Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6eba6d7e-d336-34b0-80ee-5a2b66949fb5.roa
File:                     6eba6d7e-d336-34b0-80ee-5a2b66949fb5.roa (raw, json)
Hash identifier:          BcKNuGurLKHIJy5k+uzDG7J9UkYS+tIBGnbzSAMwEvM=
Subject key identifier:   94:6D:0B:BB:71:89:C4:44:08:B8:69:40:33:15:DF:18:1A:78:B5:E0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D75D5385F2EB9C869B85DB800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6eba6d7e-d336-34b0-80ee-5a2b66949fb5.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     3356
IP address blocks:        2607:f028:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:38:5f:2e:b9:c8:69:b8:5d:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=25574866-8fa8-415c-8550-bed9e085ac4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:27:c4:11:7f:1a:19:62:b4:fb:20:ec:94:00:
                    22:75:35:a4:73:8e:82:56:e0:79:2b:a7:b8:4e:a8:
                    29:94:20:4f:66:12:db:a3:19:74:2c:d7:d9:c3:50:
                    88:c2:94:95:dd:76:a4:4c:4c:51:c0:bd:dd:03:b7:
                    76:0b:37:ff:55:35:be:97:66:c1:8b:f3:ea:a9:f7:
                    2f:7d:59:14:af:c8:41:16:bf:55:b2:2b:bd:b4:fd:
                    c0:f8:0a:8a:c0:f7:cd:a9:3b:ef:02:5e:3d:c6:67:
                    3a:a3:c4:bf:25:ce:41:2b:3f:cb:a0:e2:69:4c:b5:
                    02:1f:17:6a:93:26:b7:c1:44:d2:cb:6b:4f:1a:84:
                    f4:35:e8:bb:ac:a1:89:f6:e2:38:7c:5a:b6:50:4a:
                    55:84:1a:e6:17:7e:0d:cd:ff:b9:4c:41:11:92:ef:
                    88:a8:64:e8:5a:5f:ef:e3:63:f7:22:23:8e:9e:5e:
                    13:cb:05:19:4b:d3:3f:71:bc:f5:44:8f:f5:3f:07:
                    ef:8b:ed:2c:73:ee:c9:32:44:2d:34:03:d3:6f:5b:
                    1e:c5:86:97:5d:87:69:d1:89:45:62:b5:09:3e:08:
                    40:a3:9e:da:68:71:f8:07:58:8f:25:25:f6:ac:e6:
                    9f:65:a6:75:3c:4a:71:5b:04:79:e4:cf:d9:01:41:
                    e4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6D:0B:BB:71:89:C4:44:08:B8:69:40:33:15:DF:18:1A:78:B5:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6eba6d7e-d336-34b0-80ee-5a2b66949fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:49:9c:88:6f:80:5e:bb:04:8d:de:0d:f9:3e:6f:48:00:22:
         62:88:ef:d5:8c:04:df:b0:93:5f:be:d6:d1:b6:c7:ee:cf:e4:
         f0:00:08:8c:1b:d2:18:7e:18:2f:f1:1b:dd:fc:15:e8:f6:99:
         65:90:f0:ea:2c:da:1e:f0:c8:3a:23:1c:76:9f:d0:01:b1:8a:
         85:af:8d:95:85:a0:d6:23:77:50:20:4d:39:fa:f6:14:c9:19:
         c1:b5:de:b4:a7:f5:0c:27:55:5a:b9:a8:ba:f0:88:ac:da:4e:
         be:5a:ac:47:e5:5f:f8:47:7e:c9:9e:ae:fd:07:8e:aa:56:c0:
         11:ae:14:0d:60:e8:9e:97:96:77:b8:f5:9e:1e:da:29:07:d0:
         7f:98:96:15:53:9f:5c:84:b0:f5:81:b8:22:03:0e:6f:14:c1:
         5a:46:dc:a2:b3:c9:06:fd:76:e2:7d:2c:e4:f0:04:75:17:4e:
         0f:cb:9a:20:a5:85:b6:0b:7b:5e:59:12:9d:59:7b:65:78:86:
         3a:82:04:19:45:bc:d8:55:b8:e9:3c:8a:be:8d:19:50:2d:1e:
         f3:0a:be:d3:f0:6e:b0:bf:7a:e7:36:34:b0:31:3b:ae:17:e9:
         36:67:62:9d:6b:08:73:61:9b:62:95:02:5d:2b:6b:df:9c:ae:
         eb:20:87:8e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE111ThfLrnIabhduAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk
MjU1NzQ4NjYtOGZhOC00MTVjLTg1NTAtYmVkOWUwODVhYzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CfEEX8aGWK0+yDslAAidTWkc46CVuB5K6e4
TqgplCBPZhLboxl0LNfZw1CIwpSV3XakTExRwL3dA7d2Czf/VTW+l2bBi/Pqqfcv
fVkUr8hBFr9Vsiu9tP3A+AqKwPfNqTvvAl49xmc6o8S/Jc5BKz/LoOJpTLUCHxdq
kya3wUTSy2tPGoT0Nei7rKGJ9uI4fFq2UEpVhBrmF34Nzf+5TEERku+IqGToWl/v
42P3IiOOnl4TywUZS9M/cbz1RI/1Pwfvi+0sc+7JMkQtNAPTb1sexYaXXYdp0YlF
YrUJPghAo57aaHH4B1iPJSX2rOafZaZ1PEpxWwR55M/ZAUHkbQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJRtC7txicRECLhpQDMV3xgaeLXgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmViYTZkN2UtZDMzNi0z
NGIwLTgwZWUtNWEyYjY2OTQ5ZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ1JnIhvgF67BI3eDfk+b0gAImKI79WMBN+wk1++1tG2x+7P5PAA
CIwb0hh+GC/xG938Fej2mWWQ8Oos2h7wyDojHHaf0AGxioWvjZWFoNYjd1AgTTn6
9hTJGcG13rSn9QwnVVq5qLrwiKzaTr5arEflX/hHfsmerv0HjqpWwBGuFA1g6J6X
lne49Z4e2ikH0H+YlhVTn1yEsPWBuCIDDm8UwVpG3KKzyQb9duJ9LOTwBHUXTg/L
miClhbYLe15ZEp1Ze2V4hjqCBBlFvNhVuOk8ir6NGVAtHvMKvtPwbrC/euc2NLAx
O64X6TZnYp1rCHNhm2KVAl0ra9+crusgh44=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:04 2026 by rpki-client