Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c588bcc8-c7f2-3c9a-a57b-dda6f62fea90.roa
File:                     c588bcc8-c7f2-3c9a-a57b-dda6f62fea90.roa (raw, json)
Hash identifier:          ojOivn5M64OFHhICrhaXDZozQJ7+jzR7iUMY7YTn5mQ=
Subject key identifier:   CE:38:7D:E2:EA:3D:85:CB:EF:C2:B2:0C:D5:FF:BA:CA:8B:14:45:83
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D75D53882F79AA1D00A893180
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c588bcc8-c7f2-3c9a-a57b-dda6f62fea90.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     202
IP address blocks:        2607:f028:12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:38:82:f7:9a:a1:d0:0a:89:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=c98e83a9-6d30-413d-af10-0d24523f553d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:f1:3f:3f:68:d2:b2:4d:09:42:5d:d1:c5:
                    2b:e5:5c:e6:34:a2:de:c1:cc:cb:27:a4:93:a6:7c:
                    65:4c:7c:31:d6:e3:00:7c:0c:39:a2:28:76:63:1f:
                    78:ba:ae:42:2c:56:4e:85:93:d4:6f:2f:c2:f8:11:
                    56:7b:aa:87:d8:05:06:b7:a6:7e:79:d8:1c:49:32:
                    c7:37:52:ad:d9:f6:9e:49:02:f6:b1:90:4b:8d:44:
                    36:32:04:f2:c9:81:62:66:34:8a:b1:35:87:70:31:
                    50:7c:6b:cf:5e:9c:ac:b4:8e:fc:a4:2e:b3:16:ec:
                    50:72:1c:0c:b0:87:fe:68:d7:4c:d9:0e:b8:83:f3:
                    0e:d7:65:d0:fa:b6:67:72:69:c6:7f:ad:33:1c:a8:
                    71:97:39:cd:6c:ab:4a:ce:ab:45:62:20:37:92:5e:
                    fb:9e:c4:4e:ee:13:bb:d5:0f:7d:66:c6:24:ad:db:
                    da:e2:a5:b8:be:1a:c4:be:16:e4:8a:09:3b:ff:54:
                    9c:37:88:d2:90:ae:1b:89:fb:5e:83:e1:a3:d1:74:
                    c9:ea:e3:7f:09:ac:7b:a7:9a:6b:7e:39:73:70:bc:
                    fd:25:b0:55:b5:94:2b:1d:56:9c:23:29:37:ab:89:
                    41:c4:7a:d7:ca:41:9f:10:78:99:d0:cc:6e:59:44:
                    1f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:38:7D:E2:EA:3D:85:CB:EF:C2:B2:0C:D5:FF:BA:CA:8B:14:45:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c588bcc8-c7f2-3c9a-a57b-dda6f62fea90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:68:0a:a1:fb:87:1d:7c:f3:09:60:34:91:ea:45:44:97:25:
         ba:99:b0:3c:87:1f:ed:c7:dc:50:6f:26:57:8f:92:54:f8:59:
         80:84:0e:34:13:49:77:e5:49:e8:e5:2f:6c:82:90:e9:8e:3a:
         25:bc:71:24:1c:0d:23:85:39:96:73:71:fe:40:79:68:45:4f:
         1e:cb:e1:99:b8:5f:6a:06:9d:59:9a:cf:f8:8a:1b:d0:c7:2c:
         4d:f4:22:8d:c9:be:fc:2b:eb:37:b5:f0:2b:37:07:3b:a1:e8:
         55:af:e9:92:24:35:56:e4:05:52:cb:47:91:43:13:d0:13:a9:
         75:73:68:ce:53:86:15:1f:8e:d3:e2:bd:e8:8f:c1:a5:3d:c3:
         ea:04:3e:fc:2c:4e:72:52:4f:7c:2c:48:94:fd:cd:31:92:fc:
         1f:79:ce:b7:34:2c:89:26:0a:f9:11:fa:14:6a:21:1b:1b:4b:
         d9:24:a0:f5:85:e0:77:2f:fc:38:11:4e:ac:16:20:97:ca:b5:
         8d:e2:93:a2:84:b1:e6:2f:45:65:d7:40:29:c4:6f:a3:10:cc:
         9d:ba:38:d4:b4:71:c2:9b:6b:7b:3c:92:7d:ee:c8:af:09:6b:
         f0:8c:4f:fb:e2:28:fd:e5:09:b0:a3:e5:d6:20:56:42:20:25:
         88:6c:34:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:26:25 2026 by rpki-client