:9c:a4:e5:80:d6:39:35:67:45:
                    e3:60:68:20:be:18:cc:7f:c0:08:2d:1e:60:e4:e5:
                    a9:22:73:23:c4:23:07:4c:8d:01:f8:7e:6d:87:7c:
                    a6:76:93:23:85:21:cb:d9:b3:d4:87:fb:bd:d7:c8:
                    3b:b1:f5:2e:34:92:65:c8:51:f2:d6:38:f2:c0:70:
                    64:cd:1d:8b:dd:c1:4f:b6:8e:0a:1c:46:2b:2a:4c:
                    29:de:55:17:a7:43:30:54:06:4c:c7:25:d6:aa:46:
                    d0:99:65:bf:e2:d3:c6:1a:3f:54:c7:60:1f:dd:36:
                    f4:58:b2:fc:73:e9:c0:c2:a1:2b:94:14:e3:e7:15:
                    60:32:5a:4d:92:ce:e4:23:37:ae:4a:ff:8f:4b:71:
                    ce:5f:44:f5:00:63:d4:68:fd:69:51:55:88:b5:a5:
                    78:b9:4e:0d:72:d5:d8:f2:54:be:ac:8c:3c:c0:ca:
                    62:7b:05:d7:af:72:26:b1:22:c9:8b:89:80:85:44:
                    eb:65:5c:c2:30:dd:49:0f:09:8b:63:48:56:c5:73:
                    c0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4E:AC:27:20:BF:A8:D3:2C:CB:18:AB:27:D4:14:40:D3:7B:AD:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/27ad6e45-7775-341b-a270-31e4034cab7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:60:d8:14:cd:6c:47:b2:ba:5b:90:7c:59:02:96:4c:a1:33:
         93:02:b6:92:10:25:90:3e:94:5c:78:d6:55:94:d5:02:e5:68:
         49:0d:ab:bb:30:97:be:51:75:94:f0:6b:a8:7f:86:b6:8b:07:
         03:ea:39:67:2b:ed:3d:fb:57:7f:46:3c:be:de:cc:af:f0:3a:
         4c:b8:40:8e:0a:1b:27:11:6e:ff:2c:e6:b9:99:bc:05:07:c5:
         fe:67:07:a3:09:a3:95:e9:b6:53:8f:2e:1a:bb:74:5b:c6:8e:
         78:41:6a:0e:fc:f1:48:e9:66:23:1c:24:6f:49:05:d9:0e:11:
         74:9f:77:f0:b4:58:42:0c:3a:45:3f:61:c2:0d:e0:e3:ee:5d:
         c9:df:8c:17:38:29:5d:e6:66:7e:4e:30:22:0d:e9:74:20:e2:
         54:43:e3:b3:8b:b8:38:fe:e0:06:ac:33:79:4f:96:31:f2:29:
         d4:8a:8c:82:e5:57:35:35:9d:22:b7:89:68:97:4b:bc:0c:65:
         b5:4a:16:61:ad:d4:57:f1:5d:66:60:61:8c:8b:56:d5:4e:62:
         78:bb:7c:ed:e1:74:53:15:56:39:3b:ca:84:05:63:d1:ab:7a:
         6c:6c:0d:43:29:49:cb:f5:9d:82:d3:a5:a9:34:42:25:dc:94:
         1d:e5:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:34:31 2026 by rpki-client