Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/efd6d8b9-b339-3c39-bddd-173792a42feb.roa
File:                     efd6d8b9-b339-3c39-bddd-173792a42feb.roa (raw, json)
Hash identifier:          /gnHHp/evUeJTygh5uZumw5Jmvbm2BsLpgh2IotpGyo=
Subject key identifier:   51:D7:0D:84:79:43:76:2C:72:8B:BA:FA:5D:8D:BA:75:2C:9F:CF:24
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A11365AADB2B87F1A5FA80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/efd6d8b9-b339-3c39-bddd-173792a42feb.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     3360
IP address blocks:        2607:f028:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:13:65:aa:db:2b:87:f1:a5:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=6c7bf5d4-c3b0-439f-bf41-58dc792fdecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:cf:54:fd:cb:d3:6b:fa:f0:ad:ae:b0:16:
                    59:63:10:1d:b6:64:f5:e8:f7:f7:2e:67:1d:e5:5e:
                    81:48:21:f2:fe:89:0d:ee:a3:91:f1:27:ce:d8:f5:
                    a8:2e:a5:93:1a:04:bb:0c:51:b0:50:17:fd:20:a5:
                    6f:8a:cf:83:f6:f8:7a:31:4f:59:ed:ee:3d:47:da:
                    65:78:3d:67:51:ee:a7:ca:f3:93:f9:77:71:50:bf:
                    11:80:4d:58:b9:57:a6:a6:28:19:e4:c2:e6:c7:43:
                    83:63:da:e1:88:2a:bd:77:8b:95:53:69:2c:7e:cb:
                    74:b7:22:53:04:8a:17:71:05:c0:cb:33:c6:d6:c8:
                    fe:0c:20:25:f4:a5:b9:f0:b2:10:96:11:4c:95:de:
                    ca:a2:bd:f4:78:82:e8:c4:95:1b:88:05:94:dd:23:
                    84:85:2c:8f:3b:ba:ac:db:38:3d:26:4a:1e:5b:67:
                    66:80:3a:03:59:79:19:92:7c:46:0e:81:d9:d4:3c:
                    34:31:5c:da:81:8c:f5:51:75:1b:32:3a:a4:d4:33:
                    29:55:45:a2:91:9b:12:07:af:67:e1:c2:2a:ea:2f:
                    82:fd:47:f9:b6:83:17:26:32:68:5e:14:ea:3a:08:
                    c8:1e:f5:2d:cc:88:cd:99:a8:e2:16:1d:48:87:28:
                    73:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D7:0D:84:79:43:76:2C:72:8B:BA:FA:5D:8D:BA:75:2C:9F:CF:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/efd6d8b9-b339-3c39-bddd-173792a42feb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ae:09:0e:ab:d5:b3:7f:d3:ff:1b:31:13:47:69:f6:9e:77:
         73:b5:c9:de:b0:8f:da:99:58:6a:1e:eb:5f:de:0a:c7:2c:62:
         df:e8:e2:0c:ad:77:fc:0a:24:7e:cb:8d:66:24:3d:f6:c1:27:
         b7:92:cd:d8:5b:6f:41:d9:ed:d2:58:3e:d6:70:52:67:51:97:
         12:bf:7d:e0:96:75:a3:82:00:23:57:7c:47:bf:55:c6:99:b1:
         81:e0:1e:7c:ec:92:52:7a:c6:90:aa:a7:07:24:04:81:ab:43:
         ae:1f:4a:a1:5c:a6:7b:07:93:92:d9:9d:a7:6d:67:27:83:98:
         a1:e8:f1:7a:c3:ef:e5:f5:7f:74:4f:ba:3b:f3:a2:fa:3d:8e:
         25:f8:64:cb:a1:a5:94:ec:36:91:b2:08:6b:eb:56:11:a9:3d:
         f1:79:16:35:5b:cf:5f:38:cd:03:a2:f4:42:0e:6f:2b:16:53:
         50:5b:aa:d5:94:6d:cf:ad:15:82:19:1b:d0:6c:01:9e:8f:d5:
         69:f1:0b:c9:44:39:17:48:07:12:01:47:e1:b7:d5:fd:ae:02:
         c8:30:20:39:50:73:f6:f7:a1:87:29:48:62:c4:59:62:42:80:
         bd:4a:62:0c:bd:1b:25:70:14:a5:e1:24:ed:27:6d:61:38:5b:
         51:4d:b6:71
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToRNlqtsrh/Gl+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk
NmM3YmY1ZDQtYzNiMC00MzlmLWJmNDEtNThkYzc5MmZkZWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjfPVP3L02v68K2usBZZYxAdtmT16Pf3Lmcd
5V6BSCHy/okN7qOR8SfO2PWoLqWTGgS7DFGwUBf9IKVvis+D9vh6MU9Z7e49R9pl
eD1nUe6nyvOT+XdxUL8RgE1YuVempigZ5MLmx0ODY9rhiCq9d4uVU2ksfst0tyJT
BIoXcQXAyzPG1sj+DCAl9KW58LIQlhFMld7Kor30eILoxJUbiAWU3SOEhSyPO7qs
2zg9JkoeW2dmgDoDWXkZknxGDoHZ1Dw0MVzagYz1UXUbMjqk1DMpVUWikZsSB69n
4cIq6i+C/Uf5toMXJjJoXhTqOgjIHvUtzIjNmajiFh1IhyhzdQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFHXDYR5Q3Yscou6+l2NunUsn88kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZWZkNmQ4YjktYjMzOS0z
YzM5LWJkZGQtMTczNzkyYTQyZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJeuCQ6r1bN/0/8bMRNHafaed3O1yd6wj9qZWGoe61/eCscsYt/o
4gytd/wKJH7LjWYkPfbBJ7eSzdhbb0HZ7dJYPtZwUmdRlxK/feCWdaOCACNXfEe/
VcaZsYHgHnzsklJ6xpCqpwckBIGrQ64fSqFcpnsHk5LZnadtZyeDmKHo8XrD7+X1
f3RPujvzovo9jiX4ZMuhpZTsNpGyCGvrVhGpPfF5FjVbz184zQOi9EIObysWU1Bb
qtWUbc+tFYIZG9BsAZ6P1WnxC8lEORdIBxIBR+G31f2uAsgwIDlQc/b3oYcpSGLE
WWJCgL1KYgy9GyVwFKXhJO0nbWE4W1FNtnE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:01:00 2025 by rpki-client