Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8e66b801-7d0f-33cf-b0d9-048078de50a9.roa
File:                     8e66b801-7d0f-33cf-b0d9-048078de50a9.roa (raw, json)
Hash identifier:          kFeuhtMJjPdEsUwnNmyjVgIe0pSfsIBNlH7ecwGR3ts=
Subject key identifier:   BA:4F:43:43:4A:1D:BE:C7:51:D5:23:6E:8B:12:C1:1E:41:B9:32:91
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A10B52A164E03203322C00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8e66b801-7d0f-33cf-b0d9-048078de50a9.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     3356
IP address blocks:        2607:f028:71::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:0b:52:a1:64:e0:32:03:32:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=f8fef7e9-6907-484d-9cac-454eeede4ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:51:78:83:32:0a:b8:8b:d6:6d:50:b7:94:
                    77:a2:ae:df:d8:3e:95:af:39:52:d2:84:d6:ba:4a:
                    d1:86:dd:ef:1a:82:1c:5c:00:3f:3f:f7:36:2f:ec:
                    75:5c:ba:b4:fb:70:d3:49:83:ba:fe:7b:e9:e4:b4:
                    cc:18:a8:75:be:bb:03:05:aa:5c:99:a6:2a:f3:ee:
                    ac:53:21:77:13:ed:cf:97:50:ac:54:57:96:68:83:
                    ed:fc:25:c8:94:67:b2:f9:62:bc:8a:97:37:d8:f5:
                    17:3c:a7:7e:64:c4:ce:f3:2e:bc:7c:65:69:cf:77:
                    ca:e6:5d:75:14:7f:fb:b5:b5:36:c7:90:ff:eb:93:
                    c9:87:b8:9d:36:e3:10:97:29:4d:ad:10:33:6e:76:
                    52:27:cc:44:ff:01:c8:e4:9c:3b:74:40:b7:ea:3d:
                    93:fd:f8:86:ea:7a:c2:c4:5a:cb:29:00:5c:4f:90:
                    b3:87:26:69:f2:b8:ca:e7:6d:ee:27:c1:09:74:72:
                    8d:2b:33:a8:ac:36:f2:7e:f0:1c:ce:47:82:b1:2a:
                    3a:fc:13:c4:48:06:5c:4a:ba:b5:c8:5c:1c:9b:83:
                    56:4f:4c:b3:f1:52:51:15:b2:41:16:87:25:20:e6:
                    d5:a2:d9:99:98:a6:69:60:8f:33:e4:5d:0c:89:88:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4F:43:43:4A:1D:BE:C7:51:D5:23:6E:8B:12:C1:1E:41:B9:32:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8e66b801-7d0f-33cf-b0d9-048078de50a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:71::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:dc:74:6b:10:52:dd:4a:59:9a:32:36:4d:42:4e:47:b5:fc:
         94:ce:23:39:b6:fa:a0:7f:39:3e:89:5b:d1:b5:e6:6c:cb:7b:
         8b:9d:3d:5f:d4:a2:a4:51:79:e5:4b:8a:5d:40:6f:a3:94:08:
         3d:1d:58:03:14:fe:45:2c:28:e6:d3:bf:55:24:19:cb:bf:02:
         94:d2:04:1f:e4:f5:15:cf:32:ca:89:5e:98:e7:bd:47:44:bc:
         3a:1f:30:b9:c0:e1:21:72:02:19:4c:bc:25:c7:c8:8f:c9:2a:
         f2:23:58:a6:66:2e:d9:32:9d:db:7b:94:8d:ff:7e:ac:42:e1:
         2e:73:ae:0d:de:51:19:41:55:dd:c2:04:47:38:67:a7:94:83:
         a4:22:54:65:bf:b2:7d:b0:dd:51:16:a6:0a:5e:1c:93:ba:50:
         19:3a:55:49:1a:bd:d3:24:d3:94:3a:dd:73:f3:84:1a:aa:15:
         df:f8:5d:ac:52:3f:24:57:02:5f:d5:a8:29:53:2b:9f:6b:6d:
         20:fd:a0:e1:fc:1b:c3:ad:90:29:51:6f:07:ce:c4:a9:ba:0f:
         bc:09:cf:3a:3f:df:24:3c:6e:ac:ef:7b:1b:dc:7f:87:50:a0:
         1e:12:58:25:be:66:81:88:8e:3f:1b:f3:45:bf:6d:f7:71:72:
         56:d1:85:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:00:33 2025 by rpki-client