Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6a7c1367-d6a0-36ee-9197-f10067fc6e44.roa
File:                     6a7c1367-d6a0-36ee-9197-f10067fc6e44.roa (raw, json)
Hash identifier:          m07OajORH92jVhawjKIz3GhfnauETq3KzuT/jzUEW0o=
Subject key identifier:   A2:7F:C3:C2:61:BB:9C:48:72:87:87:87:61:2E:E8:82:F4:D0:51:81
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584A90A0AFD50B3E20033CD74E80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6a7c1367-d6a0-36ee-9197-f10067fc6e44.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     3360
IP address blocks:        2607:f028:31::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:af:d5:0b:3e:20:03:3c:d7:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=891a1862-8059-467d-b669-e05967dd8d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3f:f0:c4:a1:b7:f9:22:85:a1:88:31:41:a0:
                    f6:94:c3:f6:66:17:f3:88:76:9a:27:90:82:ff:c1:
                    e8:5b:a9:75:86:86:14:86:69:d8:8d:fa:ac:8b:d1:
                    4b:a4:1b:42:83:45:67:54:91:51:1a:ae:28:d2:f9:
                    8b:ad:16:22:74:37:85:07:a5:c6:8b:14:5c:aa:af:
                    2f:83:54:77:36:18:f6:72:ee:ba:81:75:4d:52:3f:
                    a5:95:bb:f2:8d:eb:e9:e7:f2:07:ed:17:7e:b8:b5:
                    78:20:3e:79:54:f2:66:96:5b:39:85:28:71:96:4d:
                    37:c2:35:e3:67:d2:36:cd:a1:8d:28:d2:f9:8a:00:
                    12:1c:9c:ed:63:3a:4e:da:79:d2:19:76:23:bd:80:
                    7e:bd:6b:fa:02:0a:f2:ab:14:63:5a:98:f5:35:11:
                    08:46:84:3d:06:8f:b3:04:5a:19:4d:e1:d3:1d:4c:
                    4a:ce:86:39:9c:7a:3f:bc:0f:4c:4f:55:26:e9:4e:
                    49:a0:02:e4:ac:8f:19:a3:61:c7:41:3e:5b:cd:52:
                    38:9c:e7:31:af:47:29:e1:19:88:77:6b:5b:7b:2c:
                    5c:90:20:82:99:53:c7:87:fc:e5:79:3e:f8:37:f9:
                    15:f2:db:c7:36:c8:7e:0f:fd:3c:12:c1:d4:5a:cf:
                    1b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7F:C3:C2:61:BB:9C:48:72:87:87:87:61:2E:E8:82:F4:D0:51:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6a7c1367-d6a0-36ee-9197-f10067fc6e44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:31::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:a9:f4:51:8f:23:cc:30:f6:77:16:ff:2b:95:85:3f:fa:c2:
         af:7f:a2:2e:4b:51:80:ac:90:83:67:9a:41:a5:39:87:ca:9c:
         6b:5b:22:d4:e2:87:f1:f2:7b:ea:15:a6:53:23:14:17:fe:a4:
         d2:7b:5a:df:1f:e9:14:76:eb:ea:4b:ed:f8:ef:3d:43:82:16:
         45:6a:93:4b:d6:58:d1:1a:9d:3d:fb:09:62:63:5c:fe:bf:f6:
         ff:60:04:af:6c:e8:c7:f8:e1:e9:ee:62:96:22:98:06:47:a8:
         7f:90:ef:fe:a4:c2:15:86:b3:19:b5:8d:5c:a4:39:44:61:91:
         fb:a7:a0:ad:46:ed:82:97:17:98:f6:75:56:67:13:91:f1:81:
         2f:c5:7c:58:b9:d0:e8:6b:6e:fb:8f:09:36:95:e2:cd:4e:f0:
         38:34:2d:89:b0:1a:f1:80:4b:d6:08:fe:2c:10:b4:36:77:7f:
         62:7c:26:f9:17:d9:fd:de:0c:bc:71:cc:a5:59:7b:83:81:ba:
         86:07:06:9d:9f:3e:13:0d:fa:4e:cd:0c:84:0d:76:eb:b0:4a:
         2b:b7:93:8b:6c:7d:ec:be:2d:59:b7:0b:0a:b2:6e:dc:08:37:
         25:67:16:09:70:45:43:7c:43:c6:53:a3:72:4e:c1:4a:74:1c:
         95:8f:15:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:42:28 2025 by rpki-client