Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f9b8ca72-f475-39d6-8911-8e23862af40f.roa
File:                     f9b8ca72-f475-39d6-8911-8e23862af40f.roa (raw, json)
Hash identifier:          IPSzKBUzc0gzO471/P2zuS9dv5WeJP3cdwb+LvS6Z7g=
Subject key identifier:   0E:0D:BA:8A:B2:A1:45:AA:F3:F8:54:4B:0E:47:20:2C:70:98:B3:3C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584D97555932E23F2696EBBE2000
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f9b8ca72-f475-39d6-8911-8e23862af40f.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     86
IP address blocks:        2607:f028:86::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:59:32:e2:3f:26:96:eb:be:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=f6f9e88d-66c9-49ce-9ea7-bc28db1a11a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:b7:d2:74:a2:a5:85:2d:0b:ea:ec:aa:9b:
                    5f:61:79:df:63:47:b5:0f:34:05:53:c1:f4:ab:4e:
                    46:54:33:89:1a:bf:f9:cb:8f:d7:24:e8:0a:22:e7:
                    89:ff:84:5d:d2:64:ed:7d:19:b8:66:89:ef:af:84:
                    7e:28:6d:7d:f9:f7:3b:5a:c7:1f:57:e6:6c:47:69:
                    cc:2c:1e:4a:08:a2:11:00:03:17:a1:89:fe:aa:e0:
                    7f:e0:67:5a:85:d0:c3:2e:ac:3c:b0:f7:53:68:00:
                    a0:a2:a3:33:e3:da:54:66:ba:02:a2:77:f6:e4:67:
                    19:d8:57:10:72:b6:4d:2a:f4:e1:28:ec:d1:9a:6e:
                    a0:e8:48:bb:f1:f4:02:d5:07:8b:ed:7b:9a:35:f1:
                    5b:37:b4:e9:34:17:da:81:3f:7e:a9:f0:90:38:2c:
                    ff:43:ce:cc:80:4d:8f:be:77:32:08:53:60:c9:66:
                    97:7d:e6:2e:95:3b:26:c8:d3:62:8a:9d:44:5d:f0:
                    7e:9d:92:7e:e0:bb:69:cd:75:7b:c5:a1:d8:9c:f6:
                    a7:fd:f6:d2:c0:da:96:f3:fc:3e:b4:4e:63:16:f0:
                    3a:1b:ca:90:f9:df:03:7b:9f:8d:70:44:10:af:c3:
                    39:8c:b8:39:eb:ca:cd:a8:39:76:ee:dc:3f:24:64:
                    53:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0D:BA:8A:B2:A1:45:AA:F3:F8:54:4B:0E:47:20:2C:70:98:B3:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f9b8ca72-f475-39d6-8911-8e23862af40f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:86::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7d:3f:c9:f4:44:d4:7e:24:01:cb:ec:3e:3c:0f:82:e0:24:
         a4:dd:57:68:88:22:1e:a5:ab:00:e2:3c:ff:6b:2c:e3:07:ff:
         b5:73:3e:64:1e:af:2f:29:0d:88:06:95:8d:1a:9c:d1:c7:ad:
         d4:19:34:23:d1:e8:d2:80:f2:1f:88:b8:15:2e:d1:4b:90:43:
         08:fb:66:90:52:c9:49:35:d9:8e:8b:d2:ee:d1:fb:55:0a:62:
         ce:b9:8d:63:ee:dd:d6:ab:42:91:2e:2d:4c:8c:86:de:6e:9f:
         45:ff:17:93:a2:2d:a3:7e:ec:75:43:e7:2f:83:e9:07:1c:e6:
         f9:87:3c:3a:d8:96:b0:be:88:67:9d:87:30:d1:b2:22:aa:f2:
         90:56:52:2b:25:3f:94:87:fa:c1:f7:3a:ab:63:fd:b8:27:f2:
         4a:2a:05:12:2a:ed:b0:ad:31:96:0b:f9:67:91:32:ed:bc:52:
         b5:53:91:f7:c6:38:65:b6:9f:33:c7:04:01:09:48:c2:d3:80:
         3a:7c:b2:c5:62:09:99:02:d7:05:03:11:82:c4:f4:fa:5e:7d:
         e3:c0:5b:82:82:86:bc:ce:5d:a3:0b:67:6d:dc:0e:1e:88:6f:
         06:2b:55:a2:40:31:50:77:54:bf:7d:10:a0:14:f1:10:8b:ce:
         6a:d9:55:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 17:35:53 2026 by rpki-client