Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/be127d84-6cf5-330b-b573-da43b813fadb.roa
File:                     be127d84-6cf5-330b-b573-da43b813fadb.roa (raw, json)
Hash identifier:          ZfGmiYNYV7lioJjcGlhyTQEUazpQTmp4Yo9C8Y7MZGo=
Subject key identifier:   ED:87:53:3B:37:EA:50:C4:FD:8E:E8:F3:91:75:A7:B0:96:03:B5:55
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584E059C5C0BC8702A0EAE2D5328
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/be127d84-6cf5-330b-b573-da43b813fadb.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     203
IP address blocks:        2607:f028:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:5c:0b:c8:70:2a:0e:ae:2d:53:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=7a15f6d5-a7af-4f32-8b5d-34ea1d0655d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:ed:0f:8e:53:1d:66:c9:ff:ae:a1:5b:ba:
                    a7:11:9b:e3:6c:07:3c:a5:51:f7:51:9c:65:97:30:
                    27:10:03:fe:be:38:aa:94:22:14:02:cb:5b:90:28:
                    ac:d7:ed:d7:d6:b5:49:dd:88:36:36:bc:a7:6d:62:
                    90:aa:01:0a:8f:9c:6e:d4:d0:a4:6f:81:95:98:20:
                    e6:51:1e:db:eb:18:5d:61:cc:21:6d:f7:ab:b0:88:
                    ea:91:29:ca:0b:e0:66:cc:ed:51:04:a9:d4:66:ad:
                    62:94:ef:71:fd:35:30:81:7b:ca:c2:5b:01:f6:4e:
                    d8:61:c9:97:5e:7c:d5:e3:22:10:30:d2:35:e6:23:
                    97:44:07:cc:7d:fd:65:2a:01:bf:cd:93:19:72:18:
                    05:ca:d3:f4:2c:77:10:83:0a:de:0f:60:40:4c:39:
                    50:7a:e7:72:d1:0c:8a:40:c8:a1:ba:cd:e3:05:c4:
                    7e:ae:22:dd:9f:99:56:ef:c1:85:a3:9b:b1:58:35:
                    13:9c:ab:26:59:d1:b9:f7:0d:52:22:2e:65:af:44:
                    1b:4b:f7:ea:78:c6:1b:e6:ba:a1:cc:50:e9:49:ec:
                    dc:da:9d:fa:49:77:23:aa:6b:33:ae:cf:3e:95:52:
                    d8:bb:06:33:ac:19:54:a3:fe:ac:de:ad:9e:49:d7:
                    eb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:87:53:3B:37:EA:50:C4:FD:8E:E8:F3:91:75:A7:B0:96:03:B5:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/be127d84-6cf5-330b-b573-da43b813fadb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a2:eb:a5:7d:aa:16:a6:20:f3:bb:e2:af:e0:05:c3:a3:5e:
         0f:e2:02:39:2c:5e:04:df:42:59:06:6c:be:de:86:2a:5a:46:
         07:d9:17:f9:ac:95:39:5b:37:2d:11:ad:59:8d:c2:aa:da:eb:
         24:17:e1:03:2d:63:d1:03:3d:37:a2:5f:c6:fd:aa:13:35:ce:
         06:6a:a3:3e:f3:7e:b9:9e:c0:c8:c5:10:bb:bf:ec:30:d9:93:
         bb:15:4b:06:1c:ff:43:cd:bf:af:ae:ee:71:87:dd:45:8e:a5:
         69:9e:eb:99:43:12:8d:ed:e1:56:80:12:9c:62:0a:72:cc:53:
         b0:80:4d:f3:17:74:37:de:d5:ff:f9:ff:da:4c:51:57:62:ee:
         37:f2:d1:57:be:47:6a:14:38:21:9e:72:ac:29:24:56:8a:3d:
         61:ef:7d:3e:e8:61:da:f7:1e:76:19:2a:cb:72:98:9c:67:cd:
         21:2a:0f:ce:6e:42:cb:8f:a3:ba:c2:93:88:33:08:30:28:4e:
         62:3e:ce:aa:3f:2a:9a:16:59:7f:87:ba:71:83:3c:29:62:89:
         bc:a7:c0:15:77:39:75:18:2f:99:32:a4:9b:78:3a:5f:c8:0e:
         7a:2e:56:6f:3e:bf:b1:ef:31:1d:44:b7:e1:4c:10:f6:d3:a2:
         2e:d6:29:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 17:53:25 2026 by rpki-client