Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6087f229-ac36-33fb-8a5e-17ed0d3eada4.roa
File:                     6087f229-ac36-33fb-8a5e-17ed0d3eada4.roa (raw, json)
Hash identifier:          rlrWH5EcgQqPiEkQosEsBLK+HAlIT7MuvkGG8k7iezo=
Subject key identifier:   C9:03:C1:9E:6E:13:B7:39:6A:3E:F4:62:D3:59:15:E8:04:49:79:0D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F2E54177467BC37D506F7920
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6087f229-ac36-33fb-8a5e-17ed0d3eada4.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     3356
IP address blocks:        2607:f028:61::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:41:77:46:7b:c3:7d:50:6f:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=76384639-ce39-442e-8e9e-d22084e34596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:90:6d:c5:c9:98:e1:c4:00:e6:c7:37:6e:65:
                    6b:27:da:d4:ed:c4:8f:f9:fa:02:b2:9d:47:a8:6e:
                    99:95:a6:60:82:a2:f7:45:6c:32:49:dc:a4:3a:49:
                    78:c4:42:c0:3e:c4:2e:a5:75:1a:e0:93:09:9c:9d:
                    b2:38:99:88:60:91:c8:ba:c5:d7:b5:86:85:03:ad:
                    a4:36:19:40:4b:d8:b2:03:53:fd:80:3e:a3:fe:99:
                    24:40:f2:b8:0e:81:85:8d:57:16:6f:9a:16:b3:c4:
                    48:3a:f4:79:af:58:18:fb:7e:3c:b7:7b:2f:40:db:
                    10:87:4f:11:48:84:4e:1c:42:60:9e:c1:23:3d:ca:
                    6a:3a:a9:c4:f0:26:68:90:62:90:e1:2e:66:d1:97:
                    76:d5:9e:20:d8:01:4f:f1:f5:7d:75:7d:dd:97:74:
                    9f:7b:71:0b:f3:ab:ba:84:02:33:28:da:b0:d2:0f:
                    57:cf:e4:5c:10:0d:b2:8d:dc:c6:f4:dd:c7:25:9a:
                    7c:0b:07:e2:36:63:48:88:e7:1f:4c:32:62:71:94:
                    4c:67:6a:ce:93:a7:f0:2d:63:74:be:72:0e:04:02:
                    97:62:60:5a:bc:f4:51:e9:0e:cc:47:25:00:ae:f0:
                    0c:16:2e:dc:c5:25:f0:ec:75:a9:79:fc:df:4d:cc:
                    7a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:03:C1:9E:6E:13:B7:39:6A:3E:F4:62:D3:59:15:E8:04:49:79:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6087f229-ac36-33fb-8a5e-17ed0d3eada4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:61::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:93:32:ed:b0:b7:2d:41:cc:d1:f1:5d:e5:58:c4:ed:25:e0:
         30:c6:8a:9d:f7:2f:fc:3f:9f:0a:55:2d:b3:8e:00:11:ff:e8:
         12:6f:7f:ac:04:22:db:a9:a6:99:3b:8b:7b:4c:99:a5:9b:17:
         a3:ce:61:20:5c:a6:71:45:4a:0b:b8:60:20:c7:31:a4:02:1f:
         b7:de:0e:08:bb:9e:b8:5a:9d:7d:6c:5c:b5:41:b6:04:4f:50:
         f1:b6:af:b6:00:cd:33:91:5b:27:45:9e:af:a9:d1:9b:cf:b6:
         5e:94:b7:ca:bf:b4:e3:d9:5c:c4:de:49:be:97:bc:b0:36:f6:
         55:bb:e2:dd:e5:d7:ce:70:f3:9f:20:39:ef:5b:4d:bc:4c:e5:
         d0:51:ba:f6:da:eb:b4:18:1c:ea:c3:48:73:d3:5c:e9:7a:f5:
         2c:fd:f9:b0:d1:74:45:d8:89:af:00:2f:63:24:c1:8b:1d:43:
         e9:ae:1c:6f:85:c9:cb:c0:5a:2e:93:a3:15:4d:cf:1f:26:2f:
         16:72:c3:50:31:6e:09:6a:e4:77:43:e3:0d:b8:38:1a:51:6e:
         9f:07:7e:f9:80:a6:71:38:56:2d:3e:60:5f:8c:3a:13:41:5c:
         e2:18:8f:77:1d:a5:55:81:41:54:5e:b8:5d:c2:04:86:dd:bd:
         32:88:d3:91
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEny5UF3RnvDfVBveSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk
NzYzODQ2MzktY2UzOS00NDJlLThlOWUtZDIyMDg0ZTM0NTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJBtxcmY4cQA5sc3bmVrJ9rU7cSP+foCsp1H
qG6ZlaZggqL3RWwySdykOkl4xELAPsQupXUa4JMJnJ2yOJmIYJHIusXXtYaFA62k
NhlAS9iyA1P9gD6j/pkkQPK4DoGFjVcWb5oWs8RIOvR5r1gY+348t3svQNsQh08R
SIROHEJgnsEjPcpqOqnE8CZokGKQ4S5m0Zd21Z4g2AFP8fV9dX3dl3Sfe3EL86u6
hAIzKNqw0g9Xz+RcEA2yjdzG9N3HJZp8CwfiNmNIiOcfTDJicZRMZ2rOk6fwLWN0
vnIOBAKXYmBavPRR6Q7MRyUArvAMFi7cxSXw7HWpefzfTcx62wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMkDwZ5uE7c5aj70YtNZFegESXkNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjA4N2YyMjktYWMzNi0z
M2ZiLThhNWUtMTdlZDBkM2VhZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHCTMu2wty1BzNHxXeVYxO0l4DDGip33L/w/nwpVLbOOABH/6BJv
f6wEItupppk7i3tMmaWbF6POYSBcpnFFSgu4YCDHMaQCH7feDgi7nrhanX1sXLVB
tgRPUPG2r7YAzTORWydFnq+p0ZvPtl6Ut8q/tOPZXMTeSb6XvLA29lW74t3l185w
858gOe9bTbxM5dBRuvba67QYHOrDSHPTXOl69Sz9+bDRdEXYia8AL2MkwYsdQ+mu
HG+FycvAWi6ToxVNzx8mLxZyw1Axbglq5HdD4w24OBpRbp8HfvmApnE4Vi0+YF+M
OhNBXOIYj3cdpVWBQVReuF3CBIbdvTKI05E=
-----END CERTIFICATE-----
Generated at Mon Jun 30 21:42:06 2025 by rpki-client