Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/349b3d5f-f6c1-3d8b-9d01-62a4402f9d65.roa
File:                     349b3d5f-f6c1-3d8b-9d01-62a4402f9d65.roa (raw, json)
Hash identifier:          yds/KLPNfjYeANNLOk2upIcE7WUJhK8Oq1cKCXfwnm4=
Subject key identifier:   36:C0:9D:E0:F0:AE:F5:D9:D7:60:11:1A:23:9F:5B:73:FF:1B:1B:B7
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D75D53A330319F133F643CC00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/349b3d5f-f6c1-3d8b-9d01-62a4402f9d65.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     203
IP address blocks:        2607:f028:51::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:3a:33:03:19:f1:33:f6:43:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=16a00bf6-7a5a-461d-aec6-e6329743de09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c0:d8:31:61:2d:8a:fe:ed:58:21:3d:fd:be:
                    ec:1d:27:94:b0:43:64:19:19:ff:95:c3:46:27:4e:
                    3a:db:b2:71:0e:28:f8:e1:05:e7:da:80:e6:4a:2e:
                    36:b7:8b:2d:4c:b6:d1:df:ad:13:5d:0c:7f:bc:09:
                    1f:bb:ab:ef:d9:fe:92:0f:65:6e:f7:3a:0c:9a:cc:
                    01:12:2a:df:d5:3d:7c:34:35:bd:a9:0d:65:4b:c4:
                    a3:f2:b1:13:ad:0b:26:5b:81:08:d1:d8:85:e8:61:
                    c1:d8:0e:42:dc:bc:0e:42:89:a7:6c:25:fd:90:eb:
                    b0:9d:69:24:29:a3:b8:cc:f6:38:10:97:60:72:38:
                    8b:da:9c:eb:d4:a9:44:27:35:69:bb:77:91:99:74:
                    8f:70:55:ea:46:a8:19:32:c8:4f:43:35:bd:97:53:
                    8e:a7:eb:8b:fe:2a:eb:82:84:fa:97:b7:67:5b:05:
                    dd:df:27:3f:4e:78:f8:4c:5c:aa:0e:a1:71:85:e0:
                    1f:fe:3d:0b:53:61:9c:11:1d:4d:d1:ee:52:1b:18:
                    76:9b:d5:1b:67:b0:26:41:d9:e0:8f:89:d5:6a:12:
                    02:b1:93:50:4d:1d:89:b5:f1:3f:b1:ee:cf:37:40:
                    8f:67:49:f1:4c:8e:6d:e6:97:a7:8d:38:1f:66:06:
                    c4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C0:9D:E0:F0:AE:F5:D9:D7:60:11:1A:23:9F:5B:73:FF:1B:1B:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/349b3d5f-f6c1-3d8b-9d01-62a4402f9d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:51::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:8f:1c:68:56:6f:46:eb:49:db:6c:e2:b9:3f:80:5d:bf:07:
         6e:34:77:9b:e7:0c:14:7c:3b:24:5f:eb:19:6d:f9:60:1a:94:
         bb:4a:fb:90:3a:24:0e:0e:89:6c:78:14:cd:e3:ad:eb:4b:28:
         dd:44:05:01:1d:28:11:7a:a7:8d:5e:48:6d:e8:f7:59:1e:16:
         d3:5b:4f:ae:c0:00:67:76:a7:85:49:7f:a8:a5:38:d0:0e:c6:
         48:13:29:79:71:f5:7f:f3:dc:0f:97:17:2d:fa:ff:1b:e8:b3:
         06:d2:e5:2b:a5:a8:d3:f6:cd:af:d7:9a:38:17:d5:15:c8:cb:
         45:e6:92:0a:6e:e7:42:b6:55:f7:2b:1b:be:81:1c:4a:f1:17:
         fc:62:2d:aa:b8:66:40:b8:4d:4f:0a:f0:66:56:97:f2:48:6c:
         06:88:c8:73:1a:2e:f6:4b:11:75:0d:67:61:42:7d:8a:fd:0e:
         ab:32:ed:13:d4:91:ce:26:fa:31:83:eb:b6:0f:18:bf:25:f1:
         a6:6f:7f:9b:ad:56:6b:ba:cd:fe:b1:29:3b:7f:a8:e0:f5:f0:
         f2:07:42:4b:19:b7:6b:74:88:d3:07:ca:ec:4c:d8:c4:0e:75:
         43:af:41:58:37:82:07:b9:a8:0e:b8:74:c8:84:a7:87:ea:d4:
         ab:7e:3c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:06:10 2026 by rpki-client