Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fc7a04e-899b-3caf-8bef-f6987972d566.roa
File:                     0fc7a04e-899b-3caf-8bef-f6987972d566.roa (raw, json)
Hash identifier:          VFpk2GYPQDWf/8Rq13IW7LMOOtgenhrJLpHTiiue+Rw=
Subject key identifier:   F8:97:B9:B4:D0:F7:AD:68:68:5D:9A:80:55:C0:63:9A:BC:97:58:3E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F2E5481F238C2B47E38A2E00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fc7a04e-899b-3caf-8bef-f6987972d566.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     203
IP address blocks:        2607:f028:101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:48:1f:23:8c:2b:47:e3:8a:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=2ef27459-29e1-4698-b8f5-964797e17f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:75:fe:63:d3:b1:74:38:29:e2:7a:2a:85:e2:
                    bc:cb:c0:0b:b4:e9:d8:7d:96:fd:a1:a4:4b:14:d5:
                    12:9b:ec:3b:9b:ad:1d:d5:75:4f:8a:89:2e:74:aa:
                    a6:ad:0e:a8:00:c5:e6:89:59:bb:03:9c:91:24:4f:
                    ab:9f:3b:92:83:97:46:a9:5b:6e:85:f5:84:e3:b4:
                    08:5a:df:2a:76:0f:ba:81:e4:83:1c:93:9a:f1:cd:
                    2f:6f:a6:f3:2e:55:3f:8d:52:91:b8:28:65:d2:d2:
                    b0:0e:bc:e2:72:09:bf:2a:8e:d6:d6:21:4c:41:52:
                    14:2c:59:e9:e1:62:cb:39:ae:1b:20:54:be:99:a0:
                    d9:1e:85:d9:a8:a0:84:00:60:d5:1f:ee:f2:8a:77:
                    85:fb:2f:6f:73:2c:63:e5:55:c1:87:8d:9f:ad:31:
                    3f:23:51:4b:6b:d2:9a:38:18:e9:f7:cb:88:23:05:
                    86:55:7b:5c:b9:81:d3:25:94:60:c7:0a:41:61:c1:
                    47:a8:af:47:a2:aa:17:90:b8:de:e1:77:7e:f2:f3:
                    a7:15:ad:76:e6:3a:d2:62:38:e3:69:22:b0:37:4d:
                    d1:ba:ce:17:ed:d4:18:85:15:f5:67:bf:e6:e8:30:
                    96:21:36:ca:63:2c:ad:db:61:24:f9:e1:3d:51:52:
                    74:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:97:B9:B4:D0:F7:AD:68:68:5D:9A:80:55:C0:63:9A:BC:97:58:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fc7a04e-899b-3caf-8bef-f6987972d566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:2a:30:9f:25:71:93:83:80:9a:4a:0d:c6:5c:f5:4e:47:0f:
         9b:a4:ae:63:cc:90:f8:c2:b8:27:08:47:9e:79:3d:69:5a:4a:
         9d:cf:84:a2:2a:f5:04:a1:63:9e:2f:76:c2:66:a8:91:c6:e2:
         5d:6c:ae:5b:ef:20:86:17:5b:ea:b7:b5:34:3f:a6:48:ca:79:
         75:a6:a7:81:80:b8:2a:e1:8a:3a:eb:b2:73:e1:86:4d:13:23:
         26:9c:5f:7a:1b:e4:99:e8:a8:7f:69:c7:9b:07:22:aa:60:66:
         a9:14:8a:f0:c7:97:04:ef:db:b1:e6:a5:8c:74:99:7c:29:b6:
         f4:ce:fa:cf:5d:23:4e:3d:51:2d:fb:89:1b:e8:e9:6f:15:1b:
         fe:ce:e5:a0:08:ae:de:ab:1f:6f:f0:b0:68:1b:18:8b:1c:f8:
         dd:cd:d6:55:42:24:66:17:0f:a4:f9:41:7b:be:c1:20:10:cf:
         e5:7b:be:da:03:02:8c:02:a1:e0:99:66:ba:c8:a9:46:53:09:
         78:a1:07:c2:46:a9:ca:6b:54:d1:5d:68:30:4d:05:7e:84:25:
         58:9c:12:a8:fe:60:d4:1b:af:de:55:df:39:e7:1a:a5:6e:12:
         ae:73:a6:d6:2e:47:e2:41:23:06:4a:30:bd:7a:3a:ed:41:ba:
         c8:21:15:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:36:44 2025 by rpki-client