Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ade5e37e-104a-38c9-bcee-dd38963a60ce.roa
File:                     ade5e37e-104a-38c9-bcee-dd38963a60ce.roa (raw, json)
Hash identifier:          iFq6Ra6C2GGl2I9PigVcxwLRBinLst3TqTGa+3sNrRc=
Subject key identifier:   BC:8E:0D:E6:F7:59:5C:36:6E:4E:67:51:43:09:6D:6F:70:4F:B7:E5
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F2E5401776BB1B414D936940
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ade5e37e-104a-38c9-bcee-dd38963a60ce.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     3356
IP address blocks:        2607:f028:41::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:40:17:76:bb:1b:41:4d:93:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=5149a6ce-5359-4899-a5de-2a6c57d676d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:07:da:03:52:f9:34:e7:fb:aa:c7:79:3b:ab:
                    8e:3e:f0:e9:45:f7:a7:bc:b8:f9:bb:29:72:68:6c:
                    41:61:66:81:8b:16:d9:eb:33:b6:97:b0:6f:2d:66:
                    e0:b6:21:04:b9:16:e7:69:29:89:f8:a5:c2:9a:e3:
                    47:10:b9:8d:74:54:37:c8:3f:f0:c0:30:0e:1a:22:
                    1a:3f:a3:e1:78:65:9b:81:d7:ad:4d:9b:ee:29:34:
                    64:4d:93:e2:a5:18:c2:78:4d:fd:b2:11:ca:f4:e0:
                    9b:d7:d9:3c:43:81:34:48:ce:b9:52:28:d5:25:d7:
                    4c:5c:4a:06:ae:36:9c:19:31:c9:57:8a:60:c7:a3:
                    68:02:af:c8:60:d6:73:44:06:eb:e6:3c:21:e3:57:
                    ce:1c:df:d2:36:14:f1:a5:b0:80:8b:44:99:0e:10:
                    a9:d7:99:d3:b0:29:a0:b4:e2:8a:9b:85:af:cf:1d:
                    cf:83:bd:ba:08:93:ea:5d:c2:68:4d:83:c0:79:e0:
                    b3:46:55:cf:e8:f1:65:20:33:10:44:9f:90:79:c9:
                    31:d7:ff:99:8c:16:12:98:24:13:b0:26:10:f2:92:
                    14:65:27:31:f2:38:9e:2c:88:9a:93:9e:6b:6e:81:
                    64:7c:06:1a:ee:fd:fc:95:39:8b:78:ba:01:b8:d0:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8E:0D:E6:F7:59:5C:36:6E:4E:67:51:43:09:6D:6F:70:4F:B7:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ade5e37e-104a-38c9-bcee-dd38963a60ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:18:b3:4d:89:4e:74:e6:1a:4d:4b:ec:82:2b:ca:ca:b5:da:
         94:d9:d5:33:6f:8b:b9:ce:6a:b5:46:73:f3:c6:82:d3:65:b4:
         91:80:7f:a7:69:44:47:ca:e7:27:b6:c2:22:93:98:4f:c5:46:
         67:04:32:42:59:d9:e0:d8:e7:8a:e1:50:44:39:a3:e4:c6:5d:
         02:0f:76:43:0a:c4:b5:be:6d:3f:87:3f:d3:9f:2c:d6:d2:fd:
         e4:82:4c:17:52:59:f5:53:95:7a:5f:bd:60:ef:83:c5:83:5a:
         c3:bd:8c:c4:61:66:57:f0:eb:3d:b1:9b:c5:98:b0:26:47:90:
         f4:fe:fe:df:3b:c4:64:d6:7e:de:aa:e1:2d:d4:1c:d4:8e:d8:
         76:b1:c7:ab:c4:10:81:20:81:d0:16:f0:09:36:c1:79:76:a1:
         5b:41:d7:87:f4:3a:cc:e6:5e:64:e5:05:b1:52:ac:7d:46:c9:
         3d:0a:44:f3:a1:65:f6:60:60:c7:07:dd:ec:ba:bc:dd:b9:6f:
         97:95:0f:17:a1:97:32:d8:0a:a5:08:19:5f:64:29:7d:df:e0:
         cd:1b:01:d6:c6:25:bc:e1:20:aa:eb:e5:ab:d0:19:90:df:af:
         44:2e:08:de:9b:ff:26:9d:ca:71:36:6b:1f:a9:9d:d4:4a:76:
         11:06:1a:ad
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEny5UAXdrsbQU2TaUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk
NTE0OWE2Y2UtNTM1OS00ODk5LWE1ZGUtMmE2YzU3ZDY3NmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAfaA1L5NOf7qsd5O6uOPvDpRfenvLj5uyly
aGxBYWaBixbZ6zO2l7BvLWbgtiEEuRbnaSmJ+KXCmuNHELmNdFQ3yD/wwDAOGiIa
P6PheGWbgdetTZvuKTRkTZPipRjCeE39shHK9OCb19k8Q4E0SM65UijVJddMXEoG
rjacGTHJV4pgx6NoAq/IYNZzRAbr5jwh41fOHN/SNhTxpbCAi0SZDhCp15nTsCmg
tOKKm4Wvzx3Pg726CJPqXcJoTYPAeeCzRlXP6PFlIDMQRJ+Qeckx1/+ZjBYSmCQT
sCYQ8pIUZScx8jieLIiak55rboFkfAYa7v38lTmLeLoBuNDmNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLyODeb3WVw2bk5nUUMJbW9wT7flMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWRlNWUzN2UtMTA0YS0z
OGM5LWJjZWUtZGQzODk2M2E2MGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAkYs02JTnTmGk1L7IIrysq12pTZ1TNvi7nOarVGc/PGgtNltJGA
f6dpREfK5ye2wiKTmE/FRmcEMkJZ2eDY54rhUEQ5o+TGXQIPdkMKxLW+bT+HP9Of
LNbS/eSCTBdSWfVTlXpfvWDvg8WDWsO9jMRhZlfw6z2xm8WYsCZHkPT+/t87xGTW
ft6q4S3UHNSO2Haxx6vEEIEggdAW8Ak2wXl2oVtB14f0OszmXmTlBbFSrH1GyT0K
RPOhZfZgYMcH3ey6vN25b5eVDxehlzLYCqUIGV9kKX3f4M0bAdbGJbzhIKrr5avQ
GZDfr0QuCN6b/yadynE2ax+pndRKdhEGGq0=
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:55:15 2025 by rpki-client