Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e86b9470-848f-3cd7-b65b-3a4db01dd385.roa
File:                     e86b9470-848f-3cd7-b65b-3a4db01dd385.roa (raw, json)
Hash identifier:          zSqLE5QinIinJBLwzSoFScV+/LClwqBIYkzZEGY+rSU=
Subject key identifier:   25:F1:4C:85:E9:E3:48:78:42:8E:00:16:39:66:E3:92:A5:3D:8A:3D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC2D05F90407E39CAD5680
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e86b9470-848f-3cd7-b65b-3a4db01dd385.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     203
IP address blocks:        2607:f028:42::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:2d:05:f9:04:07:e3:9c:ad:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=ce797d56-61d2-44f7-8f13-2e79cc52ca9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:76:e7:2d:bf:8a:d8:5f:ee:a6:5b:4f:0d:ee:
                    57:23:e3:8e:3a:6f:5d:9b:a0:d5:1b:7f:42:fb:aa:
                    b6:2a:8c:bb:c6:21:71:d8:d4:11:48:15:38:7b:5c:
                    a1:40:75:77:4b:c1:c3:07:77:47:9d:12:f2:24:11:
                    7f:02:6c:56:4b:01:c0:c3:84:46:e9:c3:ef:3e:74:
                    63:65:c8:54:a4:9f:99:dd:7e:80:54:49:8b:5b:1b:
                    db:20:b7:1e:b2:bb:69:f1:47:b5:69:75:c6:8b:7e:
                    7f:f4:a9:c3:09:d5:d7:66:32:24:23:f3:6a:f2:92:
                    52:5a:99:2f:b7:67:fe:43:82:d8:31:e2:e5:b8:f6:
                    ce:74:56:f9:b4:b8:6d:f5:b4:43:13:f6:04:ce:04:
                    dc:b1:ac:21:fd:dc:a7:e7:f4:76:35:6b:35:fc:0f:
                    f5:46:42:9f:b6:7f:57:31:f1:4c:24:2b:36:cc:75:
                    db:f1:94:40:4f:76:9a:31:da:c5:b9:2a:fe:40:fd:
                    41:2f:43:2e:a0:39:13:8b:83:38:26:94:a4:84:bc:
                    04:33:a6:65:13:36:30:6f:07:21:73:c7:76:9b:21:
                    21:f5:36:24:db:ad:51:da:48:f1:a0:bb:be:6a:80:
                    56:13:e7:3d:d0:38:70:3a:64:6e:8e:20:5c:55:32:
                    f9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F1:4C:85:E9:E3:48:78:42:8E:00:16:39:66:E3:92:A5:3D:8A:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e86b9470-848f-3cd7-b65b-3a4db01dd385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:42::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c2:40:e4:fb:9f:3e:42:fe:07:ac:ee:c4:95:13:17:7f:ea:
         38:78:99:91:c9:1a:99:90:83:ec:12:1b:00:5d:25:36:55:5e:
         c7:33:11:e3:d2:f3:48:c3:16:aa:48:0f:8e:10:74:ff:ee:0c:
         ee:3e:bb:1c:2c:cd:77:21:af:4b:be:33:57:8b:17:02:e8:7b:
         fe:a4:c9:33:d8:de:99:03:19:bc:ee:a1:23:c9:77:af:7c:9e:
         3b:5b:7f:f6:41:67:b6:58:30:63:8f:11:ec:44:93:4c:41:d7:
         51:01:e0:e7:e4:08:c6:15:2d:fd:8c:c8:b2:3c:ed:8d:21:bd:
         fb:07:73:d2:73:40:8c:40:96:81:97:74:40:c8:b2:44:24:95:
         1d:d9:17:20:04:fb:25:d9:28:31:50:d8:9c:91:71:7f:44:4e:
         32:dd:37:bb:7e:b9:e8:01:c0:84:81:c1:f5:40:d5:ee:f5:1b:
         32:6a:a4:1d:f6:15:22:47:0a:e8:c8:d9:46:e1:80:84:39:c5:
         3f:a0:cc:ab:b4:aa:1a:21:a0:ce:97:2e:ef:9d:cd:58:dc:35:
         9e:3d:ed:db:84:16:24:ef:b5:2a:3a:91:7e:5f:a2:f6:97:f7:
         6e:44:02:4b:bc:d9:41:40:7c:41:d2:8d:97:cb:5b:4e:10:d2:
         a3:bf:37:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:58:11 2025 by rpki-client