Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19a2deb9-8a3a-3397-a792-c72e3727e14a.roa
File:                     19a2deb9-8a3a-3397-a792-c72e3727e14a.roa (raw, json)
Hash identifier:          3/XN3wHjgidTK6BErgOJaN4cPA7vOPCY5jCWC/Lz+mw=
Subject key identifier:   63:94:3A:E1:F1:E2:49:34:7B:42:4B:A9:8D:DC:71:F6:8C:96:01:9B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF87CCF049EFC8988ABE44640
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19a2deb9-8a3a-3397-a792-c72e3727e14a.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     203
IP address blocks:        2607:f028:82::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:cf:04:9e:fc:89:88:ab:e4:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=766aee51-2220-4ae0-a994-8b4fe2aab345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:71:f1:b2:a6:d4:b8:0b:30:6d:c9:5a:29:bd:
                    97:04:4f:c9:c9:b2:53:c0:e2:82:c1:e9:b2:3e:97:
                    02:c3:58:5f:37:b3:14:2f:75:f0:49:94:73:23:f3:
                    d7:8e:72:29:e2:fe:9f:fa:07:4c:ed:57:b9:80:ca:
                    e1:3e:ef:11:d6:1d:6d:0f:d9:a2:10:f0:90:9a:56:
                    73:14:1b:d4:d1:94:e4:12:b5:19:45:e0:23:83:3b:
                    e3:cb:6f:39:68:85:83:52:25:13:84:28:d3:79:63:
                    2f:22:40:f6:14:af:7c:a7:45:c4:9c:53:79:12:58:
                    ef:2f:a8:51:d1:22:b9:32:72:0d:a3:b2:2a:ef:ea:
                    36:55:ce:f0:5e:12:2d:cc:01:68:33:c1:aa:51:9a:
                    a7:fc:37:87:d5:6e:e4:88:dd:7a:8f:1b:a1:2d:4a:
                    35:67:45:24:8c:d1:60:71:9a:85:35:e9:2e:3d:ac:
                    70:54:02:82:33:05:eb:7b:33:d6:3b:4c:69:67:83:
                    39:a7:78:70:7f:86:b4:13:bd:f2:17:45:cc:75:38:
                    43:23:18:9d:82:15:08:91:65:f9:83:1f:6b:0a:fa:
                    e7:9c:aa:ff:93:2f:60:1e:d4:6b:91:c9:12:2f:77:
                    e8:16:77:f0:24:83:a3:e6:f8:2a:a0:23:7a:b1:dd:
                    83:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:94:3A:E1:F1:E2:49:34:7B:42:4B:A9:8D:DC:71:F6:8C:96:01:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19a2deb9-8a3a-3397-a792-c72e3727e14a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:82::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:de:d9:c4:cb:2a:37:30:86:e7:8f:38:69:6e:76:d2:03:5a:
         db:12:50:ed:3b:d4:15:1e:d4:dd:a8:17:a3:92:e0:dd:6f:3b:
         eb:08:a3:2e:2d:ee:af:7f:2c:ab:a1:65:4f:f6:9a:89:53:26:
         c8:39:85:ab:c4:e0:57:32:24:01:89:8e:cb:06:cd:61:6c:21:
         b9:71:e4:25:35:35:5f:d3:29:84:5b:55:6c:28:dc:68:35:9b:
         a9:da:a6:c7:22:3d:2b:a1:ec:01:85:fc:aa:47:cb:4a:6a:c1:
         02:4e:b4:fa:7e:0d:84:1b:59:0d:a7:4b:08:7b:88:5e:e6:03:
         c7:84:2f:1a:45:51:a8:aa:a3:02:ae:05:64:5d:04:55:e5:64:
         50:73:38:a2:18:c0:65:f1:07:f4:0e:03:13:31:a5:4a:c5:e3:
         68:1d:db:ab:9b:da:a0:98:d7:9f:d2:e2:32:3f:4a:65:6d:e8:
         ce:b3:bf:28:37:9e:72:4b:54:02:0d:f5:63:1b:72:72:67:03:
         98:cb:c7:e6:1d:07:c3:2e:e1:0d:40:3d:74:9c:d4:94:d5:e0:
         b7:52:7d:a5:04:0c:80:12:9a:90:bf:5d:f3:fc:a0:84:7d:fa:
         f0:2d:54:70:54:dc:27:d1:a7:a7:ac:06:67:c0:25:09:79:a3:
         17:9c:92:4d
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE74fM8EnvyJiKvkRkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk
NzY2YWVlNTEtMjIyMC00YWUwLWE5OTQtOGI0ZmUyYWFiMzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXHxsqbUuAswbclaKb2XBE/JybJTwOKCwemy
PpcCw1hfN7MUL3XwSZRzI/PXjnIp4v6f+gdM7Ve5gMrhPu8R1h1tD9miEPCQmlZz
FBvU0ZTkErUZReAjgzvjy285aIWDUiUThCjTeWMvIkD2FK98p0XEnFN5EljvL6hR
0SK5MnINo7Iq7+o2Vc7wXhItzAFoM8GqUZqn/DeH1W7kiN16jxuhLUo1Z0UkjNFg
cZqFNekuPaxwVAKCMwXrezPWO0xpZ4M5p3hwf4a0E73yF0XMdThDIxidghUIkWX5
gx9rCvrnnKr/ky9gHtRrkckSL3foFnfwJIOj5vgqoCN6sd2D0wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGOUOuHx4kk0e0JLqY3ccfaMlgGbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTlhMmRlYjktOGEzYS0z
Mzk3LWE3OTItYzcyZTM3MjdlMTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKACC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHne2cTLKjcwhuePOGludtIDWtsSUO071BUe1N2oF6OS4N1vO+sI
oy4t7q9/LKuhZU/2molTJsg5havE4FcyJAGJjssGzWFsIblx5CU1NV/TKYRbVWwo
3Gg1m6napsciPSuh7AGF/KpHy0pqwQJOtPp+DYQbWQ2nSwh7iF7mA8eELxpFUaiq
owKuBWRdBFXlZFBzOKIYwGXxB/QOAxMxpUrF42gd26ub2qCY15/S4jI/SmVt6M6z
vyg3nnJLVAIN9WMbcnJnA5jLx+YdB8Mu4Q1APXSc1JTV4LdSfaUEDIASmpC/XfP8
oIR9+vAtVHBU3CfRp6esBmfAJQl5oxeckk0=
-----END CERTIFICATE-----
Generated at Wed Sep 9 00:50:14 2026 by rpki-client