Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fc7a04e-899b-3caf-8bef-f6987972d566.roa
File:                     0fc7a04e-899b-3caf-8bef-f6987972d566.roa (raw, json)
Hash identifier:          yBqPZwfck4aDzMRwvWJjXyrxsgHX9QP6PnMWbOCv8/s=
Subject key identifier:   20:1B:C9:32:F3:6C:E7:4F:7A:B8:E1:8E:1D:06:E4:4F:4C:42:ED:5C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF87CD2BE30A7798C69274D00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fc7a04e-899b-3caf-8bef-f6987972d566.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     203
IP address blocks:        2607:f028:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:d2:be:30:a7:79:8c:69:27:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=35010f14-64f1-4ec8-8c7f-62bedcb40db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:08:78:04:95:f3:23:a9:7b:10:13:34:12:1b:
                    d0:a7:31:9a:17:fb:d6:fc:ac:3a:bc:9d:78:1a:d0:
                    52:28:38:74:df:c6:fb:a3:c8:c0:42:d9:23:7c:7a:
                    25:8f:6a:7a:fe:0a:50:13:8d:ba:95:75:60:67:1e:
                    06:09:b5:4f:3e:b8:71:cb:f2:8a:66:e3:da:9e:0d:
                    79:22:08:78:94:14:ab:cb:50:32:d7:c4:46:2e:68:
                    43:fd:28:db:bb:03:1e:67:3c:ba:52:a0:b3:f5:1c:
                    e2:9f:1a:90:36:7a:db:d8:b2:8f:55:6f:c3:7b:ab:
                    2c:45:a7:b5:0e:c1:c3:bc:16:1c:ff:ed:df:26:f6:
                    eb:a8:ae:ba:b6:35:74:17:7f:e8:0e:03:be:a0:ae:
                    d2:af:fb:53:94:28:ab:92:56:25:23:a3:f9:45:79:
                    40:19:fb:dd:1a:94:53:c3:c9:cc:0f:10:c2:42:9f:
                    b8:5b:02:c0:6b:a8:d3:2a:c3:e8:6c:15:e2:04:c0:
                    6b:38:74:12:e4:6e:ca:20:5f:d7:a1:76:d8:74:a8:
                    ab:30:ff:db:74:41:7c:02:aa:64:10:31:97:3e:1d:
                    47:ab:8f:5d:1a:fb:27:46:4f:04:25:0b:cf:c4:b4:
                    be:be:05:c8:c1:64:d6:a9:0b:cb:64:ca:36:2e:15:
                    fc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1B:C9:32:F3:6C:E7:4F:7A:B8:E1:8E:1D:06:E4:4F:4C:42:ED:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fc7a04e-899b-3caf-8bef-f6987972d566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:38:c3:33:90:f4:35:7a:2e:c2:95:57:2b:aa:cc:e7:7e:b2:
         38:19:a5:b9:23:f0:1d:72:0a:e2:2e:8d:bb:8a:51:cf:2d:0c:
         63:d0:45:59:6a:93:e8:09:42:cb:47:94:a7:60:7b:e3:1b:06:
         77:78:6d:36:6d:3d:e6:3e:79:c1:5b:86:40:17:73:f4:05:cd:
         34:e7:1a:00:65:3b:3f:79:9a:bf:74:84:d7:25:65:38:71:99:
         d4:87:bb:6c:0d:0e:ff:b3:02:33:f3:6d:3c:1e:d5:4c:a9:4c:
         c1:52:03:cf:73:54:fe:40:4a:34:34:ed:4d:3a:33:dc:df:a6:
         a1:ba:f2:e2:ca:46:fc:9b:1d:e6:67:53:9d:b8:b9:bf:41:5f:
         9a:80:e6:dc:15:9c:20:3f:76:83:b0:24:e6:70:b1:c5:73:b1:
         20:ce:1f:7b:a2:26:fb:03:99:df:c4:07:a4:26:4c:17:b7:5b:
         6a:19:28:51:a3:d1:c8:1c:8b:a4:32:da:5b:78:10:3f:b2:24:
         8a:52:20:11:ca:64:4b:b0:64:da:ca:00:a0:2f:81:3e:8a:82:
         fd:60:e0:9e:78:7d:fa:f5:9f:ab:12:de:8b:f9:88:47:1e:1c:
         70:fc:96:21:93:4a:24:44:3d:4d:88:3b:54:92:c8:1a:ea:81:
         b6:bc:46:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:52:13 2026 by rpki-client