Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9bc9e0b7-4468-3007-b3a3-7aa49f27c226.roa
File:                     9bc9e0b7-4468-3007-b3a3-7aa49f27c226.roa (raw, json)
Hash identifier:          lpaZmxpdcl9n4qpYQzHXC/bshD2IJH8kjt3RnSnr/nE=
Subject key identifier:   4D:CB:4E:21:80:64:82:FB:1A:60:73:9A:7D:20:56:09:7E:DF:7E:71
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D75D53CB2209C7B49FA07E9A0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9bc9e0b7-4468-3007-b3a3-7aa49f27c226.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     2158
IP address blocks:        2607:f028::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:3c:b2:20:9c:7b:49:fa:07:e9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=f9de66dd-7437-4709-9ac7-38cea3d7955b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:16:fe:27:b3:51:a0:96:4c:c3:5a:7a:6e:59:
                    bb:e2:6d:b0:bb:5a:44:8b:10:91:4d:54:5d:10:8a:
                    72:f3:2f:e3:a7:10:ea:55:eb:82:79:08:25:58:a7:
                    df:e0:9b:f8:ad:75:ff:ab:0f:bb:83:61:d8:1f:a6:
                    ce:50:df:41:46:9f:2c:c3:11:a0:4d:ef:40:5f:c5:
                    0e:87:9f:0d:93:e9:46:36:3b:0d:e2:29:46:8c:c4:
                    cd:bf:bc:a5:92:f0:66:16:58:46:bb:84:86:cd:0e:
                    c7:86:f1:16:a6:2e:d7:49:f3:f8:8d:a1:c8:4c:81:
                    98:84:fd:46:7b:8c:d9:5c:63:ab:4e:46:da:d9:42:
                    45:fe:ef:ba:c7:ea:87:8a:c3:2d:8d:ee:62:73:56:
                    17:6d:7b:6f:29:d3:cd:8a:9b:7a:f2:8a:19:75:07:
                    16:d9:54:f4:eb:11:74:81:7f:a9:01:c9:35:e1:67:
                    b0:cb:c5:31:ea:28:88:91:cc:3b:30:58:40:da:a6:
                    7f:a6:6f:9e:80:c8:c5:f2:9d:c6:e0:3e:55:45:24:
                    21:24:c2:1a:97:0b:61:ae:8d:f1:48:58:c5:63:1f:
                    1d:f4:01:cb:9d:21:9b:21:ef:01:2b:71:6b:47:78:
                    8b:af:0a:ed:08:8c:94:a1:25:58:00:cd:c7:20:0d:
                    1b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CB:4E:21:80:64:82:FB:1A:60:73:9A:7D:20:56:09:7E:DF:7E:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9bc9e0b7-4468-3007-b3a3-7aa49f27c226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:43:cf:6b:1b:c9:a2:cd:f6:e0:b8:f9:de:84:e2:1f:8a:86:
         c0:60:59:d9:e9:02:cb:f5:f5:2c:3a:89:8e:5e:39:49:aa:4a:
         5f:d4:36:7e:71:ad:19:51:0c:f7:17:a4:44:cd:c4:80:2d:cd:
         ea:6c:f1:31:72:76:11:4f:92:be:c7:44:47:a5:56:c1:41:2a:
         c7:98:f0:ba:38:eb:8c:44:c3:96:df:3c:78:c0:93:d4:0f:bc:
         95:b2:7f:93:7b:6d:42:9d:83:a6:cc:1a:92:c4:9d:e5:cb:87:
         59:e2:4a:46:90:60:75:19:4b:6d:a0:a8:da:c6:5e:6c:4a:05:
         58:84:6c:58:26:8c:8a:d2:a9:e2:10:7c:a9:8a:b7:c7:cb:0d:
         43:09:f8:f6:c8:ee:f3:2c:f4:a5:62:43:3f:90:ed:5a:d6:01:
         45:56:4c:d0:19:eb:61:3e:a9:64:25:92:0e:cb:09:39:6d:ef:
         32:b0:df:83:f1:78:52:fb:48:9f:27:bb:84:bb:68:c6:48:9b:
         a5:96:34:2d:6e:3d:65:03:2a:f8:f9:60:5a:59:f8:34:47:a9:
         cc:c2:1f:33:40:12:b5:a8:14:44:fe:96:83:94:a5:30:19:12:
         d7:43:f4:b1:c0:6f:03:70:d8:bd:db:05:2e:5e:3a:e6:42:0c:
         ce:05:02:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:42:55 2026 by rpki-client