Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e62f4f5-999d-3505-82f6-f71d1aaf8728.roa
File:                     6e62f4f5-999d-3505-82f6-f71d1aaf8728.roa (raw, json)
Hash identifier:          LEQXl5sckGZTdwSuU9K9XTdnjP3VN90AAhNhnS3d53I=
Subject key identifier:   DD:60:23:2C:90:6E:C4:54:F7:E6:24:A9:BE:CA:1B:4C:2F:8D:42:8C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584ADECBBA2E8422B9B1F877D580
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e62f4f5-999d-3505-82f6-f71d1aaf8728.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     202
IP address blocks:        2607:f028:111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:ba:2e:84:22:b9:b1:f8:77:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=b5cbbe50-0ce2-4b19-8031-e1990396bf39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:47:5f:04:1c:ab:fe:f8:67:30:7d:2d:55:
                    44:97:44:32:4c:e1:b2:9f:d2:81:d5:9e:64:fd:ff:
                    d5:33:e8:2c:1d:64:03:34:33:a8:1a:74:8d:eb:e4:
                    c3:cc:73:1e:52:a8:9b:59:c7:37:e4:a9:7c:d5:66:
                    15:7a:51:4a:9a:64:40:7c:78:da:65:fc:3c:33:aa:
                    79:90:91:b0:94:6f:69:ab:31:b3:bc:b3:11:cb:e7:
                    cd:29:d5:4a:ed:99:42:6b:25:a2:ab:a4:ab:ae:05:
                    c7:16:f1:12:1e:9d:38:d3:c5:dd:52:e6:26:af:13:
                    1f:1f:38:41:e3:5a:73:5f:81:38:12:2f:4d:60:8a:
                    0f:4d:c6:a0:41:12:6b:5a:71:8f:c5:30:ea:d0:35:
                    f6:f0:12:17:ad:4e:bb:a1:94:90:d1:a7:e2:2e:53:
                    62:98:d8:d7:93:da:ff:b4:d1:b3:0e:bc:75:3a:7d:
                    b3:35:e0:0f:1b:5f:22:73:a5:e7:63:51:fc:49:f6:
                    89:f5:da:91:c2:7b:64:b2:55:c8:3e:53:80:51:c6:
                    32:14:b0:a8:75:a5:9f:a0:83:9b:84:fd:d3:52:51:
                    cc:0d:14:f0:ca:52:ee:8b:3d:37:4a:b5:ad:0e:22:
                    dc:c9:b2:8f:d2:30:e2:ad:08:0c:f5:36:90:36:62:
                    60:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:60:23:2C:90:6E:C4:54:F7:E6:24:A9:BE:CA:1B:4C:2F:8D:42:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6e62f4f5-999d-3505-82f6-f71d1aaf8728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:a8:6c:b1:82:8f:79:23:3c:0a:7f:0f:2f:af:45:05:e0:73:
         19:05:28:34:7e:28:d4:e8:2a:a6:41:a7:12:df:41:ab:f2:f8:
         94:b4:62:45:b6:5c:0f:85:51:f4:29:eb:96:f7:0e:50:f6:cc:
         a9:48:94:80:5d:94:57:ae:8c:d9:9d:75:48:3f:21:36:b6:a1:
         56:6b:34:e9:c5:e9:91:35:41:38:e0:fa:45:d0:0b:58:f0:fa:
         16:b6:80:2c:b3:93:24:0f:9c:e9:1e:ff:0d:b2:04:07:b2:7a:
         9a:d0:be:3c:ae:01:e4:27:7d:4c:da:2c:14:7c:1a:9d:8e:cf:
         00:82:72:db:58:d8:c7:42:6c:0a:67:d9:48:ff:81:e3:4b:56:
         c5:e0:31:dd:55:eb:5c:45:df:90:3a:cb:53:ab:bb:72:21:cf:
         54:ac:49:18:f4:16:61:78:b7:fa:bb:ff:76:b9:17:07:0c:4f:
         33:1b:30:37:97:1e:51:35:06:df:d7:10:3d:e2:89:7d:9d:21:
         76:a1:23:6f:0a:41:dd:a7:ac:92:c5:50:03:4b:f6:c2:54:bd:
         12:d4:84:14:ce:b5:ea:fc:2e:de:a2:37:4d:51:2e:a1:cc:c3:
         f8:d8:7a:28:a7:ce:74:40:0e:65:da:87:69:df:41:8e:4c:68:
         7d:56:c3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:19:36 2025 by rpki-client