Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c9d2601e-6e61-39d3-a760-0a7e3a871eb2.roa
File:                     c9d2601e-6e61-39d3-a760-0a7e3a871eb2.roa (raw, json)
Hash identifier:          BtQtxW8h3otFiPu8/gVt7fjB7weDq3miZxAjrvSVetI=
Subject key identifier:   C1:57:66:98:D6:49:14:25:95:C8:1F:D3:A5:4F:EB:E4:7A:C3:CE:E7
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584B715C9EAB1CA1D9BB9FDDFA80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c9d2601e-6e61-39d3-a760-0a7e3a871eb2.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     3360
IP address blocks:        2607:f028:22::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:9e:ab:1c:a1:d9:bb:9f:dd:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=cbdfe4f6-3fa4-4dc4-9768-bc675a7639df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:ac:39:25:33:4b:c2:1f:ed:66:6f:53:8f:
                    cd:b6:46:56:a1:d0:06:f7:d5:1b:09:f1:e1:9f:09:
                    2c:e9:22:4e:b2:c4:e7:cc:de:37:a5:c2:af:e5:a8:
                    5a:91:76:29:d3:6c:51:ec:49:3d:fd:c8:aa:66:50:
                    6d:70:26:c7:2d:38:58:ae:a8:a9:e9:55:a2:7a:fd:
                    05:91:95:b2:f4:68:a1:7f:ee:65:da:06:dd:3b:5b:
                    f8:72:49:10:94:2e:5f:ce:dd:4c:0e:ba:91:ed:06:
                    52:f0:76:c8:84:ce:9a:85:c9:64:8c:97:bd:f9:ea:
                    da:58:72:7f:20:b3:90:d4:af:eb:bd:af:17:5b:9e:
                    82:dd:03:07:1c:90:77:f5:d6:7c:e3:1b:37:93:4a:
                    5a:41:bf:9a:ee:3b:83:33:12:37:78:82:a9:99:f7:
                    56:79:a8:23:1f:78:32:8d:65:ca:7d:65:c5:1e:69:
                    0b:85:49:4c:6a:dd:32:47:19:99:97:fa:4d:6a:8c:
                    97:fb:31:a6:c1:ab:c3:2f:e5:f0:07:69:6e:7e:18:
                    05:fd:da:19:3e:51:ba:ef:bb:2f:5c:bd:e8:08:83:
                    34:56:7e:e8:2f:a2:0d:4b:7c:51:ee:fc:43:46:da:
                    23:67:ec:3a:f3:d7:fb:19:83:44:56:64:d2:03:70:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:57:66:98:D6:49:14:25:95:C8:1F:D3:A5:4F:EB:E4:7A:C3:CE:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c9d2601e-6e61-39d3-a760-0a7e3a871eb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:22::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:24:d4:2b:5e:1f:dc:14:92:f9:03:22:5d:2d:7c:02:78:b6:
         33:d9:21:ee:52:dc:41:be:ca:96:7d:27:1b:3c:d8:0a:33:2f:
         8d:b2:b7:ed:7a:09:6c:28:de:df:29:43:63:76:ac:92:b9:b6:
         57:ab:a0:b5:39:c0:9f:38:ea:b3:c3:f1:fb:58:65:d0:23:00:
         44:3c:f6:d7:fe:c7:05:05:08:0e:8f:23:9e:5a:3a:52:90:39:
         bf:0d:ac:71:79:ed:d8:1c:99:45:38:41:2e:62:59:82:10:68:
         93:54:6b:5b:81:c7:98:f9:08:da:0f:bb:74:9b:39:0e:51:e2:
         15:c5:40:bb:5c:1b:58:1a:16:f0:f3:f5:87:b7:e7:6d:4c:80:
         78:96:85:d6:a2:77:2a:3c:f3:ac:0f:d2:7e:06:ed:19:35:3a:
         69:a0:13:ac:ec:3a:69:c8:8d:76:6c:67:5b:ae:7e:ed:c1:af:
         8d:61:d6:7a:b5:95:4e:f4:d2:34:a0:e1:06:3b:8f:a3:26:8c:
         14:6f:7d:16:c7:da:29:d8:97:52:08:5d:b7:e1:65:83:8f:f0:
         7e:d8:b2:83:19:e5:8b:50:85:1f:db:3d:59:78:f5:37:54:86:
         79:48:bc:80:b0:37:3b:8c:79:30:fe:b9:2c:e5:74:b2:53:87:
         44:65:31:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:09 2025 by rpki-client