Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/46eef5ee-47f8-34cf-9ac9-218a48d8b6e8.roa
File:                     46eef5ee-47f8-34cf-9ac9-218a48d8b6e8.roa (raw, json)
Hash identifier:          PoPi2qc/AVa+tdc3IKBM6p+LuUHtq9lLATa9DQ8kzsM=
Subject key identifier:   D5:7F:48:55:30:90:5C:16:EB:4F:DD:6F:DB:9A:46:9E:6D:59:13:24
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A112B233C63F41A135D498
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/46eef5ee-47f8-34cf-9ac9-218a48d8b6e8.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     203
IP address blocks:        2607:f028:92::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:12:b2:33:c6:3f:41:a1:35:d4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=968791b6-5410-4f9d-9266-1160db6b99d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:72:81:66:3e:55:73:93:10:43:9b:b6:3e:da:
                    a3:bc:d6:25:62:f0:89:00:44:45:36:e8:ff:a3:ba:
                    5d:e0:ec:8d:c2:5e:e0:11:06:42:46:7a:8c:70:9c:
                    66:e9:6e:d4:ba:7f:c1:f1:89:3d:37:c3:e8:90:57:
                    d4:1f:1c:49:51:9d:98:48:3b:ae:20:b1:e7:4a:bc:
                    8f:47:35:5d:43:43:e3:66:0f:33:d2:ec:f2:47:75:
                    8e:1c:41:65:50:a9:3c:ee:b3:71:39:5f:10:c4:de:
                    fe:f3:eb:ba:48:2d:82:32:7c:ac:10:7f:ac:44:5d:
                    8f:3d:d4:84:60:c3:24:64:01:5d:2f:e5:69:74:e1:
                    8d:28:8a:c1:2c:d0:d9:48:c9:ae:ba:30:63:58:26:
                    c4:b6:29:58:63:fc:f7:eb:1c:27:ec:9f:66:41:fc:
                    4a:e0:cd:f6:dd:ec:4f:e0:e0:04:65:ff:fe:05:98:
                    6f:e1:b7:5b:f4:98:53:a7:a2:4a:c6:6d:47:24:3e:
                    3f:84:2a:ae:14:c2:20:68:34:8c:f3:24:5d:4a:64:
                    c0:d4:06:35:62:8d:e9:ab:04:cd:7d:54:5f:14:f9:
                    79:76:6a:84:b2:5e:07:33:34:ea:18:09:6c:aa:52:
                    0e:5b:67:7b:a7:4e:cb:f5:24:08:7d:33:a4:4a:4b:
                    ef:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7F:48:55:30:90:5C:16:EB:4F:DD:6F:DB:9A:46:9E:6D:59:13:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/46eef5ee-47f8-34cf-9ac9-218a48d8b6e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:92::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:dd:e7:52:09:3a:6a:74:7c:e2:0f:2e:48:c3:de:41:68:7b:
         f8:4c:97:54:44:18:07:eb:e5:19:9a:2f:6c:d5:cc:87:ce:15:
         7e:9c:a2:0e:1d:2d:1a:5d:a7:d2:0b:80:0e:44:18:bd:01:23:
         7d:8c:df:9e:51:ce:21:96:ec:7b:4b:1f:0b:56:88:25:5e:b8:
         c4:f5:be:72:3b:a7:9e:5f:66:68:62:8e:7a:76:7c:e1:3a:a7:
         18:70:17:bb:e6:d4:d8:1a:7f:90:0b:da:08:f5:81:47:5e:a7:
         f1:54:fa:4d:22:c1:99:ec:d8:d8:c0:69:52:e7:8b:10:64:e7:
         aa:ce:69:66:b0:94:1a:5d:77:84:3f:f7:79:e7:a2:26:e7:45:
         71:1c:9a:cd:8a:a9:62:79:39:8e:20:3b:44:aa:a3:e8:5f:c8:
         8f:9f:1d:75:32:ee:5c:1b:ff:a4:9b:07:0c:8a:fa:60:e0:a0:
         a3:94:9d:24:39:69:f9:6c:91:85:2e:53:dc:81:59:4f:b3:6e:
         00:d8:5a:4b:66:e2:2a:71:df:77:78:0e:a4:89:64:e7:90:cf:
         28:ea:2f:9c:71:0b:c9:89:85:3e:da:e7:fb:81:78:14:9f:9f:
         f0:a6:7a:fb:9f:d7:cf:07:d7:45:7d:0f:63:ac:11:c8:91:13:
         2e:84:20:da
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToRKyM8Y/QaE11JgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk
OTY4NzkxYjYtNTQxMC00ZjlkLTkyNjYtMTE2MGRiNmI5OWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXKBZj5Vc5MQQ5u2PtqjvNYlYvCJAERFNuj/
o7pd4OyNwl7gEQZCRnqMcJxm6W7Uun/B8Yk9N8PokFfUHxxJUZ2YSDuuILHnSryP
RzVdQ0PjZg8z0uzyR3WOHEFlUKk87rNxOV8QxN7+8+u6SC2CMnysEH+sRF2PPdSE
YMMkZAFdL+VpdOGNKIrBLNDZSMmuujBjWCbEtilYY/z36xwn7J9mQfxK4M323exP
4OAEZf/+BZhv4bdb9JhTp6JKxm1HJD4/hCquFMIgaDSM8yRdSmTA1AY1Yo3pqwTN
fVRfFPl5dmqEsl4HMzTqGAlsqlIOW2d7p07L9SQIfTOkSkvvuwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNV/SFUwkFwW60/db9uaRp5tWRMkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDZlZWY1ZWUtNDdmOC0z
NGNmLTlhYzktMjE4YTQ4ZDhiNmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKACS
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFPd51IJOmp0fOIPLkjD3kFoe/hMl1REGAfr5RmaL2zVzIfOFX6c
og4dLRpdp9ILgA5EGL0BI32M355RziGW7HtLHwtWiCVeuMT1vnI7p55fZmhijnp2
fOE6pxhwF7vm1Ngaf5AL2gj1gUdep/FU+k0iwZns2NjAaVLnixBk56rOaWawlBpd
d4Q/93nnoibnRXEcms2KqWJ5OY4gO0Sqo+hfyI+fHXUy7lwb/6SbBwyK+mDgoKOU
nSQ5aflskYUuU9yBWU+zbgDYWktm4ipx33d4DqSJZOeQzyjqL5xxC8mJhT7a5/uB
eBSfn/Cmevuf188H10V9D2OsEciREy6EINo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:03:34 2025 by rpki-client