Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8797956b-aa71-383d-89e7-dfaf50664d29.roa
File:                     8797956b-aa71-383d-89e7-dfaf50664d29.roa (raw, json)
Hash identifier:          3YL0AmSS9QuOIK4JirJrQatgXQrHPB7z0Lf+EBQhm7k=
Subject key identifier:   8F:FF:E4:BF:05:99:D2:00:02:1C:26:80:68:88:09:5E:7F:AA:7B:C0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584F19FCE88A985F3E410CBBABDE
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8797956b-aa71-383d-89e7-dfaf50664d29.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     202
IP address blocks:        2607:f028:b22::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:e8:8a:98:5f:3e:41:0c:bb:ab:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=5b595043-aea4-4c3f-9ff7-be0a11637073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:73:61:ff:78:8f:9f:8d:22:34:fd:34:ce:92:
                    e2:7e:3e:1d:1b:fe:39:cf:2a:48:6e:94:f2:4d:2b:
                    34:9e:4a:b3:92:b3:44:c8:ed:e0:96:5e:ef:be:ca:
                    31:3d:25:e3:48:81:59:3c:16:c8:45:03:b3:49:04:
                    69:8e:f4:a8:a3:2f:57:bd:2d:1a:48:0e:1a:c2:49:
                    39:e4:ca:ae:fe:34:0d:e3:46:39:ec:36:ce:4e:78:
                    d6:b2:77:63:63:02:54:9c:7a:ec:ab:8a:b0:ff:67:
                    b3:5f:cf:27:28:d4:a1:fb:13:2d:36:1e:ad:e0:2b:
                    cb:ab:13:4b:38:59:00:b1:30:4f:71:0a:f4:6d:c2:
                    11:17:be:0f:49:2e:cc:de:6e:e5:f2:c7:1f:35:8e:
                    49:1c:12:24:90:81:1a:9e:6a:14:6e:2c:6e:68:bb:
                    84:7b:59:b3:39:42:aa:15:f5:a8:b3:57:53:ea:90:
                    a6:32:c4:0c:90:ea:2d:5f:91:56:71:ea:18:54:a1:
                    18:46:46:15:d2:e8:48:08:a9:f9:3f:af:fd:43:7b:
                    14:a9:14:16:a3:f8:b9:1b:49:35:58:d9:ed:39:83:
                    ec:9f:df:41:e8:61:b9:60:08:cc:d1:62:65:81:a8:
                    77:c9:cc:22:f8:e0:36:ef:5b:0b:82:65:80:5c:a2:
                    c0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FF:E4:BF:05:99:D2:00:02:1C:26:80:68:88:09:5E:7F:AA:7B:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8797956b-aa71-383d-89e7-dfaf50664d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:b22::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:2a:4e:15:e1:24:b5:d8:92:34:45:70:f2:35:6a:dd:00:c1:
         d4:26:a5:dd:f1:b7:cd:eb:a0:7e:24:6b:0c:c3:86:da:e4:88:
         e2:ae:8e:0a:30:00:52:22:eb:e6:77:8f:cd:aa:2e:4a:b7:b6:
         6e:a5:52:e0:9b:67:fc:4e:2b:a4:4b:c6:ea:dd:8f:6c:17:40:
         9f:f8:6d:d7:fa:2c:c7:2f:43:dd:46:af:3a:e7:9c:f0:d3:92:
         1b:71:1e:57:15:8c:7c:25:92:02:7c:e4:5f:d9:68:22:7c:ac:
         32:fc:9d:31:f7:7d:58:aa:39:e4:89:2e:40:73:08:bf:d3:f6:
         d6:ac:7a:35:88:c3:27:7f:4a:72:6b:1f:5f:fa:c0:9c:12:ed:
         b3:ef:4e:d7:b9:a7:e6:0a:2d:0a:ce:b8:f1:e2:01:32:85:7e:
         87:d6:11:7d:f6:29:08:72:1a:b8:73:e3:61:71:4e:6f:63:71:
         8a:a0:7b:bd:4a:03:07:48:4c:3b:cd:67:d3:ef:60:3a:9a:3c:
         e6:ac:ad:de:50:82:6e:b4:06:cc:bb:d0:5d:af:76:a0:87:f7:
         13:da:3f:8a:30:89:bb:2c:82:00:70:9d:57:1c:21:44:28:2a:
         6c:f8:a2:79:4b:9a:f2:56:b5:2a:a0:01:48:1f:e2:23:9a:b4:
         f6:7d:6e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:42:35 2026 by rpki-client