Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a97d2393-4b17-320e-a337-804c209f37d4.roa
File:                     a97d2393-4b17-320e-a337-804c209f37d4.roa (raw, json)
Hash identifier:          xW6IkmY7INIF4DsqvTDI0YvRHGroxs163Ju5QL/G1x0=
Subject key identifier:   C5:B1:1D:2C:A0:D1:9B:D5:FB:89:C4:80:94:73:59:9C:62:97:3B:CE
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A10750FECCE22E9ED20C00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a97d2393-4b17-320e-a337-804c209f37d4.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     203
IP address blocks:        2607:f028:21::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:07:50:fe:cc:e2:2e:9e:d2:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=6c60b422-3bb1-4e32-827d-1def57a3ae6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:05:90:02:18:ab:f7:42:38:28:c2:f6:c8:
                    97:ef:bf:7d:44:a5:ee:32:5e:e0:a3:f8:a2:13:ab:
                    a7:ea:8b:97:f6:d0:a9:cd:4e:f0:ad:c1:ad:21:6e:
                    35:09:e7:b9:a7:e0:5a:43:bd:0d:39:b4:35:de:c3:
                    85:4f:9f:28:a0:37:85:89:65:b0:0a:10:55:cf:b1:
                    dc:88:e3:d4:e0:de:6c:d1:10:18:74:cc:5c:19:a8:
                    a8:56:48:99:9d:0f:b0:8f:fb:1f:c9:67:4b:af:89:
                    08:a0:ff:b5:90:e9:c7:0b:e3:55:90:5a:58:d3:a1:
                    c6:f8:14:66:7c:64:2c:8c:c9:12:8c:57:1e:73:b7:
                    af:2c:97:10:71:ca:3b:a5:40:f7:69:1f:d4:c8:f8:
                    53:38:5b:5b:58:d9:d7:32:39:69:89:03:b7:6e:85:
                    ee:19:4e:86:bd:ca:1b:b2:77:82:09:3c:af:f7:dc:
                    05:5a:b6:4a:19:a2:67:69:6f:5c:b2:24:28:8d:97:
                    4c:10:f6:f8:2d:5e:09:4e:8e:94:99:d4:a0:ae:20:
                    e1:ae:95:60:f8:b6:52:d6:27:2a:d6:cf:d3:5c:fb:
                    a6:4f:77:82:d1:d8:ef:33:b2:41:7a:b6:48:ae:93:
                    55:aa:2a:57:47:41:b6:db:4d:0d:9c:1c:8e:57:21:
                    bf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B1:1D:2C:A0:D1:9B:D5:FB:89:C4:80:94:73:59:9C:62:97:3B:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a97d2393-4b17-320e-a337-804c209f37d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:12:89:21:e0:b2:e0:77:7a:2e:8b:ee:6c:48:77:82:8c:23:
         0d:ec:2c:9f:fc:c1:2e:22:c4:39:f6:ed:6b:f4:3f:07:f7:58:
         49:c7:de:9c:bf:4e:a1:e0:70:2b:df:74:2c:68:be:c7:e9:69:
         28:24:47:dc:bc:31:b0:02:98:28:0a:8e:7f:63:1d:df:cd:6f:
         e6:ed:3e:0a:22:3c:f7:ae:a4:3d:8c:f2:86:13:4c:06:3b:00:
         79:e6:29:7f:48:a9:98:b4:64:44:84:b6:9f:30:b1:c3:dd:68:
         ab:e5:ed:8f:06:d8:09:be:2e:b2:6c:f7:fc:77:ae:15:fb:aa:
         d3:36:68:39:91:7f:35:cf:be:77:de:41:58:2c:80:de:57:92:
         88:ef:89:38:93:ef:a4:62:9b:32:1e:f9:db:d8:14:66:71:dd:
         92:26:63:1d:f0:64:17:50:06:67:27:9c:4a:cd:b3:a5:ca:88:
         c3:4a:05:69:c1:b5:4a:3d:34:6f:0b:e3:78:08:59:79:78:7c:
         7a:4e:35:12:03:8a:2f:54:a2:79:56:d5:db:30:b8:62:06:70:
         a9:28:e9:10:94:27:64:94:82:71:93:8d:04:1c:bd:67:c3:27:
         ff:be:b6:0b:21:47:42:cd:d4:bf:82:c6:4b:30:ce:66:e0:0e:
         4b:5d:b8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:09:22 2025 by rpki-client