Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/76cb6128-728e-3286-bb22-599daa5a0c4f.roa
File:                     76cb6128-728e-3286-bb22-599daa5a0c4f.roa (raw, json)
Hash identifier:          JmAKoD8CAtqrE+q8iRZ6xEijSEkyMRXJWHY5+UNnSnw=
Subject key identifier:   60:71:49:2B:AE:0D:64:29:4E:50:33:FB:B8:CA:23:16:B1:67:5B:43
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A10CC81D471E71F41A3C10
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/76cb6128-728e-3286-bb22-599daa5a0c4f.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     202
IP address blocks:        2607:f028:81::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:0c:c8:1d:47:1e:71:f4:1a:3c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=69b2d568-6757-4d2a-bcdd-2b69589d3250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2a:db:ab:b9:c3:db:4f:13:25:ce:ec:2f:bc:
                    dd:8e:6a:d7:eb:f6:dc:7b:ea:b7:44:14:a1:f4:f7:
                    91:1c:ac:07:41:ea:e9:68:cb:01:e9:f9:6d:a5:60:
                    e0:06:b9:7e:42:98:70:fd:13:08:b2:c8:f1:ef:0f:
                    d2:c8:6a:54:24:21:bf:66:07:2f:43:f1:8d:0b:79:
                    b9:52:f1:2e:8d:83:5d:7a:e5:3b:ad:a6:7a:7e:3e:
                    e9:ed:8e:7d:20:22:b1:88:23:80:5e:28:72:c8:23:
                    b6:4c:33:72:f0:12:78:b9:a0:ed:20:d6:af:dc:d2:
                    01:89:b5:e3:29:08:9a:a8:b3:2f:bb:5b:83:4a:94:
                    30:66:6a:c2:ca:16:48:82:52:7d:ca:14:af:3f:89:
                    a0:11:28:86:4c:de:f0:f0:e0:6a:d6:ae:bd:a0:ea:
                    a0:45:5f:c4:8a:dd:5a:8f:ef:fc:f9:1d:00:cc:76:
                    f5:51:db:1c:f3:93:ba:31:a1:74:a4:0d:28:b5:55:
                    e3:b9:99:d7:5e:6e:f2:4e:62:83:37:a3:df:d1:8d:
                    c4:d8:cd:2c:3a:e7:46:55:97:0d:0d:3b:44:db:de:
                    e6:4a:24:c0:0c:fe:fd:fb:1b:c0:61:73:ed:ee:44:
                    3a:20:d7:2b:20:39:2d:76:8d:6a:bc:88:d4:33:2e:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:71:49:2B:AE:0D:64:29:4E:50:33:FB:B8:CA:23:16:B1:67:5B:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/76cb6128-728e-3286-bb22-599daa5a0c4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:81::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a4:36:65:ce:4c:11:1d:13:65:2a:9e:cf:a7:2e:95:2f:89:
         90:81:5d:24:54:b6:37:d6:53:71:ab:ae:d3:81:90:a8:88:20:
         b7:34:46:10:39:30:1a:f3:77:35:f3:25:92:e7:1c:48:73:99:
         60:9a:b0:66:ef:33:93:de:87:31:1c:88:2e:b8:d3:f6:b1:e4:
         31:89:5b:68:f4:2e:f5:64:f4:fd:dc:29:57:67:53:1c:5d:dd:
         32:1a:f2:3a:57:f1:e0:79:f0:6b:29:f6:8d:3a:6b:98:ea:21:
         8e:a7:e4:bf:01:db:63:5f:9c:5b:1e:78:03:06:0a:f2:b3:2d:
         c4:84:2a:6f:63:2a:fa:5f:af:1b:2e:ff:24:9e:e4:ec:a5:ae:
         03:70:ac:f3:fe:c1:81:5f:0d:30:49:07:7b:c5:9c:33:12:84:
         53:5e:70:09:79:b5:a5:4d:1b:40:15:36:ff:fc:3b:bf:31:95:
         ee:d1:6c:52:01:11:04:1f:72:74:c0:e8:f1:83:9c:66:4d:64:
         78:16:5d:f7:42:1f:ad:4e:0b:5e:80:18:8e:98:0f:7c:fc:2f:
         a3:29:99:13:91:61:0d:a2:f5:75:98:5c:90:84:46:22:8b:33:
         9b:51:17:ed:65:b2:14:1d:58:8e:fb:8f:ac:ed:74:e2:3b:d4:
         88:0f:38:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:15:23 2025 by rpki-client