Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/99e02d27-062b-33ce-b3e1-14abadc05be0.roa
File:                     99e02d27-062b-33ce-b3e1-14abadc05be0.roa (raw, json)
Hash identifier:          cp4w6yNP8gO1zVR93ci7lfxGOvL3QsWvjDMr2ZR+NR4=
Subject key identifier:   BC:F4:9B:29:46:A2:97:17:63:CD:D5:DA:AF:5F:22:83:DC:DD:EA:34
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F2E541ACF36909280919F580
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/99e02d27-062b-33ce-b3e1-14abadc05be0.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     202
IP address blocks:        2607:f028:62::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:41:ac:f3:69:09:28:09:19:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=858ef3dd-f86e-4195-92b5-719b5a5dc328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a2:03:09:9b:fe:10:2f:36:b2:8e:58:26:84:
                    34:8b:ca:f9:cc:f0:1b:ae:c5:11:3b:d7:e5:6b:67:
                    a5:ae:3e:d6:7b:58:ca:90:90:bf:7d:85:2e:7a:2e:
                    3b:52:f5:ba:28:84:19:54:e5:50:f3:8d:42:1a:e5:
                    44:a3:d9:d2:19:55:8c:b3:44:2a:89:40:4f:aa:76:
                    15:7e:b8:77:3b:79:a1:c5:2d:4b:19:29:ac:f6:f5:
                    14:5c:a2:45:e6:a0:b5:e4:3d:81:9c:48:0a:5e:60:
                    88:02:5c:6c:b5:3f:a3:d0:58:68:9c:b4:bb:fb:c5:
                    0d:9a:68:73:7d:80:56:74:3c:d6:5f:40:86:b6:9b:
                    80:4a:24:87:14:7c:fb:7e:09:9e:f6:8f:07:1f:a0:
                    ec:8f:e4:da:a6:11:42:97:5b:ab:4e:3f:ea:1d:f3:
                    e0:74:91:74:6a:bf:98:8a:58:e9:76:84:96:17:1e:
                    77:76:55:ed:e6:52:86:91:22:26:93:6b:ff:6c:9f:
                    6a:99:01:f4:4c:fc:a6:b0:a3:b7:57:89:fb:e2:b4:
                    97:82:27:fc:3d:ae:34:bd:f8:1a:09:28:9a:9d:97:
                    7f:eb:aa:f8:18:08:d2:d0:58:63:f2:f3:69:11:2f:
                    c2:b8:b3:6e:8a:c4:02:c7:f8:90:44:00:aa:1b:5f:
                    d5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F4:9B:29:46:A2:97:17:63:CD:D5:DA:AF:5F:22:83:DC:DD:EA:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/99e02d27-062b-33ce-b3e1-14abadc05be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:62::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:2d:da:47:3b:30:69:ce:95:50:93:13:1f:47:9f:99:35:66:
         05:b9:fc:0a:be:44:9f:a3:92:89:c0:a6:ef:a9:34:7e:6a:3e:
         ba:4b:95:02:a9:5b:b0:62:6e:d7:60:ac:a9:4a:8f:6a:8b:27:
         4d:8b:0e:3c:18:72:7a:b7:23:16:e4:4c:79:45:68:6f:bb:7b:
         af:f7:6e:31:61:17:e4:31:2e:bf:1c:b6:f2:b9:cb:02:fe:a8:
         be:d4:c3:19:4d:20:88:2a:1b:f0:f7:41:24:1c:04:29:f4:4b:
         59:bf:09:a3:53:e8:50:1a:fb:58:b9:90:ee:fb:27:b1:4e:e9:
         f4:c8:3e:8d:44:49:c8:50:6b:d3:ab:3b:9a:e9:43:f1:a7:7e:
         74:c3:a8:f0:a1:0f:ae:2b:61:9d:59:18:2d:23:fc:88:d0:b2:
         30:76:85:2a:57:73:03:47:38:28:4d:3d:eb:03:c7:d3:9e:09:
         e7:38:31:8b:59:09:96:3a:97:31:7e:7c:a9:3f:f7:1e:96:ef:
         57:dc:2a:65:a7:3f:16:84:62:a2:8a:c5:99:ca:39:f3:c3:c4:
         92:c0:86:db:5e:c3:52:ce:f0:44:49:8d:ca:8f:1d:6c:70:4e:
         ca:e7:0c:a4:4b:6d:04:e5:b0:c5:aa:24:be:b7:1f:69:e9:48:
         16:aa:c6:dc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEny5UGs82kJKAkZ9YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk
ODU4ZWYzZGQtZjg2ZS00MTk1LTkyYjUtNzE5YjVhNWRjMzI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqIDCZv+EC82so5YJoQ0i8r5zPAbrsURO9fl
a2elrj7We1jKkJC/fYUuei47UvW6KIQZVOVQ841CGuVEo9nSGVWMs0QqiUBPqnYV
frh3O3mhxS1LGSms9vUUXKJF5qC15D2BnEgKXmCIAlxstT+j0FhonLS7+8UNmmhz
fYBWdDzWX0CGtpuASiSHFHz7fgme9o8HH6Dsj+TaphFCl1urTj/qHfPgdJF0ar+Y
iljpdoSWFx53dlXt5lKGkSImk2v/bJ9qmQH0TPymsKO3V4n74rSXgif8Pa40vfga
CSianZd/66r4GAjS0Fhj8vNpES/CuLNuisQCx/iQRACqG1/V6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLz0mylGopcXY83V2q9fIoPc3eo0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTllMDJkMjctMDYyYi0z
M2NlLWIzZTEtMTRhYmFkYzA1YmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHwt2kc7MGnOlVCTEx9Hn5k1ZgW5/Aq+RJ+jkonApu+pNH5qPrpL
lQKpW7BibtdgrKlKj2qLJ02LDjwYcnq3IxbkTHlFaG+7e6/3bjFhF+QxLr8ctvK5
ywL+qL7UwxlNIIgqG/D3QSQcBCn0S1m/CaNT6FAa+1i5kO77J7FO6fTIPo1ESchQ
a9OrO5rpQ/GnfnTDqPChD64rYZ1ZGC0j/IjQsjB2hSpXcwNHOChNPesDx9OeCec4
MYtZCZY6lzF+fKk/9x6W71fcKmWnPxaEYqKKxZnKOfPDxJLAhttew1LO8ERJjcqP
HWxwTsrnDKRLbQTlsMWqJL63H2npSBaqxtw=
-----END CERTIFICATE-----
Generated at Mon Jun 30 23:56:03 2025 by rpki-client