Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/27184fec-de10-3652-9ecd-993a77f31267.roa
File:                     27184fec-de10-3652-9ecd-993a77f31267.roa (raw, json)
Hash identifier:          fRJzze/1Xy2LoXdP6xx8PtYd5VA/RNKDqE2EJMhL96Q=
Subject key identifier:   9D:BB:06:AF:A6:45:B8:0C:9F:38:4C:52:1B:63:74:FA:00:49:06:58
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A109536AD3D733BDEA54C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/27184fec-de10-3652-9ecd-993a77f31267.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     3356
IP address blocks:        2607:f028:42::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:09:53:6a:d3:d7:33:bd:ea:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=0e4249f8-901a-47b0-8b25-694397cf712e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f0:de:b2:01:7a:2a:f4:a6:5e:b7:24:b2:9d:
                    f7:0b:38:11:bd:a0:d6:f2:95:9c:ad:91:d1:79:7b:
                    b1:14:6d:ed:7b:c7:0d:bc:84:5c:cf:16:5b:f8:ac:
                    04:53:f1:58:c5:96:00:be:b3:81:bc:94:ff:79:6f:
                    4a:4e:72:33:5e:13:43:d4:82:10:4b:09:4d:d8:00:
                    05:90:44:19:27:61:2c:06:65:6a:9e:fd:dc:ab:75:
                    a9:55:e9:08:31:f0:73:11:46:22:3e:08:22:52:12:
                    de:b4:65:77:5b:43:f2:57:05:b9:ac:7e:44:76:2a:
                    dd:6e:91:9d:67:50:ff:48:6c:51:b4:fd:8e:00:5c:
                    5d:43:64:23:f1:f5:c0:c2:12:8e:aa:84:86:e9:da:
                    de:d5:d0:7d:22:ff:24:95:c8:df:3b:dd:86:42:b5:
                    b7:3e:63:81:1e:38:07:33:e7:6a:80:30:53:94:cc:
                    e0:fb:6f:ca:f9:66:50:65:61:6a:3e:1d:cf:76:3d:
                    40:ef:85:b7:fe:ed:77:84:ed:e6:75:84:66:e6:85:
                    45:53:78:14:27:39:d3:97:d0:be:e6:f1:b3:27:89:
                    44:00:34:16:79:16:05:f3:5e:6c:e7:6b:92:20:81:
                    11:bd:81:29:3f:a1:c8:00:40:2f:44:b4:24:22:28:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BB:06:AF:A6:45:B8:0C:9F:38:4C:52:1B:63:74:FA:00:49:06:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/27184fec-de10-3652-9ecd-993a77f31267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:42::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:b3:aa:01:f6:26:22:9d:f5:7a:64:9b:1a:18:70:4a:d6:ff:
         04:19:d8:77:5f:4c:e1:cb:16:ed:d9:97:5e:a6:06:dc:f9:a5:
         e3:44:18:ff:1d:14:8f:a6:4b:f6:9d:24:9a:f1:70:68:0e:93:
         cd:38:5c:78:2c:f5:e2:79:4a:17:dc:73:0b:3a:48:98:ca:0b:
         fd:7d:1e:b8:66:65:46:56:6b:00:61:cb:fb:25:7e:ca:b2:c6:
         08:b5:40:86:1e:f0:c8:10:f3:e5:54:c2:b0:f1:b8:42:56:0f:
         ba:09:1e:45:06:5f:e4:1d:f8:68:c4:ab:85:7d:37:b7:e3:5b:
         ba:88:fd:a4:fd:54:5d:29:3e:7a:29:89:20:cc:2e:ff:92:99:
         e6:7d:93:fb:2f:af:fe:eb:27:0b:84:2c:bf:00:32:18:09:b8:
         ab:b4:05:2f:22:6b:c7:9d:ba:ce:d2:25:7e:e4:32:01:6a:bc:
         c4:e1:b1:69:b6:76:1a:15:19:1c:4b:6b:2e:67:07:5e:2a:e7:
         72:a3:1b:08:f1:29:7f:04:b6:04:90:b7:ec:0c:d2:da:87:db:
         e5:b1:23:f5:f0:a6:a8:26:07:22:cf:10:c5:a0:9a:13:94:e8:
         a2:d5:7a:f7:63:2e:3f:3a:21:f5:e3:fc:6d:e9:43:fe:ed:4a:
         8b:85:1c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:55 2025 by rpki-client