Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/02b8e5c9-6328-3c05-ae14-3386bc4bdc40.roa
File:                     02b8e5c9-6328-3c05-ae14-3386bc4bdc40.roa (raw, json)
Hash identifier:          Qrp5O5Sr64QQYgutz5/or/BN9Ttop7tGXqOnq3+rCTM=
Subject key identifier:   AF:E5:3B:95:E4:A7:48:72:74:38:E8:AB:15:57:01:FD:F2:5C:BC:C0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F2E540739F7D1205BDB52440
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/02b8e5c9-6328-3c05-ae14-3386bc4bdc40.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     3360
IP address blocks:        2607:f028:141::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:40:73:9f:7d:12:05:bd:b5:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=25fe46e3-4af4-4eee-a999-47d4f06e6fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:7d:96:e8:a6:71:01:e9:d7:c5:23:e9:72:
                    b3:f0:89:53:74:c9:3a:15:e9:19:a8:de:cc:60:e8:
                    73:e0:77:76:9b:c6:0d:67:2c:34:51:0c:b6:f1:5b:
                    ef:86:39:fc:43:e1:4c:d8:5e:8f:67:71:e0:cf:49:
                    91:37:aa:5a:bf:ed:68:78:3b:98:7c:93:cc:73:98:
                    05:78:a0:59:89:6e:25:01:9e:92:a9:4e:81:fe:69:
                    b3:e4:56:d7:df:21:a4:28:d2:91:04:76:b3:2d:e7:
                    1e:9e:12:38:5e:48:93:6e:ab:d5:c7:7d:f3:5f:88:
                    dc:cf:62:de:6a:23:c2:9e:4b:32:f6:8e:f3:af:76:
                    ac:fd:84:25:fe:c2:f4:d2:fe:cb:eb:8d:5b:24:58:
                    31:88:c9:cb:ca:5c:64:02:9a:e1:49:89:91:c7:ec:
                    a9:2a:e1:ba:bf:07:1d:43:1a:67:6d:52:1f:c0:ef:
                    84:fc:57:54:97:91:f1:ef:9f:8a:bc:64:be:94:41:
                    c5:24:f4:42:70:3e:0a:b9:fa:5d:02:52:6e:b4:12:
                    27:a3:22:1d:a1:09:33:da:ad:61:00:f7:57:dd:1f:
                    15:a8:77:7f:dc:9e:c4:39:03:a7:59:16:4c:0f:0e:
                    08:75:98:21:f3:5f:48:ec:33:2e:e2:c4:65:99:c0:
                    e2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E5:3B:95:E4:A7:48:72:74:38:E8:AB:15:57:01:FD:F2:5C:BC:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/02b8e5c9-6328-3c05-ae14-3386bc4bdc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:141::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:37:2c:ab:82:b6:30:33:ad:4f:13:ab:62:ca:56:fe:9e:b3:
         2d:6a:43:e7:01:6f:88:d2:e2:72:50:f7:2e:39:d5:7f:56:34:
         a0:39:d4:f2:0f:63:df:ef:1a:f8:7a:32:8b:33:70:6d:e8:89:
         5d:77:15:5b:70:6b:fd:12:ab:12:04:d7:b1:63:6c:b6:03:f9:
         42:c1:47:b3:98:8b:a6:12:e5:0a:65:c1:79:a7:fd:79:8a:8e:
         dc:7a:94:2e:37:d8:79:e3:4a:70:03:dd:a8:2f:41:59:ef:3f:
         91:45:f8:0c:c5:5f:64:24:c6:60:6f:da:40:1a:82:c9:d5:eb:
         42:c6:91:2d:3a:0c:4d:1a:a7:f0:6e:c2:5d:a7:c9:e5:73:b1:
         f5:2a:65:68:cc:27:43:e7:eb:c9:c3:c1:10:62:b6:2d:c3:ff:
         f7:c1:ee:a6:e4:de:c3:45:32:41:22:42:f5:93:cb:50:6d:38:
         47:3a:37:8f:16:cc:38:38:3b:c7:43:a1:d8:b3:51:2c:1f:85:
         33:59:8a:48:9d:d1:1d:44:28:d7:51:91:c9:b6:09:a9:c3:c2:
         98:5f:f6:66:78:f1:26:9e:8b:c2:36:ca:14:70:b3:fb:20:23:
         34:a5:aa:d0:53:b2:cf:7a:78:e9:42:25:68:1e:9d:e7:9e:c1:
         27:1a:18:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:16:29 2025 by rpki-client