Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6f309fb5-cb2f-3804-85fe-0e0e03472816.roa
File:                     6f309fb5-cb2f-3804-85fe-0e0e03472816.roa (raw, json)
Hash identifier:          VnItAUyYEY8p/GW1RDAKROmaFVGC0CMOYnID/zYzhc4=
Subject key identifier:   B5:78:23:1E:B4:A0:AA:0A:3F:92:5F:EF:12:92:D5:C5:94:F6:16:19
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584EF87CCCF163DAF6A07E2BB300
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6f309fb5-cb2f-3804-85fe-0e0e03472816.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     3356
IP address blocks:        2607:f028:142::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:cc:f1:63:da:f6:a0:7e:2b:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=e46d7e21-847a-4586-9dad-fac8fbd3117b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:98:df:2f:4a:2c:6e:cf:19:81:15:a4:92:13:
                    76:94:53:88:74:e0:4e:f5:d6:f7:6a:61:f9:25:1f:
                    06:b0:97:26:10:f4:18:08:4c:b6:86:61:04:0a:e9:
                    bc:ca:af:d3:d3:df:4a:ad:6b:d8:05:ec:d9:64:81:
                    df:f9:c0:92:ee:ed:74:ec:6b:d3:2b:81:46:45:f2:
                    b8:e1:00:9e:63:10:71:4a:91:b2:4d:f5:1a:f7:08:
                    a7:f8:64:e4:ad:bd:9d:31:84:c8:e5:f3:91:67:51:
                    97:72:12:a4:74:56:5c:70:87:60:67:05:a1:de:03:
                    bc:4f:40:cb:b2:97:58:a9:44:d2:0c:91:44:ae:73:
                    01:cf:ab:e6:f8:a5:ce:68:e6:85:41:75:27:92:fa:
                    6d:ce:9a:ab:fd:23:4a:bc:3b:fb:42:e6:e2:39:6c:
                    5a:d1:e3:33:01:1a:3c:4a:ec:15:43:a9:65:4a:8b:
                    01:c0:22:3e:ab:ed:7e:11:cd:eb:f8:fe:6a:39:8b:
                    b7:7a:07:92:5a:7e:60:b4:9a:d4:20:88:06:aa:1d:
                    03:ae:22:fa:8a:6e:03:73:e3:71:16:45:c7:e5:1a:
                    f9:18:2c:f9:b2:f6:38:8e:b0:00:c5:db:89:55:5e:
                    f5:ee:e1:1d:bf:2c:91:5e:5a:c7:ec:6b:fb:96:38:
                    90:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:78:23:1E:B4:A0:AA:0A:3F:92:5F:EF:12:92:D5:C5:94:F6:16:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6f309fb5-cb2f-3804-85fe-0e0e03472816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:142::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:da:db:cc:65:72:ad:8b:0a:55:f2:59:ec:5c:5d:cb:5a:0d:
         7e:78:25:33:9e:aa:18:9d:f3:5f:f9:dc:6c:c1:e9:3c:b6:df:
         9a:05:e5:14:c5:d8:10:1c:14:db:40:50:61:c9:8a:8b:42:4b:
         a6:fd:b3:2f:45:37:8f:44:33:c2:9e:3f:b5:28:9f:e2:ec:62:
         1b:48:4b:ae:66:94:be:65:17:5b:02:2b:87:b0:c5:22:da:30:
         e6:5e:9f:e2:d8:41:1a:4a:ae:8c:20:46:07:ff:58:e3:14:af:
         ad:7e:fd:65:e2:bb:cb:a1:93:7f:68:dc:bf:cb:f0:08:b0:d1:
         73:8f:a2:06:3a:5e:bb:71:ba:31:8f:c2:7f:4b:ed:79:1d:cd:
         f6:bc:2b:ba:d6:72:8a:0a:74:fe:d0:8c:29:c6:ef:47:e7:6d:
         06:2e:42:64:96:9f:78:02:bd:20:9c:de:15:b2:df:79:e6:be:
         32:e0:17:8e:f5:49:80:cd:c1:41:c0:6e:81:9e:55:c3:7c:70:
         93:95:8d:1c:03:86:d2:9e:2d:d0:0d:89:a7:cc:2f:04:67:3a:
         20:47:9e:e6:da:fe:ef:f8:ae:d5:a4:5c:49:7f:72:41:af:86:
         fd:d4:f5:27:9e:32:87:48:7c:9e:a7:04:54:db:28:92:ed:93:
         9e:46:35:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:55:15 2026 by rpki-client