Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ae6c2b6-6e88-387c-88a2-995d6e2a9564.roa
File:                     8ae6c2b6-6e88-387c-88a2-995d6e2a9564.roa (raw, json)
Hash identifier:          Qh3Sk1LuNBZGj1KNpmX3rsDpZsppVWlm9pAS69n15z4=
Subject key identifier:   1E:D6:10:EA:10:6A:8C:F8:11:26:C1:6F:4F:45:63:84:E3:FA:1C:58
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584CB6B712F5E8D9715FD0686500
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ae6c2b6-6e88-387c-88a2-995d6e2a9564.roa
Signing time:             Sun 01 Feb 2026 02:00:32 +0000
ROA not before:           Sun 01 Feb 2026 02:00:32 +0000
ROA not after:            Sat 02 May 2026 01:00:32 +0000
asID:                     203
IP address blocks:        2607:f028:b21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b6:b7:12:f5:e8:d9:71:5f:d0:68:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb  1 02:00:32 2026 GMT
            Not After : May  2 01:00:32 2026 GMT
        Subject: CN=969f8841-b617-424c-a3ce-ca181329373a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ee:0b:34:87:72:86:56:39:7c:01:80:8e:c3:
                    eb:ec:8e:78:50:31:a7:4b:c2:8c:a2:29:f4:b2:25:
                    16:a4:91:22:d9:65:16:84:f2:50:65:9b:37:be:2d:
                    20:78:4d:b6:c3:5a:d9:49:00:5b:41:bd:6a:94:f7:
                    1d:70:42:f1:5b:97:fd:30:37:6a:18:2f:15:c7:86:
                    5c:1c:cb:fc:98:6f:e2:7d:a5:a0:35:f5:02:18:51:
                    0e:97:9e:e9:42:84:19:cd:67:92:64:ba:dc:1f:e8:
                    ac:dd:58:25:bc:25:50:c3:6e:fe:69:95:fe:24:46:
                    82:35:74:ca:48:04:e8:73:47:4d:77:35:d9:7d:a7:
                    0f:48:cd:c7:3a:3c:f9:c4:93:2e:ba:c6:84:f2:43:
                    c0:a4:ae:6a:04:05:6f:23:01:dc:00:9f:83:97:14:
                    60:5c:1e:47:a9:06:ac:26:aa:1e:96:6a:22:6a:60:
                    38:61:80:be:06:e3:1d:4c:8c:f0:3b:2d:ba:00:89:
                    b8:e6:a4:1f:fa:1a:95:c7:3b:90:c2:00:f1:69:f2:
                    98:8f:42:3d:5d:a6:89:58:32:c3:4b:c3:be:4b:f8:
                    dd:d2:18:50:ca:43:9f:bd:1c:82:c3:b5:51:5b:28:
                    f1:75:a4:c7:e3:a6:80:2b:cd:7d:4d:02:58:c9:33:
                    41:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D6:10:EA:10:6A:8C:F8:11:26:C1:6F:4F:45:63:84:E3:FA:1C:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8ae6c2b6-6e88-387c-88a2-995d6e2a9564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:b21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:9e:b6:2c:0c:1d:87:11:ca:f6:7e:a8:30:c3:a8:70:5b:4e:
         63:4c:e7:fe:df:8b:60:e8:37:c7:d1:4c:96:9a:00:e8:e8:96:
         a4:d5:93:cd:21:d5:d1:7f:fe:ed:52:e6:51:c3:21:db:19:2b:
         e8:b5:28:9a:4f:4b:27:1d:3d:c3:0a:46:9a:a0:34:6a:f4:9e:
         4a:52:e6:81:49:97:01:e1:27:5c:c8:ed:87:be:ce:01:87:37:
         91:d1:fe:b8:4f:cf:a6:ef:f2:f8:44:f8:d8:08:21:11:35:5d:
         92:09:ec:cb:a9:65:49:2f:78:e1:cc:64:3a:df:d0:3e:56:1a:
         ae:0f:b1:46:da:b4:9b:36:14:20:e1:6a:5c:55:85:4e:88:59:
         94:bd:de:a2:52:39:f0:d3:18:32:e5:4b:30:bb:f4:0e:e1:95:
         38:e6:7f:e9:a2:a4:8d:fe:6b:1d:e2:14:38:91:39:bc:3a:69:
         f3:fe:0a:bc:ac:db:03:2d:58:2f:e4:e4:96:1b:24:3b:3b:a1:
         61:59:ff:b0:b6:6c:ae:3d:7f:2b:fc:3b:b1:36:9f:c5:37:89:
         bb:22:58:75:d0:e6:f5:39:b8:46:2d:9d:c2:58:ee:25:33:33:
         bc:bd:fa:84:c1:90:75:ac:da:f2:da:d7:e0:eb:1f:b5:5b:e9:
         bc:9c:91:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:55 2026 by rpki-client