Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a09449b-cc6b-3bcc-8d7f-7ff23fe41b9e.roa
File:                     9a09449b-cc6b-3bcc-8d7f-7ff23fe41b9e.roa (raw, json)
Hash identifier:          hl6h9nGJi0sDm9OaGL8U9dFrhZKGO+9OpcRulps0Has=
Subject key identifier:   B6:0A:CB:4A:6D:BE:9F:DD:BC:EB:9A:C1:80:D2:27:07:31:A1:13:9E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584CEFF22865F009DF5EAB4D1240
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a09449b-cc6b-3bcc-8d7f-7ff23fe41b9e.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     203
IP address blocks:        2607:f028:a70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:28:65:f0:09:df:5e:ab:4d:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=4432c799-7022-4a24-abf8-21720dd3f36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:49:96:1a:86:75:e7:6d:d9:64:33:ff:c5:
                    a0:6b:94:f5:30:a2:39:c9:45:3c:11:1e:ca:c5:6c:
                    0c:c1:5a:d1:bd:b9:8f:15:fa:9f:c0:a3:4a:8f:cf:
                    5a:60:4b:2b:15:2a:da:8c:d5:47:39:9a:d1:48:96:
                    83:b4:ec:22:74:b5:ad:7d:20:95:4e:74:95:66:0e:
                    5a:47:82:05:12:54:a8:0b:0c:e7:1a:46:bb:c8:7e:
                    ea:c5:33:19:b5:f7:1d:51:60:0c:13:f2:31:22:01:
                    3a:c0:46:e1:90:65:c9:fa:12:de:64:65:49:cf:79:
                    3a:1a:8d:d1:53:66:0c:e6:c1:53:f4:c6:88:6c:57:
                    2b:fb:0c:eb:0e:12:c0:f6:7d:a1:81:3e:0c:95:15:
                    e4:8b:e3:f9:9c:64:c2:d6:6d:e1:6b:10:d8:15:55:
                    7f:12:9e:59:d5:f6:ce:ec:ef:9d:e0:34:7e:70:f9:
                    2b:ff:3f:dc:4b:a2:c6:8f:90:3b:0a:88:9c:45:be:
                    d3:a8:bd:dc:0f:fe:65:52:5d:31:83:70:25:15:db:
                    99:9f:eb:ea:f5:4a:17:60:6e:b7:49:09:a5:9a:b0:
                    1e:de:26:17:77:59:1b:26:21:bc:d2:d7:66:18:7a:
                    20:6f:cb:14:4d:20:83:8a:03:46:61:c2:17:8c:40:
                    21:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0A:CB:4A:6D:BE:9F:DD:BC:EB:9A:C1:80:D2:27:07:31:A1:13:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a09449b-cc6b-3bcc-8d7f-7ff23fe41b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:a70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:5b:d2:33:93:42:bd:bd:ed:05:01:ad:86:7a:54:91:5c:87:
         a1:23:fc:cb:90:c2:32:6f:60:0d:2f:6a:3f:e0:05:0a:5a:40:
         e9:d4:c8:a9:f9:ba:ab:25:77:cc:54:11:5e:fb:5d:af:53:96:
         5c:78:54:1d:3b:7f:ae:67:47:f4:38:5c:07:e8:56:d4:cb:46:
         c0:c2:71:7f:85:9e:d5:8d:c0:e6:c2:ae:bb:e3:99:9d:74:5e:
         92:13:7d:fb:50:82:73:41:ad:44:85:84:ff:b1:e0:ae:c3:ac:
         8a:07:c8:c7:16:25:6b:76:c7:92:fb:49:18:fa:13:76:fe:24:
         bb:5c:e1:49:56:43:28:c5:95:82:cb:20:5a:50:a8:7e:d1:62:
         fd:3d:39:9d:82:ed:35:a0:61:5f:ea:db:66:3c:cd:6c:64:bc:
         11:cb:90:aa:43:46:40:df:22:99:60:e0:c1:85:a1:04:8a:5c:
         28:cd:61:46:45:35:ca:15:0e:60:e0:54:b1:c3:1a:a6:17:12:
         da:1d:49:45:7f:4e:9c:41:14:1e:55:26:fe:67:40:42:1f:01:
         4e:25:b9:7c:83:57:75:0c:f5:73:a1:f3:b7:11:07:8f:7d:a6:
         d0:49:17:d1:a3:08:06:05:b4:3a:2b:57:fc:3c:84:00:06:24:
         d4:a4:2d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:08:44 2026 by rpki-client