Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dae0bc0-8f4a-37aa-a952-b72d295e26f0.roa
File:                     2dae0bc0-8f4a-37aa-a952-b72d295e26f0.roa (raw, json)
Hash identifier:          u5rSMunm7PL57B8z1ITtyaHZSqELHcZaSTTHQxovQk8=
Subject key identifier:   64:63:41:C0:13:4D:B8:66:79:58:B2:26:73:51:BF:6C:82:DC:FC:2D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF87CCBB662A2084EC139E960
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dae0bc0-8f4a-37aa-a952-b72d295e26f0.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     3356
IP address blocks:        2607:f028:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:cb:b6:62:a2:08:4e:c1:39:e9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=dffdb9d9-55fb-4d99-a1d6-304ec8b1b9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:75:71:7e:b8:dd:44:1a:01:fd:1c:fb:18:d3:
                    e8:63:76:8f:89:91:53:09:d7:b6:f1:8c:5b:4d:cf:
                    aa:d8:28:cd:de:a8:b5:b2:aa:12:00:07:b5:4a:a0:
                    9e:ac:11:d5:8b:b8:46:9c:a7:12:4b:46:a6:6e:ed:
                    a8:aa:83:d3:8e:a3:00:4e:1f:af:18:1c:91:93:ec:
                    a1:fe:63:dc:06:ad:ce:9a:44:85:c5:21:c6:81:08:
                    47:ab:e8:21:96:e6:90:8f:86:10:80:74:bc:89:92:
                    a8:08:46:ca:30:7c:86:32:67:45:dd:b2:73:18:d2:
                    9d:94:fe:7b:5c:6d:b0:f4:d1:ec:e7:f7:6c:36:45:
                    ab:80:90:4d:48:ad:75:13:87:87:e2:8b:15:fa:6b:
                    1c:9a:8f:d0:eb:38:a9:7c:7c:20:8c:75:ca:3f:db:
                    5a:0c:39:3f:f8:0b:08:d2:49:6c:35:e0:db:93:ba:
                    06:2d:1f:99:da:aa:27:4a:cd:49:b3:97:ef:56:57:
                    3f:80:27:4c:46:c6:00:0c:8b:b6:f3:86:82:bc:06:
                    b3:f4:5d:25:26:e2:34:4a:6a:9b:3a:37:27:5d:ed:
                    27:f3:53:0c:16:6b:b6:e0:62:8d:ea:4a:da:7f:db:
                    b2:e1:36:a6:19:81:a3:31:5c:37:df:68:be:3b:55:
                    7f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:63:41:C0:13:4D:B8:66:79:58:B2:26:73:51:BF:6C:82:DC:FC:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dae0bc0-8f4a-37aa-a952-b72d295e26f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:69:03:f5:e4:00:bf:f4:2c:ca:56:39:dc:ef:77:87:d0:2b:
         6f:bc:1a:b0:92:aa:be:34:06:18:7a:35:0a:7a:e1:2b:2d:48:
         21:9a:cd:89:d1:76:f4:d3:23:1f:ce:3e:9e:3d:fe:ab:86:31:
         81:6d:38:36:16:74:82:f4:27:c8:fe:e8:55:8f:4b:08:05:f8:
         9c:8e:18:e2:cc:29:5e:52:4f:19:20:3f:d1:d9:bd:90:1c:a6:
         b9:06:38:d7:a2:17:22:9e:15:50:10:66:1f:1d:72:a2:94:fe:
         16:d0:73:bc:4d:1a:1e:7b:22:73:21:0a:d4:7b:1e:0e:47:16:
         88:e4:52:7d:43:8c:fc:63:af:bd:67:02:69:2f:b2:0c:70:4c:
         3e:3e:6c:76:37:3b:ae:0f:71:77:54:03:ab:51:2c:fb:02:4f:
         98:cf:36:6c:ab:3f:df:4d:af:20:e8:5d:6c:c5:6c:ed:3a:e6:
         5c:3d:a1:cf:82:17:f8:f2:62:98:cb:b9:03:f1:7c:fc:5e:48:
         d3:02:95:1a:37:8f:ae:c3:4d:bf:5e:9b:00:6a:e9:78:fb:4c:
         21:5f:36:39:a7:08:a5:c5:27:b4:c0:c6:a9:3b:60:6c:f9:e5:
         0a:84:9e:5b:44:21:13:ea:06:f7:d6:fd:0d:10:ae:3e:ce:b7:
         27:b3:5d:32
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE74fMu2YqIITsE56WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk
ZGZmZGI5ZDktNTVmYi00ZDk5LWExZDYtMzA0ZWM4YjFiOWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnVxfrjdRBoB/Rz7GNPoY3aPiZFTCde28Yxb
Tc+q2CjN3qi1sqoSAAe1SqCerBHVi7hGnKcSS0ambu2oqoPTjqMATh+vGByRk+yh
/mPcBq3OmkSFxSHGgQhHq+ghluaQj4YQgHS8iZKoCEbKMHyGMmdF3bJzGNKdlP57
XG2w9NHs5/dsNkWrgJBNSK11E4eH4osV+mscmo/Q6zipfHwgjHXKP9taDDk/+AsI
0klsNeDbk7oGLR+Z2qonSs1Js5fvVlc/gCdMRsYADIu284aCvAaz9F0lJuI0Smqb
OjcnXe0n81MMFmu24GKN6kraf9uy4TamGYGjMVw332i+O1V/IQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGRjQcATTbhmeViyJnNRv2yC3PwtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmRhZTBiYzAtOGY0YS0z
N2FhLWE5NTItYjcyZDI5NWUyNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEBpA/XkAL/0LMpWOdzvd4fQK2+8GrCSqr40Bhh6NQp64SstSCGa
zYnRdvTTIx/OPp49/quGMYFtODYWdIL0J8j+6FWPSwgF+JyOGOLMKV5STxkgP9HZ
vZAcprkGONeiFyKeFVAQZh8dcqKU/hbQc7xNGh57InMhCtR7Hg5HFojkUn1DjPxj
r71nAmkvsgxwTD4+bHY3O64PcXdUA6tRLPsCT5jPNmyrP99NryDoXWzFbO065lw9
oc+CF/jyYpjLuQPxfPxeSNMClRo3j67DTb9emwBq6Xj7TCFfNjmnCKXFJ7TAxqk7
YGz55QqEnltEIRPqBvfW/Q0Qrj7OtyezXTI=
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:08:21 2026 by rpki-client