Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cecb1897-15f4-3893-bab4-ba93528cccd4.roa
File:                     cecb1897-15f4-3893-bab4-ba93528cccd4.roa (raw, json)
Hash identifier:          4hf9hcyZziJrO38KLcpmIIoa5o+2v1N7FhRmOcFzhog=
Subject key identifier:   CA:F4:00:D8:CD:34:01:F6:9E:2D:81:D6:43:B4:34:4A:A0:AF:28:E0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D80FFED8A7F223430FEBCB800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cecb1897-15f4-3893-bab4-ba93528cccd4.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     203
IP address blocks:        2607:f028:111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:ed:8a:7f:22:34:30:fe:bc:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=547cd8ba-ac35-4c38-a98b-9761876a7e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3f:06:e2:7f:ac:11:7a:92:c9:33:08:3b:8e:
                    77:02:b1:80:0c:e7:38:98:f6:45:b3:ac:19:24:f4:
                    d3:09:dc:a2:e5:14:e9:44:44:6e:3d:3b:5d:db:56:
                    fa:eb:5d:8b:4e:7b:47:7b:48:86:60:34:86:a6:db:
                    3f:08:a2:a4:01:7b:f4:dc:89:8f:ef:ad:c5:55:0a:
                    06:4c:f7:69:b0:96:61:be:84:7f:3c:ce:60:9b:c8:
                    75:4a:d8:b5:67:22:9a:24:43:c4:26:64:6a:7b:fd:
                    09:37:73:4a:c9:0d:a6:f3:06:cf:7f:0a:77:ac:d2:
                    8a:1c:1a:4c:c2:56:a4:f6:bc:3b:4d:3c:7d:9a:6d:
                    8d:44:26:d4:4c:dd:6e:f9:3b:ea:6c:17:94:e9:56:
                    cc:52:fe:e1:af:28:f6:cf:61:4b:a8:a3:39:0d:32:
                    cc:ed:19:a7:a0:93:33:dc:88:ab:b7:14:cb:54:3a:
                    48:df:a9:a1:bb:39:e7:6a:6f:06:a0:7f:14:f6:b4:
                    ff:47:5a:1b:10:4e:dc:6d:18:eb:d0:09:c7:84:d4:
                    8c:eb:da:0a:96:12:20:86:f4:f1:cd:85:58:4e:16:
                    ee:01:ae:dc:10:e1:c1:e4:f7:03:35:75:26:ca:42:
                    fe:10:f5:0d:d3:b2:89:2e:b2:c0:5b:b1:1b:cb:c8:
                    c6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F4:00:D8:CD:34:01:F6:9E:2D:81:D6:43:B4:34:4A:A0:AF:28:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cecb1897-15f4-3893-bab4-ba93528cccd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f0:f0:e6:49:4f:68:90:28:d0:a2:68:fd:ab:00:68:06:ac:
         e4:31:2b:c0:af:6a:a2:08:69:2d:eb:f1:24:89:8a:e6:c2:e1:
         bb:7b:fc:e0:f9:34:2d:ee:e2:65:41:3f:a1:58:f5:68:d8:4c:
         6b:12:9b:df:6c:38:8b:72:6e:e2:f6:2f:a9:4b:5c:a3:8c:1c:
         34:3e:69:e0:ba:8b:c1:23:18:45:0b:d1:17:70:1b:42:68:e2:
         34:b8:50:40:e4:59:9b:83:b2:97:93:dc:ca:18:9c:8f:21:06:
         4b:fd:4c:c3:9e:8d:25:cf:9e:9a:cc:ba:b4:dd:53:52:99:79:
         22:ec:95:22:34:95:30:00:dd:20:1c:e4:ef:2b:51:22:d6:bb:
         01:94:b2:9c:cd:bb:3b:a7:89:21:44:ad:f0:44:2a:25:9d:51:
         36:52:dc:d6:ec:db:66:53:72:4f:bb:e7:35:9b:bf:9f:fd:fd:
         9e:36:12:15:a1:5f:83:67:47:20:7b:0d:d8:72:63:c1:48:bf:
         86:2a:28:0a:3a:7e:f9:ea:7f:8b:84:cc:af:3e:83:4c:40:1c:
         ce:92:f5:cb:e1:25:ff:e2:7b:8f:35:71:d2:45:ed:88:ab:a9:
         08:b1:6f:d6:11:17:39:93:72:e5:36:ac:5d:b3:dd:4d:be:4b:
         7b:d0:47:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:22:20 2026 by rpki-client