Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/55ea755c-a931-3c8c-866f-637a4260a971.roa
File:                     55ea755c-a931-3c8c-866f-637a4260a971.roa (raw, json)
Hash identifier:          yRQ48qDDonRjy+JtyX63FsHNNy8Vpq3Lh5dNuij61mw=
Subject key identifier:   73:75:87:17:04:E7:33:44:14:35:03:C0:E0:53:17:EF:56:9D:81:00
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A108A68287A3DFA381A080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/55ea755c-a931-3c8c-866f-637a4260a971.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     3356
IP address blocks:        2607:f028:31::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:08:a6:82:87:a3:df:a3:81:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=7a087d78-aab1-48d3-90b9-bfde3251f38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:77:d2:b0:63:e3:e8:d1:3d:50:5b:db:78:8c:
                    0e:2b:0a:dc:ad:95:a8:6d:c5:6c:7f:fd:69:3c:b1:
                    e0:ce:a8:2d:a0:dd:34:ff:6f:fa:82:8a:6a:83:d3:
                    ce:26:0e:6b:b8:f9:b0:b2:21:82:77:10:47:bd:40:
                    f9:8c:39:00:07:ec:d9:a2:d5:4f:95:67:69:fc:c0:
                    52:6a:75:bf:fb:d0:b0:2f:ba:14:29:3b:8c:40:e4:
                    74:c8:ad:99:7d:31:d2:3a:8d:42:70:18:0d:d7:a9:
                    96:d6:05:f0:18:b2:cd:47:5f:15:8e:34:16:4d:12:
                    0c:e8:d1:b3:cb:90:f7:a1:2f:65:d1:a5:8d:ac:0b:
                    87:38:b4:86:25:f4:0c:92:9f:27:ce:b9:2c:66:e2:
                    65:3c:42:d8:3f:98:cb:c2:e7:0f:af:42:3f:33:31:
                    2d:94:9b:47:81:0f:c7:6e:6f:5a:74:d7:d0:e0:73:
                    f8:60:00:16:07:df:84:a8:88:f7:2c:71:46:7a:1a:
                    d8:39:47:0c:bf:ed:50:23:6e:f2:cf:21:26:c1:ef:
                    ad:54:39:db:60:ea:5a:f5:ce:ef:ec:a7:78:6a:7d:
                    41:b1:4e:09:e5:ee:4b:31:96:d6:a3:7c:43:ca:dd:
                    21:56:db:b1:9e:be:be:e6:f0:8b:72:1a:0a:c1:f5:
                    2b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:75:87:17:04:E7:33:44:14:35:03:C0:E0:53:17:EF:56:9D:81:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/55ea755c-a931-3c8c-866f-637a4260a971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:31::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a1:43:d6:26:cd:1f:6e:2e:2c:84:0a:eb:88:ab:d7:26:9a:
         a4:40:96:83:0e:d4:54:76:5b:46:15:64:c5:e4:98:f9:cf:08:
         af:9b:47:51:02:c4:6e:c6:8c:9f:82:26:76:f6:6b:4f:42:cd:
         13:04:fb:2e:f5:5d:5f:6f:f4:bc:7f:d3:f1:3f:c5:d0:80:c3:
         7a:f6:c5:1e:00:3e:72:00:ae:16:25:a0:a3:a1:62:6c:e2:c6:
         c3:cb:74:82:d7:a4:b1:60:42:fc:57:1c:69:38:33:c1:6d:44:
         76:1c:26:7a:e9:b8:ec:f8:dd:2c:b8:9d:31:7d:19:c9:44:f6:
         45:1b:f0:60:e7:ea:1c:23:6f:fe:f2:dd:89:9e:92:de:58:43:
         5a:9e:fc:cc:9d:1a:b0:e5:19:80:fe:d5:1e:89:a7:7c:ab:de:
         9c:4e:4d:b1:8d:0d:41:36:0b:ce:f1:86:ea:d7:2f:96:4d:a6:
         c9:8c:a2:c1:74:69:e2:56:b0:79:99:6c:86:01:a0:89:82:25:
         aa:d7:47:b2:89:2e:db:d9:c5:ac:57:79:fb:64:9e:b2:8f:6b:
         18:e0:98:3c:8c:04:29:ef:95:26:92:18:bd:a2:6c:2f:4e:73:
         ed:67:55:f0:1f:13:3d:2d:6c:bd:0f:dc:5f:6f:49:04:02:25:
         08:61:be:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:01:14 2025 by rpki-client