Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/704ef8df-4b15-3fd9-a915-89ef55ea8477.roa
File:                     704ef8df-4b15-3fd9-a915-89ef55ea8477.roa (raw, json)
Hash identifier:          LB+9G6FC48TOfh1nG1YUpL4mtzzL02pug4f7tXOd8MA=
Subject key identifier:   64:F6:FC:9E:BC:A3:94:9F:A6:41:A4:C7:CC:C1:FC:97:33:8E:BA:4C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584CC61219D309B916788E59E680
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/704ef8df-4b15-3fd9-a915-89ef55ea8477.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     203
IP address blocks:        2607:f028:b40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:19:d3:09:b9:16:78:8e:59:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=42fa0997-5f8e-4505-8e53-54a5dd6f43b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2b:e9:bb:06:90:29:3e:5f:cf:f1:65:ad:09:
                    d5:04:38:c9:df:19:0f:d1:c4:2c:22:16:23:b7:02:
                    79:53:63:f6:f1:24:c9:39:e4:41:00:00:10:d6:91:
                    17:52:dd:64:e4:99:76:50:ee:c4:cf:8e:67:7a:31:
                    12:8f:25:14:da:8e:7c:b1:9c:8c:42:86:7c:4b:99:
                    f3:dd:64:4e:78:75:72:6a:84:63:3b:dc:26:1c:12:
                    45:59:b4:df:15:9e:26:55:f7:88:5e:88:24:23:e4:
                    b0:ed:09:7a:39:f4:b9:8c:d9:7e:c8:9b:df:e9:8d:
                    03:01:69:58:05:44:bc:8b:61:e2:c7:8b:c8:f0:4f:
                    7f:18:46:89:e5:35:21:2d:51:cb:32:80:fe:d5:71:
                    06:d7:1b:7b:c6:21:08:3d:54:eb:f6:c5:76:84:55:
                    50:43:f9:c0:2d:f6:eb:6c:a3:3d:1f:7f:01:50:2c:
                    60:11:ff:9a:73:76:fe:95:f7:ce:b2:7f:40:0f:f6:
                    fa:4b:9b:52:fe:d0:d3:8c:3e:95:f7:42:aa:e4:bb:
                    b6:30:e6:bd:35:4f:d2:d9:7e:75:57:c3:08:51:b1:
                    96:7b:20:fd:4c:29:38:b8:dd:29:05:ee:1e:ad:f1:
                    d8:eb:32:97:76:92:9c:06:03:99:d0:09:5f:18:f0:
                    c8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F6:FC:9E:BC:A3:94:9F:A6:41:A4:C7:CC:C1:FC:97:33:8E:BA:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/704ef8df-4b15-3fd9-a915-89ef55ea8477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:b40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:78:11:53:b5:81:98:35:90:a7:af:4b:92:fa:91:79:35:dc:
         0a:a5:cd:0f:c9:5d:d3:ec:56:57:ed:9f:fc:42:46:eb:49:d1:
         f0:0c:1d:12:14:3d:6c:9e:46:aa:9f:c2:9c:74:af:9b:9a:32:
         a9:74:bc:6c:13:60:a5:5b:c0:76:ce:86:39:38:97:fd:17:6f:
         44:b6:d0:79:2a:db:a0:7a:ed:a1:99:45:46:bc:20:6e:a9:00:
         17:1a:ec:4b:af:11:db:6f:c6:4f:10:47:31:db:e1:12:c2:cd:
         1e:90:a4:8b:c5:79:77:c9:a2:fb:39:bf:2f:2a:53:f3:34:da:
         86:65:63:08:0e:66:4e:1e:0d:56:70:a4:8c:53:98:dc:28:6b:
         24:d1:78:9b:98:c7:90:38:0c:90:f9:a5:9a:04:fc:fa:ab:d1:
         43:e5:a9:d6:10:41:0c:2b:24:0d:e4:5f:cb:f0:8b:da:c4:0c:
         67:9b:38:d8:fa:c5:c1:f6:9f:cd:ad:c6:31:7f:76:a4:a3:b1:
         ef:40:3b:fd:59:0d:28:e9:76:32:85:f6:a3:e6:53:a8:ec:a1:
         d6:11:cf:85:ce:59:b6:3d:ae:24:6b:1d:47:c8:43:cd:a1:eb:
         71:3a:6d:29:18:1d:b2:93:4e:29:c7:50:84:83:0f:08:5d:2b:
         7e:70:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:09 2026 by rpki-client