Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8f90665e-f858-3af4-8f7e-e6eae3138d71.roa
File:                     8f90665e-f858-3af4-8f7e-e6eae3138d71.roa (raw, json)
Hash identifier:          VYuzKK20Smd3QjJHaMhh5nDxsPcz6dj49o1GNID3bvE=
Subject key identifier:   64:9F:11:9B:3D:D9:9B:DA:D5:BF:9B:97:69:C3:D3:81:18:FC:5E:5B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF87CD2D4EF44D1CF6CA80BE0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8f90665e-f858-3af4-8f7e-e6eae3138d71.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     202
IP address blocks:        2607:f028:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:d2:d4:ef:44:d1:cf:6c:a8:0b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=28dad05a-d532-4dbe-86c3-fba5aedc93d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:44:b9:62:95:ed:30:a6:c9:30:47:82:b6:74:
                    1e:0b:c1:06:e1:ee:f5:9a:e0:b2:97:2b:6d:ed:0c:
                    0e:cf:cd:1e:72:64:83:12:2e:15:a3:94:c3:ec:51:
                    37:73:31:17:c2:7d:3e:70:5f:ea:be:d9:01:6d:c1:
                    7d:7a:be:7f:e2:ab:35:ed:d8:be:8e:1a:87:1e:8a:
                    84:4e:f4:cb:44:1d:67:53:4d:1d:3d:17:9e:0e:29:
                    3f:56:ae:cc:e8:84:7c:64:cd:f3:7f:fc:15:f7:6c:
                    f9:3b:a5:03:43:e3:50:bd:bb:1e:7f:46:ae:ff:f8:
                    d6:94:7a:0b:29:89:20:9b:35:1e:f4:a9:40:f2:45:
                    43:25:58:75:85:d4:83:a3:5f:bb:1f:ab:69:8b:40:
                    a5:a0:5f:34:3a:4e:53:54:74:0d:77:68:a3:fc:40:
                    b9:5a:44:13:41:a6:76:d3:cd:5d:8d:01:31:7b:5e:
                    11:7b:9a:02:85:79:44:dc:71:20:a4:ef:4b:d5:4c:
                    c2:c4:ee:ee:27:9c:43:25:83:d8:15:4b:3a:38:3a:
                    d3:45:68:48:ee:7e:d3:e6:cf:07:43:23:1e:35:62:
                    f1:88:63:e7:8f:8c:67:8d:16:b0:47:11:c2:81:60:
                    68:47:ff:13:c0:76:39:e3:1b:d5:6a:d2:93:4f:54:
                    07:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9F:11:9B:3D:D9:9B:DA:D5:BF:9B:97:69:C3:D3:81:18:FC:5E:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8f90665e-f858-3af4-8f7e-e6eae3138d71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:24:d5:2d:96:70:d6:8a:3c:7b:e2:23:26:8d:ae:4d:05:53:
         b3:3d:ba:97:f5:15:25:71:48:dd:7a:1a:2c:25:d5:c1:ee:7f:
         ac:c3:2d:ed:90:58:65:0a:d2:02:b2:97:b7:a2:64:79:8b:fb:
         f6:91:25:93:90:a7:49:5b:2b:92:cd:19:e2:42:e9:28:92:37:
         7d:66:04:4e:33:ff:08:36:fd:de:fd:7c:06:fb:c1:f5:de:da:
         61:e2:ba:4d:4d:45:19:28:05:4e:10:01:77:ae:72:eb:ea:7a:
         3f:49:af:7b:ec:17:43:8c:99:99:a5:de:eb:43:15:37:f6:2c:
         06:e9:34:b6:f0:62:15:57:30:b7:04:3a:50:1a:4f:a7:73:17:
         47:1a:e4:a7:1d:58:4d:26:d6:48:75:5c:f8:93:b3:3f:5c:d5:
         31:ba:50:3a:15:3f:f0:b7:f8:23:2b:56:0e:6f:38:df:e5:15:
         0f:a8:17:cc:7d:41:c4:f0:c9:0c:3f:83:b5:79:1a:cd:96:ef:
         8b:2e:e5:92:f5:98:c0:47:49:a1:76:6e:96:05:21:b7:e9:10:
         ca:4f:b0:31:13:d7:7a:8c:41:69:61:a5:02:d9:43:9d:e2:fb:
         0e:86:ce:52:d7:e6:ad:91:56:64:3d:cc:18:6d:99:35:d6:87:
         d6:0e:16:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:35:53 2026 by rpki-client