Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5223fc2b-d3d9-3086-a976-236c9c8625b6.roa
File:                     5223fc2b-d3d9-3086-a976-236c9c8625b6.roa (raw, json)
Hash identifier:          XHJfrKCrBRq0boQ43aKWwA+KxCtqL5LAD16BkcSVAzc=
Subject key identifier:   36:9A:D1:47:6B:BF:4C:18:0E:D4:8C:BF:8B:9A:00:AC:95:CC:F3:CA
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D975560AD95AC5B979ECCA780
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5223fc2b-d3d9-3086-a976-236c9c8625b6.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     3356
IP address blocks:        2607:f028:b11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:60:ad:95:ac:5b:97:9e:cc:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=f4d87b46-f386-42e7-8990-2c0a8c75c759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:77:41:81:d2:38:69:3e:60:c4:f1:cc:fb:
                    fd:c4:eb:9f:dd:e7:cf:0b:f5:e3:35:89:84:90:57:
                    ad:cd:61:bd:ca:d6:b1:24:8d:44:52:d4:97:3e:5e:
                    de:2a:cc:a3:8d:e0:67:db:45:8b:85:43:4e:ee:85:
                    14:4e:02:7e:55:d1:7b:72:ed:4d:ba:94:b2:96:38:
                    51:30:bf:52:e5:33:11:41:45:33:0a:a9:b6:ff:29:
                    bb:f8:4e:b1:ce:83:7b:5c:bf:2e:3f:10:8f:13:c9:
                    93:f0:7a:e4:d2:e2:96:e1:cc:4f:6c:79:32:5d:93:
                    a6:ca:57:16:2b:f7:c0:1e:ba:14:3e:31:5a:1a:82:
                    2a:a1:bf:69:aa:e4:f7:af:06:15:21:8d:4f:22:6b:
                    11:e9:e7:c7:b8:a3:85:e2:85:49:43:5b:ab:70:ed:
                    e5:7a:21:81:1a:87:17:d4:f9:9b:77:76:70:77:87:
                    fc:17:c6:56:e2:b8:36:73:e6:5b:96:fa:be:45:58:
                    61:e3:89:0a:57:af:eb:d2:bd:af:e7:16:dd:eb:5f:
                    6f:52:2f:ff:59:17:27:15:60:fb:90:ea:50:c1:f5:
                    6b:8d:aa:a9:09:91:03:12:36:2c:bd:b7:a6:03:01:
                    ce:27:d8:e8:f7:c1:4a:8d:9e:86:bb:75:74:40:a5:
                    e7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9A:D1:47:6B:BF:4C:18:0E:D4:8C:BF:8B:9A:00:AC:95:CC:F3:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5223fc2b-d3d9-3086-a976-236c9c8625b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:b11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:9c:62:f9:8d:93:3a:ce:66:70:17:e6:1a:3b:88:5d:62:9b:
         8c:1f:9c:e3:7c:14:00:30:d8:af:b5:29:c1:49:3b:cc:73:27:
         f1:1a:ca:12:46:99:94:26:0f:3f:f6:90:4f:03:02:bb:db:65:
         96:86:aa:87:73:0e:bb:7e:32:14:00:0b:b6:d9:6f:ca:c6:59:
         ae:46:9b:af:30:20:59:39:05:75:29:75:99:f2:d9:e6:69:52:
         47:89:da:bc:77:dc:95:0c:43:ee:f8:c3:86:11:c1:d0:25:88:
         17:1d:1b:6a:93:a5:71:68:90:ec:04:5e:0a:79:60:c1:28:38:
         a6:0a:b9:9d:4c:fa:78:8b:6f:87:66:bd:34:2a:95:b5:ca:1b:
         63:c6:04:0e:14:d0:03:ea:e0:12:e7:60:df:49:7d:e0:22:18:
         d8:48:40:e0:9e:96:c3:5c:98:bb:99:a0:e6:e6:15:b7:08:39:
         67:d8:54:03:34:e7:52:a8:bb:d4:7e:bf:76:d0:cc:fd:1b:42:
         53:ff:b7:46:13:4c:e4:68:40:e0:f9:62:d0:0b:17:e1:0f:10:
         91:fc:17:87:1a:b7:92:7e:cf:9f:4a:1c:31:b4:63:fd:40:9e:
         c6:77:6d:ce:9b:1e:8c:90:5c:18:41:94:9c:38:57:38:83:d7:
         20:a5:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 14:27:58 2026 by rpki-client