Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bc87f02a-4339-3197-87ca-6ab304aac4bb.roa
File:                     bc87f02a-4339-3197-87ca-6ab304aac4bb.roa (raw, json)
Hash identifier:          vXJuyknlcQKt8wA9U1GiI8hh4329NvPzpYUzYHsynP0=
Subject key identifier:   3B:9B:E0:76:5F:4E:9B:EA:69:6D:4F:E8:1D:98:61:9C:0E:BD:92:21
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584CB6B713DB37ED46B02DB15580
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bc87f02a-4339-3197-87ca-6ab304aac4bb.roa
Signing time:             Sun 01 Feb 2026 02:00:32 +0000
ROA not before:           Sun 01 Feb 2026 02:00:32 +0000
ROA not after:            Sat 02 May 2026 01:00:32 +0000
asID:                     202
IP address blocks:        2607:f028:b41::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b6:b7:13:db:37:ed:46:b0:2d:b1:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb  1 02:00:32 2026 GMT
            Not After : May  2 01:00:32 2026 GMT
        Subject: CN=5fb9ba5a-6b0f-4999-9dff-8b168e5dc92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:f1:34:7e:83:a1:52:51:5e:3a:79:ea:f0:
                    06:2a:37:2a:e2:09:1b:fb:d5:3c:ae:c9:2a:4b:97:
                    57:e3:fd:3d:9b:af:bb:b2:a0:54:ed:63:5f:c5:ab:
                    4e:1a:f2:0d:2c:c6:45:f2:a3:51:bc:eb:59:b6:e2:
                    51:1b:08:ec:18:cf:89:25:9c:f7:7d:f2:87:f3:89:
                    03:93:dc:79:ac:8b:ec:15:76:50:18:e2:92:7c:f5:
                    6d:ae:8d:57:8e:45:e8:63:ab:e6:eb:06:1f:cc:f3:
                    3d:53:a4:ac:dd:84:bf:32:1d:5c:96:90:a8:ca:86:
                    54:94:54:96:55:db:b5:e3:be:eb:2c:7a:2f:df:48:
                    e1:86:85:5b:3e:84:b0:05:98:fb:e5:8e:17:f0:96:
                    fe:b7:20:1c:ed:2e:fd:4a:7b:13:f8:e2:84:b6:d1:
                    29:44:77:49:16:d1:7e:2e:a8:fe:40:90:f5:df:6a:
                    aa:3b:09:5e:82:f9:06:d9:a4:1f:60:18:6f:8f:d4:
                    fb:1e:73:15:69:41:3b:a9:8a:60:8d:96:0e:8d:02:
                    45:79:cd:fe:ca:96:8c:d6:30:ea:2a:c1:92:08:72:
                    ef:85:8e:f5:a9:16:d0:30:f1:d2:1f:d5:9e:48:53:
                    29:5e:39:28:f0:80:af:4f:5c:09:55:1f:46:c8:24:
                    14:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9B:E0:76:5F:4E:9B:EA:69:6D:4F:E8:1D:98:61:9C:0E:BD:92:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bc87f02a-4339-3197-87ca-6ab304aac4bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:b41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:78:52:cb:62:1e:e0:e1:29:b6:53:c1:56:a8:b2:1a:43:a8:
         22:ee:c9:5a:d0:92:fe:6b:4d:1b:1d:21:41:e8:36:7c:e9:d1:
         8f:90:85:59:9e:00:a2:2c:4c:ea:23:25:59:d7:14:de:9f:97:
         ae:ed:31:9b:31:2c:f3:f9:5b:cd:78:32:8c:fc:9d:aa:d7:38:
         47:64:a9:11:fe:50:37:f6:6a:a9:06:b8:3d:ec:a2:60:eb:d5:
         44:1c:3c:80:c1:08:8b:9e:2a:df:bb:eb:2a:e4:8a:4a:29:4d:
         4b:de:6b:5e:2a:81:23:23:66:63:ad:30:18:3e:bc:dd:b1:ff:
         09:77:96:47:d9:1c:ec:97:06:37:1c:bb:ee:b9:7a:a0:8e:00:
         c0:f3:ee:38:bd:01:e4:1a:bb:6e:1f:d3:88:79:f4:1c:92:ce:
         9d:6a:10:40:e3:71:3e:67:cf:44:5d:05:0e:f8:ab:d1:96:26:
         44:6e:0d:31:85:33:48:50:9c:99:7f:93:5e:ea:55:4d:37:7d:
         ef:1f:19:84:5f:33:d4:b8:10:b7:dc:cb:40:c1:70:71:39:17:
         35:65:fd:76:8a:17:20:c3:2c:03:54:b0:25:01:24:be:42:75:
         f3:e9:e7:e0:7b:7b:e3:da:23:bb:a4:53:cb:69:06:0e:82:c7:
         32:94:d0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:55 2026 by rpki-client