Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6d22ea68-46a4-31da-ad5e-09a1d3b8268b.roa
File:                     6d22ea68-46a4-31da-ad5e-09a1d3b8268b.roa (raw, json)
Hash identifier:          o9oHLTj/WPMXthjyB7K/KlKJqvW3xNzi+0WiDQRunrI=
Subject key identifier:   1A:08:27:59:76:87:C2:DF:F8:99:AF:CE:9B:A3:89:CD:10:DF:5B:DF
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D75D53B5C12113CCD5EAD8480
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6d22ea68-46a4-31da-ad5e-09a1d3b8268b.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     202
IP address blocks:        2607:f028:131::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:3b:5c:12:11:3c:cd:5e:ad:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=39660d22-8f6f-4763-93bd-e698eabca667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:e6:31:a0:75:b9:17:e4:d5:72:a4:a3:a2:
                    7b:bf:4e:80:d9:4b:80:aa:e4:c5:bf:ab:26:48:eb:
                    e0:e6:b6:4d:46:27:23:ae:e8:8d:90:ab:63:6f:07:
                    ec:65:51:48:f9:bf:ef:2a:be:34:9a:45:dc:c7:9e:
                    39:f5:1b:76:ba:e5:87:77:fd:e0:43:ec:e6:55:f2:
                    0f:5c:7d:1e:60:c7:ba:16:d3:48:4c:7f:47:36:c8:
                    03:05:0a:68:b8:b4:2d:0c:1e:48:02:7d:d7:c6:de:
                    58:8b:bc:2c:cf:5b:94:90:fc:09:d7:d5:8b:04:b0:
                    55:5b:06:58:51:82:bd:b1:51:d7:2f:a1:90:71:72:
                    24:e5:c0:8b:f9:e5:03:d8:ce:4a:76:1c:d1:73:02:
                    9f:c2:fe:39:74:f9:a5:ea:a6:a4:08:a4:b0:28:f7:
                    84:0e:c4:2f:ff:e0:a4:d0:8f:af:b1:fc:45:61:88:
                    2c:f0:4b:51:19:23:17:1f:b3:81:b6:3d:c5:05:8d:
                    dc:2d:bb:fd:e8:ac:e5:bc:03:51:53:4a:47:87:9f:
                    63:94:98:d0:f1:da:11:f1:29:b4:c4:89:f8:c0:f9:
                    f6:10:f4:98:1e:3e:a4:cf:2d:b7:8b:9d:96:8b:60:
                    30:7a:dd:34:32:41:90:67:f9:2e:b3:c5:a7:bf:c9:
                    b6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:08:27:59:76:87:C2:DF:F8:99:AF:CE:9B:A3:89:CD:10:DF:5B:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6d22ea68-46a4-31da-ad5e-09a1d3b8268b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:131::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:67:9e:1d:df:28:5e:52:0f:0b:7c:11:d0:34:70:70:55:9c:
         c6:68:6d:7c:7b:e8:e2:c7:3f:f4:a8:a5:75:25:8d:5a:d6:50:
         43:bc:ab:46:1d:97:83:33:5e:d3:37:8a:f3:55:9f:5a:6a:b9:
         f5:83:34:bf:21:62:50:30:e0:30:ed:a8:b3:fa:5f:2f:43:8c:
         78:af:b4:4f:c5:d3:26:39:44:c2:76:6a:9b:b1:25:27:14:9c:
         fd:5f:9c:a9:4f:3a:0f:06:5b:94:66:21:f5:e9:4b:9d:15:40:
         40:59:ff:55:3a:32:c8:84:38:ea:a2:74:7a:bb:0f:56:fe:40:
         26:d1:0b:5d:82:e7:d0:a1:d5:fe:9b:1e:6e:96:54:bf:22:a4:
         f6:ba:12:9b:20:b6:7e:98:7b:49:e6:39:c8:3b:24:d5:03:16:
         f3:f6:eb:8a:29:e0:c0:62:ac:79:00:72:04:74:7e:72:2c:86:
         c8:3e:48:75:b3:c9:03:99:21:b8:3c:a9:26:10:1c:90:c5:76:
         5f:b2:fc:3c:a7:9b:57:73:34:7b:f0:ec:43:09:54:95:a2:2c:
         44:c8:e6:3c:11:13:e0:d6:b9:6f:2b:26:68:60:8c:ef:ba:15:
         0a:b3:0b:9f:52:c7:c9:38:78:ef:41:93:96:13:13:b9:7e:11:
         68:df:12:35
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE111TtcEhE8zV6thIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk
Mzk2NjBkMjItOGY2Zi00NzYzLTkzYmQtZTY5OGVhYmNhNjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLXmMaB1uRfk1XKko6J7v06A2UuAquTFv6sm
SOvg5rZNRicjruiNkKtjbwfsZVFI+b/vKr40mkXcx5459Rt2uuWHd/3gQ+zmVfIP
XH0eYMe6FtNITH9HNsgDBQpouLQtDB5IAn3Xxt5Yi7wsz1uUkPwJ19WLBLBVWwZY
UYK9sVHXL6GQcXIk5cCL+eUD2M5KdhzRcwKfwv45dPml6qakCKSwKPeEDsQv/+Ck
0I+vsfxFYYgs8EtRGSMXH7OBtj3FBY3cLbv96KzlvANRU0pHh59jlJjQ8doR8Sm0
xIn4wPn2EPSYHj6kzy23i52Wi2Awet00MkGQZ/kus8Wnv8m2mQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBoIJ1l2h8Lf+Jmvzpujic0Q31vfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmQyMmVhNjgtNDZhNC0z
MWRhLWFkNWUtMDlhMWQzYjgyNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEx
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABxnnh3fKF5SDwt8EdA0cHBVnMZobXx76OLHP/SopXUljVrWUEO8
q0Ydl4MzXtM3ivNVn1pqufWDNL8hYlAw4DDtqLP6Xy9DjHivtE/F0yY5RMJ2apux
JScUnP1fnKlPOg8GW5RmIfXpS50VQEBZ/1U6MsiEOOqidHq7D1b+QCbRC12C59Ch
1f6bHm6WVL8ipPa6Epsgtn6Ye0nmOcg7JNUDFvP264op4MBirHkAcgR0fnIshsg+
SHWzyQOZIbg8qSYQHJDFdl+y/Dynm1dzNHvw7EMJVJWiLETI5jwRE+DWuW8rJmhg
jO+6FQqzC59Sx8k4eO9Bk5YTE7l+EWjfEjU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:30:18 2026 by rpki-client