Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/58fc5af6-20a8-3046-9190-6eabeb40dfbb.roa
File:                     58fc5af6-20a8-3046-9190-6eabeb40dfbb.roa (raw, json)
Hash identifier:          i6oFiTqC27myxyyLCZap9qrROMvnD93V/2LOHDGdUlw=
Subject key identifier:   97:71:0C:99:5F:B7:4B:DA:E0:25:1F:79:38:F3:03:6A:FA:EC:CF:D2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF87CCEF940C434EB94AC7480
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/58fc5af6-20a8-3046-9190-6eabeb40dfbb.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     202
IP address blocks:        2607:f028:82::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:ce:f9:40:c4:34:eb:94:ac:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=0dff16bb-646f-4dd2-bb03-5497ebee1811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a2:2f:2e:8c:f7:86:01:4d:b5:01:08:db:06:
                    bd:5a:03:c4:28:11:75:d5:30:cc:dd:ed:63:71:a6:
                    b0:ac:21:7b:56:f4:0b:16:1a:70:70:ff:c8:39:9b:
                    cf:e8:dc:88:33:85:8c:ae:b2:f4:42:69:9e:00:64:
                    97:9b:49:1f:9c:77:ea:64:1c:1d:f1:17:99:c4:57:
                    7e:73:3b:26:05:9d:c5:05:f6:c5:f2:ab:45:cf:bd:
                    7c:00:5d:c1:0b:8f:98:3c:b6:3a:57:39:6d:ed:c1:
                    f1:31:02:a1:30:6e:b2:83:31:77:1c:91:fb:3e:77:
                    24:a1:fe:0a:f2:a0:7e:18:b4:d5:b1:2f:0b:33:36:
                    31:2b:b9:81:4d:6e:5f:5e:db:ba:66:63:0f:36:0a:
                    bb:ae:6b:cf:ca:00:25:7f:b6:e8:28:b0:b6:70:73:
                    57:dc:d9:2f:71:36:f3:b1:37:72:ce:b3:13:45:68:
                    f4:25:a0:01:a9:c3:0a:85:23:9d:06:79:77:91:2e:
                    5f:d4:72:be:06:66:e4:44:e3:d3:0e:8d:a0:d5:36:
                    ff:1b:15:2a:6d:40:b3:3a:db:d4:28:e8:93:ee:43:
                    f2:5c:b2:7b:85:9c:b3:cc:54:60:6d:0c:29:c6:44:
                    cb:ff:34:46:a9:1a:d8:01:e4:2c:38:ed:84:f6:8b:
                    35:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:71:0C:99:5F:B7:4B:DA:E0:25:1F:79:38:F3:03:6A:FA:EC:CF:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/58fc5af6-20a8-3046-9190-6eabeb40dfbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:82::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:fc:c9:27:0e:c4:d4:08:c4:53:f9:9f:96:01:4f:1f:03:27:
         71:06:17:ef:c6:fc:29:0d:c5:ca:b6:19:50:77:77:ba:64:81:
         81:79:7b:03:44:8d:c3:0b:b3:87:c3:2a:2e:9b:79:2d:05:71:
         77:de:73:98:4a:2a:8c:4d:b7:7e:03:c3:25:50:8b:e2:59:88:
         e9:42:c8:ab:b3:be:ef:83:7c:e6:17:f4:f3:3f:8a:35:cb:00:
         1f:8c:16:47:1f:9f:79:e5:a4:c9:b5:83:a6:44:09:26:d4:63:
         92:6a:55:ce:6b:f0:8e:44:69:97:8a:1e:56:c6:15:36:b7:7d:
         51:b9:70:39:aa:ff:d5:5d:ba:b9:9c:82:79:12:79:bd:3f:00:
         6d:aa:d8:4b:1a:84:7b:c4:80:67:63:cf:d6:5d:aa:ef:ed:c9:
         38:31:13:ed:a2:c3:2e:a5:92:bd:84:c6:fb:3c:01:d7:30:88:
         a8:42:3b:46:0e:87:bf:8e:56:7e:95:b2:46:f8:fd:9d:3d:b9:
         be:73:e7:e1:2e:99:90:b4:b7:85:49:9f:64:54:c6:ca:70:70:
         53:aa:f6:ac:4d:aa:c1:d5:a0:71:0a:5b:03:8e:59:db:c7:19:
         37:ac:67:19:51:56:7e:3d:19:2e:f1:bf:ad:a2:1b:57:b8:ab:
         b6:e5:e5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:42:18 2026 by rpki-client