Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/178f08d9-1c65-3b9a-85f1-c45c2bce862f.roa
File:                     178f08d9-1c65-3b9a-85f1-c45c2bce862f.roa (raw, json)
Hash identifier:          YPMFb9UcdAoISFBTy6RzZesx/WWbIImjwxeqDltG010=
Subject key identifier:   0D:06:06:B4:50:53:A5:2E:7F:4F:97:59:F9:6F:32:77:1F:86:9F:5F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A10B2FF2681DBB79B69900
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/178f08d9-1c65-3b9a-85f1-c45c2bce862f.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     3360
IP address blocks:        2607:f028:62::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:0b:2f:f2:68:1d:bb:79:b6:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=5b32dc64-f114-4f7a-89db-5299780946b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:f3:fd:75:4e:61:c0:ae:b0:ca:16:c5:6a:
                    ad:5a:8d:3b:b2:ad:eb:c1:e0:2f:88:c6:98:3a:13:
                    a5:55:0b:11:ca:de:3a:54:e1:7c:3f:2c:5b:0c:ae:
                    5f:ef:9e:12:ca:a9:a5:bc:a1:c6:be:95:42:2b:fe:
                    c2:68:62:30:71:7b:56:83:f8:45:9a:74:58:f9:11:
                    f9:e5:26:54:9d:33:56:77:9d:f1:0b:00:3a:c0:84:
                    9a:9d:22:d2:4a:71:72:af:19:d0:eb:df:50:fe:66:
                    57:31:c1:23:50:d0:0f:93:9b:27:aa:67:ce:56:0d:
                    ff:91:18:13:42:4a:66:53:47:10:7a:55:81:21:3b:
                    9e:5f:0c:1d:23:0c:60:07:d5:cd:85:47:e9:77:6b:
                    fd:20:81:84:e0:66:93:5b:25:29:42:0e:4e:47:cd:
                    64:8f:43:c4:89:6a:a8:df:88:ab:b8:ca:fb:3c:38:
                    72:bb:fc:b2:cc:6c:36:dc:ef:f0:fd:a8:c2:f0:e2:
                    44:6a:86:22:71:14:fa:6f:44:d4:0a:07:0b:3f:70:
                    a2:1c:e2:e4:99:81:7a:18:0d:c5:f4:9e:5d:32:d6:
                    2c:bf:6c:c2:31:27:cd:57:75:b4:91:de:2f:28:50:
                    1e:37:f7:e0:e3:e6:34:ef:61:d5:97:9b:c0:3b:df:
                    66:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:06:06:B4:50:53:A5:2E:7F:4F:97:59:F9:6F:32:77:1F:86:9F:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/178f08d9-1c65-3b9a-85f1-c45c2bce862f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:62::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:8c:53:db:69:17:4b:27:7d:4b:17:17:dd:fe:8a:9c:a6:fa:
         7a:9e:00:ed:4d:0f:75:1f:5a:a3:29:08:d9:5e:a1:86:d8:2c:
         6f:2b:aa:2b:30:6e:bd:6c:56:2f:b9:d8:99:59:bf:df:7a:d6:
         2d:17:12:be:cf:56:4e:fb:0e:1b:83:4e:57:59:a0:00:a8:ea:
         e1:2c:48:0f:77:f3:13:39:4b:21:06:09:e6:1e:20:41:5a:18:
         a9:8c:c4:16:0c:2c:55:96:02:f0:89:69:85:55:bc:0c:db:27:
         f7:14:bf:10:78:d2:4a:97:69:32:7c:09:bc:07:75:dc:0d:24:
         c8:44:fe:e0:5c:a0:0c:28:d0:b7:2d:b8:5c:0b:21:30:72:40:
         72:93:6f:e1:e4:ef:ab:c8:d0:0b:3c:c9:71:d9:b9:7f:a7:69:
         80:34:a5:1f:74:aa:e6:87:b4:e2:f5:2e:66:89:1b:83:f8:12:
         db:b3:47:31:a8:7a:48:7a:7f:aa:15:8b:9a:f9:fd:22:4a:ec:
         44:3f:b9:31:76:9f:62:fc:e1:5e:93:cd:cb:a4:60:56:d4:89:
         12:c8:3b:f6:ba:d5:1c:fb:76:e3:5e:c1:d7:49:bb:b8:0b:43:
         13:9a:24:22:00:78:89:8b:a0:b6:72:85:d7:c3:07:15:2d:f1:
         3d:5b:b1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:05:29 2025 by rpki-client