Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6dfad661-faab-3db6-a5e0-5849f8f62a7c.roa
File:                     6dfad661-faab-3db6-a5e0-5849f8f62a7c.roa (raw, json)
Hash identifier:          zdFpKN+ba0+jC+pgZriSFquHLTnxScFXULm4Xfb6NGA=
Subject key identifier:   13:85:67:FB:AC:94:82:03:A7:EF:17:9D:75:A9:05:28:6D:71:F1:7B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF87CD2358D0137F96F605AE0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6dfad661-faab-3db6-a5e0-5849f8f62a7c.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     203
IP address blocks:        2607:f028:72::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:d2:35:8d:01:37:f9:6f:60:5a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=519b638e-c0cd-4178-80bb-74803b73cd5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d1:74:fa:ca:7d:d6:48:9d:fe:5a:a0:3f:0c:
                    83:31:62:51:c3:aa:22:60:42:ca:20:21:bd:8f:54:
                    07:14:ff:dc:24:58:f0:89:c2:54:a8:2e:fe:2b:12:
                    6f:a1:ae:e9:17:4f:89:d9:aa:fc:f6:28:31:6e:74:
                    63:a6:64:b7:87:a1:9f:e4:76:55:36:09:e4:1e:f1:
                    32:f5:e6:bf:dd:44:37:3a:63:dc:83:17:3f:c1:59:
                    40:67:ee:92:0d:dd:a8:30:15:61:57:72:b9:50:e2:
                    62:c6:68:2a:fb:30:94:fd:a0:be:b8:3d:67:a9:fc:
                    15:1b:e0:07:6e:22:ea:2e:79:80:29:f3:e0:1f:65:
                    8c:09:11:53:1a:b7:c4:bb:58:ac:39:8c:b2:98:9a:
                    83:6a:58:31:45:ec:ac:41:2f:aa:7c:8d:17:fe:83:
                    6c:b0:99:d4:3d:4d:d9:30:31:e4:a5:f3:b7:ba:36:
                    55:11:e8:00:18:ea:40:c9:44:39:fe:cf:27:94:f8:
                    f7:0f:7b:81:5c:9c:a4:96:e4:96:70:0f:87:f9:02:
                    64:dc:ee:a6:8f:1e:48:3a:d8:7f:1b:9a:48:f6:a4:
                    d7:dd:32:01:31:80:58:97:f4:bd:6e:b5:fe:cb:de:
                    dc:32:b7:f7:9c:27:7b:d8:c1:78:62:bb:91:6c:af:
                    e7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:85:67:FB:AC:94:82:03:A7:EF:17:9D:75:A9:05:28:6D:71:F1:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6dfad661-faab-3db6-a5e0-5849f8f62a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:72::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:25:a0:6f:9e:6c:5f:da:1d:cf:d1:21:4a:ad:da:7e:be:93:
         dd:2f:2c:8f:2c:12:50:29:ef:4b:d2:33:98:33:c4:5e:5b:cc:
         8d:dc:ae:49:1f:44:9b:63:de:ce:00:98:5a:2b:21:3b:5e:53:
         9c:b2:5d:d8:b1:63:ca:9b:f2:13:0c:b0:08:8c:c0:5f:1b:b2:
         cb:26:b6:ee:59:3a:a9:2c:dc:4e:23:87:12:78:37:ab:82:0e:
         94:e8:58:55:9a:38:15:b4:39:eb:41:28:1a:b2:53:f8:4a:d4:
         9a:4a:72:79:4d:c2:a5:36:24:1d:5a:8e:67:c8:92:d3:5f:e3:
         d7:65:ef:b7:b7:c6:11:14:cf:9e:7b:d2:5d:81:4c:29:66:48:
         06:0a:d2:fc:6b:d9:fd:e0:e3:2e:e1:7a:c9:ee:82:48:b4:49:
         d1:a0:81:43:d0:8f:5c:20:3c:46:d2:20:b7:51:2a:16:e0:1b:
         a3:1a:b7:23:15:c3:0f:34:6c:88:0b:75:85:a3:d9:db:1f:77:
         2d:0a:d4:0c:17:5e:a3:36:c4:31:2c:2f:b1:f9:ea:46:04:61:
         cc:31:45:93:df:87:b6:eb:ad:ba:51:fe:3e:a3:d9:2c:b8:cb:
         b2:29:a6:e3:11:ec:2f:97:c9:fa:7a:a8:56:e4:e9:55:25:24:
         74:52:a1:f7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE74fNI1jQE3+W9gWuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk
NTE5YjYzOGUtYzBjZC00MTc4LTgwYmItNzQ4MDNiNzNjZDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdF0+sp91kid/lqgPwyDMWJRw6oiYELKICG9
j1QHFP/cJFjwicJUqC7+KxJvoa7pF0+J2ar89igxbnRjpmS3h6Gf5HZVNgnkHvEy
9ea/3UQ3OmPcgxc/wVlAZ+6SDd2oMBVhV3K5UOJixmgq+zCU/aC+uD1nqfwVG+AH
biLqLnmAKfPgH2WMCRFTGrfEu1isOYyymJqDalgxReysQS+qfI0X/oNssJnUPU3Z
MDHkpfO3ujZVEegAGOpAyUQ5/s8nlPj3D3uBXJykluSWcA+H+QJk3O6mjx5IOth/
G5pI9qTX3TIBMYBYl/S9brX+y97cMrf3nCd72MF4YruRbK/nbwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBOFZ/uslIIDp+8XnXWpBShtcfF7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmRmYWQ2NjEtZmFhYi0z
ZGI2LWE1ZTAtNTg0OWY4ZjYyYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABy
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJMloG+ebF/aHc/RIUqt2n6+k90vLI8sElAp70vSM5gzxF5bzI3c
rkkfRJtj3s4AmForITteU5yyXdixY8qb8hMMsAiMwF8bsssmtu5ZOqks3E4jhxJ4
N6uCDpToWFWaOBW0OetBKBqyU/hK1JpKcnlNwqU2JB1ajmfIktNf49dl77e3xhEU
z5570l2BTClmSAYK0vxr2f3g4y7hesnugki0SdGggUPQj1wgPEbSILdRKhbgG6Ma
tyMVww80bIgLdYWj2dsfdy0K1AwXXqM2xDEsL7H56kYEYcwxRZPfh7brrbpR/j6j
2Sy4y7IppuMR7C+Xyfp6qFbk6VUlJHRSofc=
-----END CERTIFICATE-----
Generated at Wed Sep 9 00:50:44 2026 by rpki-client