Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dcf371d0-52e0-3610-ad08-fa1541a43139.roa
File:                     dcf371d0-52e0-3610-ad08-fa1541a43139.roa (raw, json)
Hash identifier:          Urnr1Aq55EGahp63lEP95VI3qeX+Ht0h3bU2LLU1Pog=
Subject key identifier:   7C:EB:E8:BB:DC:03:B6:CA:86:21:73:54:19:B1:0F:32:6D:22:EE:A9
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D97555661DE0AAF7C06688F80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dcf371d0-52e0-3610-ad08-fa1541a43139.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     3356
IP address blocks:        2607:f028:b12::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:56:61:de:0a:af:7c:06:68:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=2509547e-f15b-4c22-b157-b01b6e02f324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:10:be:dc:32:3d:52:d4:6e:d3:69:bd:ff:
                    23:16:04:db:85:76:d2:f3:f9:37:b1:e4:af:e4:d5:
                    88:64:87:26:07:03:c8:21:23:1b:d7:5f:e6:5a:d7:
                    c2:2b:d8:50:ec:e7:0b:4f:6c:62:c9:fd:8f:34:c4:
                    5f:03:08:7d:dd:56:bf:dd:df:c5:f9:15:6b:78:d4:
                    ba:b4:df:19:9b:40:62:c4:11:b7:6b:82:f2:c6:84:
                    1f:2f:27:b6:99:c2:14:cb:df:84:98:5b:f8:7a:2e:
                    ef:e7:b6:72:7e:53:6f:2e:2f:74:eb:cf:31:f3:a5:
                    e9:d2:6b:80:fb:99:e6:25:ad:03:35:18:43:c7:88:
                    76:94:f7:14:6f:48:7d:19:b2:4c:06:10:94:0d:9a:
                    73:d1:7e:4a:dd:7d:21:69:f9:06:7e:02:f0:fb:2a:
                    b6:93:e7:4f:21:27:93:fd:9c:c2:ce:af:eb:46:f2:
                    e9:e1:df:a5:66:0b:b0:10:c2:49:7d:4b:ff:bd:5c:
                    ad:dd:b7:d2:36:ea:5d:11:4d:70:01:dc:1c:4b:23:
                    cb:b9:bf:57:79:15:79:1d:d5:82:72:44:93:a2:06:
                    a5:0e:c5:32:04:78:cd:93:f8:33:49:c6:37:b3:68:
                    c6:94:c9:ec:f0:cd:e6:48:55:88:39:e5:29:38:03:
                    58:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EB:E8:BB:DC:03:B6:CA:86:21:73:54:19:B1:0F:32:6D:22:EE:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/dcf371d0-52e0-3610-ad08-fa1541a43139.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:b12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a5:64:6b:7a:9c:0a:71:ae:35:fb:34:84:55:99:14:50:2b:
         f3:d0:8f:c5:5b:f8:db:dc:fb:f1:0b:eb:3e:74:e7:eb:f4:69:
         4a:fe:94:a2:f5:80:00:fd:b2:cc:58:64:9a:7b:38:e1:0a:bf:
         3b:0d:41:ff:eb:b9:86:4b:b8:72:6b:80:f0:e7:b3:1a:ce:06:
         dc:35:43:ca:b6:80:f3:2d:6a:4a:7e:23:18:73:95:8d:78:16:
         35:aa:e8:f8:08:36:32:d3:42:6b:0b:47:28:fb:fe:08:59:7b:
         c3:df:bb:19:58:26:ea:0c:b5:97:f6:26:35:a6:ef:c3:0c:a2:
         8e:a1:06:70:6b:8e:e9:e1:a2:ac:d1:86:a0:d3:3d:49:26:8e:
         cc:bf:e7:dd:99:d0:02:11:98:3a:bf:92:49:48:78:4b:71:01:
         b1:93:7d:10:e6:8c:34:82:cd:99:83:7e:f2:97:d5:c6:fc:bb:
         d2:95:f0:ff:78:3d:c4:ce:4d:25:89:55:49:42:97:9a:65:89:
         59:c0:29:b7:b5:c5:f3:12:45:45:d0:f6:94:e5:88:7b:00:4f:
         8b:d0:06:05:4f:de:02:1f:be:5c:cb:5a:ab:f6:e7:20:cd:fb:
         f7:a4:12:e8:a5:f1:75:f2:7a:3c:16:48:a8:39:70:43:d0:34:
         88:6d:8a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 14:28:10 2026 by rpki-client