Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c0bc989e-b019-3d48-9557-d551ec93af39.roa
File:                     c0bc989e-b019-3d48-9557-d551ec93af39.roa (raw, json)
Hash identifier:          niJ2vkOil5fbES4p89AS3taBUzfafLpaK1sFNJG8MSg=
Subject key identifier:   5C:04:B8:32:56:85:DB:FB:DD:F4:38:C4:D9:AB:BD:FF:61:EB:51:D4
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A10CDA0387AABBA8F76140
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c0bc989e-b019-3d48-9557-d551ec93af39.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     3360
IP address blocks:        2607:f028:81::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:0c:da:03:87:aa:bb:a8:f7:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=ed97030c-91f8-44f0-9121-edd217440613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:15:1e:6d:99:65:23:e8:0e:a6:fa:f6:26:2d:
                    b8:e0:63:d4:13:88:8a:0b:95:73:3b:2d:c4:ae:59:
                    c4:be:60:a2:6a:f9:bc:71:24:80:89:cd:1f:a8:18:
                    ea:12:7b:67:c7:62:9d:6b:9c:f4:67:6e:1c:fe:de:
                    5b:7f:64:c8:53:78:1b:99:40:ff:b3:16:66:a3:60:
                    03:12:12:75:ca:c1:3d:e8:8c:aa:e3:1e:30:2a:dd:
                    a9:51:e6:03:8e:11:bc:d4:d7:53:c4:81:6d:bf:47:
                    b8:d6:27:5b:cd:c5:90:18:43:28:85:75:ff:de:38:
                    60:63:51:68:9e:c9:53:e7:b9:59:6f:df:a9:57:ac:
                    55:8a:e5:1c:83:2e:2a:d5:20:5f:bb:d3:84:d4:d3:
                    e6:a1:56:c2:8f:3d:9e:9f:3a:e7:fa:67:1b:d9:cd:
                    df:90:a7:fd:34:86:1a:0f:b4:8d:83:53:c0:e7:e8:
                    83:09:f4:77:b5:af:d0:67:1d:61:1c:8e:a5:63:b1:
                    ac:b8:8c:db:a1:41:94:9e:c2:d5:a3:96:04:d4:5c:
                    d8:b8:47:d7:c6:65:a6:3b:8d:16:cb:af:f5:10:76:
                    22:fa:7a:71:b4:20:9f:54:b3:e7:f7:71:d7:2a:f5:
                    18:32:ca:72:7b:ac:79:c8:0b:c4:c6:aa:9a:e3:76:
                    ed:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:04:B8:32:56:85:DB:FB:DD:F4:38:C4:D9:AB:BD:FF:61:EB:51:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c0bc989e-b019-3d48-9557-d551ec93af39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:81::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:59:ed:78:f1:70:0a:e4:ef:57:78:cd:29:6d:77:0c:e7:ed:
         1c:69:a8:c8:b6:c5:8a:ca:9c:bc:b1:46:17:aa:96:65:fc:6b:
         a7:f7:98:b1:05:c1:5d:bb:b1:bc:a3:5d:97:c7:ba:f7:86:67:
         69:e4:8d:ee:ef:9b:2e:9a:7f:67:ce:15:e7:46:4a:cf:38:1a:
         4d:db:71:1c:fb:2b:ad:a5:ef:cd:dc:13:f7:bd:7b:3e:13:82:
         26:90:a4:0e:c8:0f:21:95:61:15:4d:81:11:50:55:87:f4:12:
         4c:7d:7c:c7:ef:03:0b:12:26:76:91:8d:ff:5e:16:c2:eb:c8:
         60:89:c6:74:36:8e:6e:fe:7d:7e:e7:2b:48:c7:45:c8:a8:e0:
         7d:c5:43:5b:35:11:b6:b1:fc:a5:0b:ab:d0:1c:22:00:3e:c1:
         b9:19:88:c1:8e:39:a3:8f:20:b8:fc:b4:bd:44:c5:38:95:1d:
         10:4b:9a:35:f3:2f:fc:12:d7:c2:ab:3a:e0:0a:c8:c6:1f:8a:
         30:f1:ba:41:ea:60:90:e1:07:2e:d3:79:46:be:d7:bc:b2:9d:
         92:5b:ad:2e:3b:81:63:23:d6:8e:26:5e:12:f5:72:02:40:31:
         e7:7c:d4:d3:32:0c:01:ed:95:d2:6e:b2:33:30:9f:91:4e:1e:
         b1:9e:0b:c4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToQzaA4equ6j3YUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk
ZWQ5NzAzMGMtOTFmOC00NGYwLTkxMjEtZWRkMjE3NDQwNjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBUebZllI+gOpvr2Ji244GPUE4iKC5VzOy3E
rlnEvmCiavm8cSSAic0fqBjqEntnx2Kda5z0Z24c/t5bf2TIU3gbmUD/sxZmo2AD
EhJ1ysE96Iyq4x4wKt2pUeYDjhG81NdTxIFtv0e41idbzcWQGEMohXX/3jhgY1Fo
nslT57lZb9+pV6xViuUcgy4q1SBfu9OE1NPmoVbCjz2enzrn+mcb2c3fkKf9NIYa
D7SNg1PA5+iDCfR3ta/QZx1hHI6lY7GsuIzboUGUnsLVo5YE1FzYuEfXxmWmO40W
y6/1EHYi+npxtCCfVLPn93HXKvUYMspye6x5yAvExqqa43btBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFwEuDJWhdv73fQ4xNmrvf9h61HUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzBiYzk4OWUtYjAxOS0z
ZDQ4LTk1NTctZDU1MWVjOTNhZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKACB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAARZ7XjxcArk71d4zSltdwzn7RxpqMi2xYrKnLyxRheqlmX8a6f3
mLEFwV27sbyjXZfHuveGZ2nkje7vmy6af2fOFedGSs84Gk3bcRz7K62l783cE/e9
ez4TgiaQpA7IDyGVYRVNgRFQVYf0Ekx9fMfvAwsSJnaRjf9eFsLryGCJxnQ2jm7+
fX7nK0jHRcio4H3FQ1s1Ebax/KULq9AcIgA+wbkZiMGOOaOPILj8tL1ExTiVHRBL
mjXzL/wS18KrOuAKyMYfijDxukHqYJDhBy7TeUa+17yynZJbrS47gWMj1o4mXhL1
cgJAMed81NMyDAHtldJusjMwn5FOHrGeC8Q=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:00 2025 by rpki-client