Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b799e296-94cd-320c-aae7-f63b4151d3a0.roa
File:                     b799e296-94cd-320c-aae7-f63b4151d3a0.roa (raw, json)
Hash identifier:          PoBrkmylX3mMOIhNC7SA5LIpDaEpqfHjRxHvtm0jaGI=
Subject key identifier:   05:1F:3D:2C:B9:C9:04:77:72:15:69:54:96:2D:49:92:9D:DA:47:74
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584CB6B71320B21923CC41E55EA0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b799e296-94cd-320c-aae7-f63b4151d3a0.roa
Signing time:             Sun 01 Feb 2026 02:00:32 +0000
ROA not before:           Sun 01 Feb 2026 02:00:32 +0000
ROA not after:            Sat 02 May 2026 01:00:32 +0000
asID:                     86
IP address blocks:        2607:f028:b22::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b6:b7:13:20:b2:19:23:cc:41:e5:5e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb  1 02:00:32 2026 GMT
            Not After : May  2 01:00:32 2026 GMT
        Subject: CN=09faff47-db44-488f-86db-e66993c76898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:d2:d6:95:15:50:42:27:03:07:82:67:bb:
                    95:44:8a:55:83:97:95:69:25:f1:ba:03:a5:4f:04:
                    0c:68:ae:28:31:b6:62:69:76:98:f5:c2:6d:5c:97:
                    de:8e:69:a7:3a:8c:d0:84:e2:f4:13:3a:b4:9d:aa:
                    4f:45:89:e3:be:84:35:08:23:7b:b0:0d:8c:cb:fd:
                    cf:01:23:6b:75:67:8d:b0:df:09:e0:b7:96:a1:05:
                    55:18:09:06:f4:ca:0b:59:63:2e:c4:eb:f1:bf:1a:
                    e0:08:96:92:a1:8c:95:76:91:df:27:7a:c7:09:6c:
                    53:9a:57:ee:6c:91:d8:de:14:54:4f:91:2c:51:23:
                    71:ef:d1:6f:36:92:79:67:f0:ce:b3:9e:7c:5c:b4:
                    7f:2a:a6:ee:cc:c9:64:5b:72:79:6e:39:23:14:80:
                    99:e9:bc:d9:f1:6a:a3:f8:dd:3f:60:b1:f0:ac:c9:
                    60:16:d6:23:6e:60:dc:28:97:cf:44:47:af:4c:da:
                    9b:5b:37:45:01:6c:81:8c:d4:99:83:d0:2a:0b:ff:
                    3a:05:b6:b4:2e:bc:0f:91:fd:e7:ff:d5:17:79:a3:
                    91:52:a6:3f:7c:01:a4:d7:17:78:5e:5b:16:f6:ae:
                    60:29:d7:65:9a:ac:1f:11:99:a3:68:15:c3:1e:27:
                    9a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1F:3D:2C:B9:C9:04:77:72:15:69:54:96:2D:49:92:9D:DA:47:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b799e296-94cd-320c-aae7-f63b4151d3a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:b22::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:60:bf:7b:ff:35:ec:5b:f1:26:5a:f3:a9:3a:dc:ce:89:a0:
         01:27:6a:cf:89:83:7c:29:3b:64:60:69:89:c2:3f:19:da:23:
         1b:28:2e:8a:9e:36:b1:d0:78:a7:ab:fb:d6:de:d5:b8:1b:2f:
         5b:ec:62:e8:fe:1d:a0:3b:91:29:4b:64:e8:fb:5c:60:66:ce:
         ad:aa:f6:2f:24:c5:9f:64:d5:77:42:7d:4b:0e:0b:e4:ad:8f:
         00:40:c0:81:e5:4c:a5:95:f8:47:82:34:9d:09:9c:8e:13:49:
         6d:4b:6f:0e:ef:e3:4d:35:f0:db:f8:c1:9e:ec:c9:a3:41:b0:
         36:f5:33:22:2d:ce:e0:c8:c6:74:47:5d:1f:d5:ad:58:b4:5b:
         41:f4:7b:f9:0f:5d:49:bb:ff:9d:fe:84:d7:49:c0:93:a9:6f:
         b7:e7:5c:6e:f9:68:9d:ab:59:6f:06:45:33:e1:af:3e:c1:aa:
         25:36:b5:08:7b:17:83:68:47:5c:8a:82:83:1a:33:e9:94:db:
         d0:79:c5:d9:99:a2:b5:4f:a0:3f:51:1e:e0:37:21:a0:64:ad:
         3d:ab:05:9c:a8:c1:a6:2c:c6:4b:6f:85:7d:d3:31:61:49:de:
         53:ae:a7:cb:ce:67:9c:6d:b3:37:ba:aa:64:3d:13:ef:c1:83:
         4e:59:37:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:34:40 2026 by rpki-client