Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/90fa55fd-1f3e-3c86-9146-119a3556f09e.roa
File:                     90fa55fd-1f3e-3c86-9146-119a3556f09e.roa (raw, json)
Hash identifier:          4TRWiUS0nvur0lWSFFv9aMaqHo/N1kukQ81w9dAoJ5w=
Subject key identifier:   B6:9B:B6:11:8D:F1:35:D7:31:35:F7:8A:C9:18:E7:F1:94:1F:B5:D0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A10D8AB9CC0D7D4E8483F8
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/90fa55fd-1f3e-3c86-9146-119a3556f09e.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     3356
IP address blocks:        2607:f028:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:0d:8a:b9:cc:0d:7d:4e:84:83:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=1ce3174c-064b-4542-8f02-6325ca1826b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:87:b1:c9:4e:44:05:5a:ab:07:ab:68:1a:4d:
                    a2:3f:c4:fc:6f:9f:bb:c1:ae:98:77:f6:e7:b4:bf:
                    fa:77:2a:aa:75:ca:bc:85:66:2b:56:3f:07:99:c4:
                    82:03:44:2b:e4:ff:38:80:f3:0a:a7:10:8a:d4:84:
                    3a:bd:43:02:23:6c:f6:02:47:7b:bc:34:60:b1:1f:
                    39:dd:46:98:da:ec:c7:bc:97:d3:bc:cd:ac:93:66:
                    46:09:f4:b4:d8:95:89:fb:3b:f3:4f:29:59:96:59:
                    dc:ed:1f:6b:72:5b:80:10:17:80:4d:3f:df:64:af:
                    a9:ac:a1:11:93:98:59:a2:7a:6f:67:65:d1:ab:0c:
                    4c:a5:2a:a0:cc:6a:83:11:75:6c:64:5e:c1:bc:5e:
                    9a:fd:c1:21:36:88:bf:fa:56:b4:dd:ff:02:2a:70:
                    09:88:3b:c7:1f:52:32:f8:e4:60:29:f2:83:f7:67:
                    8e:a8:fd:ed:7b:e5:16:54:6c:53:3c:4d:63:e6:f2:
                    44:37:2f:54:36:69:dc:46:73:38:94:3a:1f:88:48:
                    37:4e:40:ff:80:9d:99:53:2e:28:3a:d3:e2:cc:8d:
                    33:a5:d0:13:b3:08:50:9c:b2:73:b5:2b:a3:7d:be:
                    39:e1:0d:e2:c8:74:ab:1a:fe:8d:ba:5c:99:45:e9:
                    d9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9B:B6:11:8D:F1:35:D7:31:35:F7:8A:C9:18:E7:F1:94:1F:B5:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/90fa55fd-1f3e-3c86-9146-119a3556f09e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d4:7f:b7:0b:ea:86:f3:8a:b8:41:59:65:8d:3a:65:cf:47:
         c6:d3:c6:6b:a9:ce:3c:e8:01:db:29:6f:07:15:1b:aa:86:3b:
         89:73:a0:f7:e7:ed:a5:9e:00:b4:6c:1b:27:48:e7:e9:1a:80:
         8f:59:b3:dc:07:65:a1:58:e6:70:1d:c6:f1:78:67:86:c9:86:
         50:e6:cd:09:2b:43:32:b6:61:3f:a0:3f:73:04:49:82:40:fc:
         32:1f:bc:45:46:9a:9a:74:b4:bb:8f:ae:87:bf:d7:5e:38:fd:
         aa:7c:fb:f7:5b:79:37:83:e8:0f:1c:66:a4:0e:54:a9:2d:1a:
         06:2e:f2:9b:cd:1d:16:6b:b7:54:d3:53:d5:7a:13:74:cd:22:
         d5:d4:f3:2b:a1:a9:fb:76:4a:59:a2:59:94:e7:92:3e:89:18:
         15:c8:7b:5f:ba:35:af:79:b7:61:d3:ff:7b:8a:37:af:7e:87:
         f4:d0:47:39:ae:24:70:2c:74:04:c5:89:a3:66:a8:73:20:b3:
         ba:27:95:aa:0d:3c:37:84:a4:02:be:ac:9b:06:88:2d:54:80:
         18:02:7a:72:bf:a1:c6:37:ae:41:39:57:2f:7d:02:52:fa:84:
         5d:65:9a:50:b4:af:de:9b:ef:63:28:3d:a1:64:25:c4:3d:49:
         5f:ae:46:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:12:08 2025 by rpki-client