Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c5bbb4a-dcfc-3fee-a8bf-9ed96f5c4333.roa
File:                     1c5bbb4a-dcfc-3fee-a8bf-9ed96f5c4333.roa (raw, json)
Hash identifier:          Ik0S97VsBkMyJ47kqYMZtZTgLfbuhS83wVhYkp4A9t0=
Subject key identifier:   4B:F9:8F:57:BB:E9:12:44:62:4A:E8:A3:18:43:CE:66:33:01:34:A9
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E4129C3C0A8A285FAF59B9300
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c5bbb4a-dcfc-3fee-a8bf-9ed96f5c4333.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        2607:f028:251::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:c3:c0:a8:a2:85:fa:f5:9b:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=2524047b-ffaa-45d3-80e8-10fa11117471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:d9:da:c0:f5:39:c3:8e:c6:99:59:e2:8a:
                    1f:b6:5d:7d:e6:b7:86:6f:aa:69:af:a7:32:28:3f:
                    74:b3:b1:70:d5:05:70:e4:c2:72:90:45:31:41:87:
                    95:58:ba:d6:bf:f1:19:1e:d3:7d:e1:8d:11:ea:83:
                    11:06:e4:10:96:9e:ce:76:15:7b:3f:e5:69:fe:f1:
                    c6:13:5f:3a:f2:98:3e:30:39:9b:95:6e:a9:d6:55:
                    21:51:c6:25:cb:3f:66:4b:2e:10:97:e9:2f:bb:f7:
                    f3:63:a3:b9:0b:ce:8d:73:ea:d4:40:be:15:3e:fd:
                    87:a7:ae:4b:e5:59:7e:28:1a:b0:f8:85:a2:03:e0:
                    cf:8f:d7:dd:eb:86:54:24:1b:9a:1c:b9:9c:c7:a5:
                    30:7e:14:c7:72:64:25:06:89:8b:ab:c3:84:73:9d:
                    1c:bd:4e:02:27:95:11:7b:eb:39:17:70:2a:1f:1a:
                    18:52:fc:82:29:27:2f:76:02:c0:94:13:9c:df:48:
                    a7:74:8e:e1:77:2f:67:76:9d:9c:15:9b:a9:71:20:
                    00:ca:23:22:3d:45:41:b5:85:a7:5d:07:ac:da:52:
                    cc:af:fc:b6:20:7a:8d:05:2d:79:bb:19:e7:03:ec:
                    f7:ab:77:42:8e:b6:10:0a:9d:df:22:22:c0:d0:0c:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F9:8F:57:BB:E9:12:44:62:4A:E8:A3:18:43:CE:66:33:01:34:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c5bbb4a-dcfc-3fee-a8bf-9ed96f5c4333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:251::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d8:82:18:da:3d:2d:c5:67:c4:cb:d7:86:ad:0e:0a:ae:42:
         53:39:78:8c:ff:54:dc:89:d4:ac:d6:d1:8e:e4:07:97:63:4f:
         f3:5c:16:52:86:47:53:16:b7:0e:a2:cd:c4:b9:fe:d1:a7:19:
         84:62:16:5d:bf:e3:1a:e7:d2:45:65:1e:29:cd:43:3e:25:16:
         53:b0:f3:bc:67:de:a2:59:75:84:4e:7a:87:62:75:37:17:81:
         da:00:63:23:25:33:5c:f7:06:61:82:d2:0a:2d:b9:33:53:89:
         ee:65:75:8d:87:e3:9f:f6:69:b9:24:8f:51:cb:f8:84:03:e8:
         c0:0c:ad:65:ef:85:30:0f:c9:82:59:e8:02:2b:1d:54:63:21:
         5c:74:77:63:9b:e0:4a:a4:88:f0:3e:ac:53:cb:7f:db:74:69:
         d2:a3:21:79:e9:da:fd:ef:22:6d:15:48:39:02:92:ec:62:cc:
         9e:71:62:1f:7a:6d:21:e0:58:ab:98:87:1b:32:da:bd:92:8d:
         6a:38:75:b6:e0:47:36:5e:9e:d5:41:87:4e:df:27:27:8a:49:
         00:7e:9f:05:30:68:0e:f3:68:b6:c0:3f:68:a1:36:99:41:b0:
         32:5d:56:e4:90:01:64:07:af:74:20:96:e8:8f:d3:5b:8b:f2:
         87:d1:56:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 20:17:47 2026 by rpki-client