Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61999f0d-5130-356e-a216-b4c008444000.roa
File:                     61999f0d-5130-356e-a216-b4c008444000.roa (raw, json)
Hash identifier:          3UjB04MzY+86U3J88kahW7y9Rnc2ijOsZHmiKuRLBxY=
Subject key identifier:   9F:DE:04:42:31:6A:0B:1C:AE:69:B0:C3:95:F2:5D:41:AD:B1:B1:16
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A10C8D9D196D03FC8B5700
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61999f0d-5130-356e-a216-b4c008444000.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     202
IP address blocks:        2607:f028:132::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:0c:8d:9d:19:6d:03:fc:8b:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=a1ec05f0-7a8e-4520-bc46-55357b9d5c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:a6:da:f6:7b:12:98:3a:9d:21:f7:b3:ba:
                    d3:ed:a7:9d:b5:ab:d2:09:4f:21:eb:5e:65:b9:3e:
                    0d:bf:1b:e9:9d:2b:51:0d:9a:77:45:a3:ac:9d:29:
                    f8:c4:09:b6:c3:02:55:0a:c8:c6:ff:f9:57:55:6c:
                    c0:c0:4d:ab:9e:31:ec:52:65:7d:4c:6c:f3:19:99:
                    e0:77:67:17:4c:96:0e:93:92:b3:b2:04:28:e8:bb:
                    a9:14:85:ae:d2:6e:a3:06:f3:3a:18:60:64:18:6b:
                    83:19:aa:e1:f7:3a:d8:35:ee:df:44:9b:40:ef:ab:
                    e1:f5:d0:d3:72:d9:2a:b8:30:6a:44:fc:f2:8a:07:
                    c5:81:d7:a9:49:97:de:fb:59:99:09:99:2e:80:af:
                    38:36:3a:39:0b:fd:86:7f:24:c7:69:d8:dd:ec:e9:
                    25:a5:ac:ea:b8:ea:98:23:68:14:a4:af:c1:3b:54:
                    8c:91:78:6f:16:2f:9f:9c:ab:5e:cd:63:17:f4:1b:
                    25:d9:0d:7a:6d:fa:39:2c:1e:62:d6:b8:8f:3f:f6:
                    ac:4b:01:da:c8:54:87:8d:9c:87:f0:a3:21:86:c6:
                    ef:38:2f:01:4c:5d:b1:80:cb:99:b4:60:20:54:cc:
                    0e:ae:97:9f:7f:f7:79:40:85:ce:e4:c9:ed:49:1d:
                    0c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DE:04:42:31:6A:0B:1C:AE:69:B0:C3:95:F2:5D:41:AD:B1:B1:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61999f0d-5130-356e-a216-b4c008444000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:132::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ce:17:80:65:7a:b2:d2:6a:64:e0:a5:68:16:f7:63:94:d1:
         04:54:d6:94:75:55:36:9f:dc:bc:e6:c8:9e:0a:b4:7f:df:a6:
         7d:4f:51:9b:b0:17:63:ae:1c:d9:c5:75:15:aa:8d:2e:ac:c8:
         b9:24:4e:26:9e:7f:85:43:d5:c9:31:36:34:e0:e5:76:b3:54:
         d5:35:b6:0b:d8:48:c6:72:90:b3:d7:42:bc:5b:33:e9:90:26:
         52:68:13:92:68:a9:3d:82:96:5b:3e:a9:8a:a3:ca:06:80:39:
         d3:10:ec:d2:01:10:07:69:bb:5e:6b:fb:86:57:2a:8e:4b:01:
         14:23:c7:1f:97:87:da:d1:e1:13:02:50:1b:71:f1:26:8c:ce:
         8c:80:c2:78:65:52:5a:17:08:da:70:11:dc:c0:51:ec:fd:1c:
         79:34:30:73:b5:97:28:60:b6:a4:48:34:ad:96:c6:51:45:24:
         29:dc:99:19:50:88:7f:e5:cf:0c:1b:01:1b:f6:e0:dd:bd:7f:
         5b:2e:df:79:54:d8:e9:f1:05:f1:48:af:50:d8:60:37:5d:c7:
         a8:2c:40:ee:ce:41:3a:d7:f2:12:15:47:9f:e9:1c:d0:68:05:
         4b:c7:1e:bc:08:75:e0:b3:3e:5c:58:2e:37:fb:90:af:44:f2:
         b0:b1:91:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:09:49 2025 by rpki-client