Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6d22ea68-46a4-31da-ad5e-09a1d3b8268b.roa
File:                     6d22ea68-46a4-31da-ad5e-09a1d3b8268b.roa (raw, json)
Hash identifier:          iIrK91UE+jN2JmFYHClZxj+u7ZW7IGQwyUD8y2oUXTo=
Subject key identifier:   BF:21:A8:E3:58:24:35:36:87:02:D1:52:2A:70:99:82:16:75:D2:A2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC2FF5D1F09DAE26352270
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6d22ea68-46a4-31da-ad5e-09a1d3b8268b.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     202
IP address blocks:        2607:f028:131::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:2f:f5:d1:f0:9d:ae:26:35:22:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=91b7b746-4916-4085-b2a6-864a05f1ed93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9f:57:53:77:19:35:d5:3f:41:5a:ba:fe:f6:
                    fc:50:5c:91:27:cb:6e:bc:db:ef:d6:6b:f7:98:65:
                    79:85:82:db:d9:40:c7:da:9e:95:fd:21:3d:6b:0f:
                    45:3c:ac:ce:08:17:db:eb:f1:b6:06:ef:f9:11:79:
                    07:1c:7d:9e:47:8f:af:06:ab:79:13:2d:bc:de:9d:
                    c3:8f:df:b6:71:93:48:55:6b:5a:7a:35:25:bf:81:
                    c6:34:bf:57:2c:87:1c:00:58:29:2c:08:bb:fb:11:
                    5e:48:52:fb:b9:fa:e2:a8:ce:27:b1:89:fb:01:17:
                    74:07:91:91:44:a7:6e:ef:5f:82:01:07:8c:89:28:
                    b2:f4:4a:eb:aa:d7:73:72:17:ed:40:e2:89:9c:23:
                    6a:73:3b:55:60:a2:ae:c0:69:81:7b:4f:b3:70:14:
                    99:bf:67:f3:ff:1e:31:6f:88:42:a0:ba:f1:49:16:
                    a2:41:0d:73:77:72:ab:fd:3f:e9:11:36:bf:85:ec:
                    b5:43:5a:ad:09:34:73:f0:65:af:a3:fc:69:ca:7f:
                    e1:fb:c0:d6:28:d4:37:e2:26:38:57:4a:d7:26:cf:
                    35:df:71:85:c5:1f:8c:1f:0b:68:de:94:eb:ee:38:
                    37:14:44:ba:70:f3:b1:1f:58:2b:11:57:96:96:0c:
                    0e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:21:A8:E3:58:24:35:36:87:02:D1:52:2A:70:99:82:16:75:D2:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6d22ea68-46a4-31da-ad5e-09a1d3b8268b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:131::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b1:8c:c4:a9:52:22:5e:b9:51:b6:a3:78:9a:57:74:89:fc:
         a6:cb:cc:79:a3:a4:ff:21:3a:27:e9:83:a9:2d:e7:f3:b2:ff:
         2e:29:bb:41:d0:2f:ba:8b:6a:66:1a:3a:92:b6:b9:7f:36:44:
         e6:2a:1d:d2:94:1b:22:eb:65:82:01:5b:1f:30:bc:a1:03:3f:
         25:9d:c5:61:af:7b:f3:6f:ad:f0:4f:6f:4f:2f:04:d6:a1:3a:
         58:bc:49:eb:44:5b:57:7f:a2:d3:44:ed:a9:76:a0:02:0b:5e:
         2a:ce:2e:f6:b4:ab:0b:27:44:32:a6:75:94:7e:ca:08:b4:a9:
         a2:47:91:cf:35:36:17:da:74:9c:50:5d:88:63:a4:31:97:60:
         0c:47:4b:9b:bc:5b:25:89:ba:4d:31:00:7f:c7:60:de:4b:b7:
         5b:ba:04:c6:9e:53:8e:a2:6b:e1:48:04:30:16:b6:61:63:0c:
         36:71:d7:75:b5:ec:78:1b:4c:e1:9b:8c:04:9c:ad:f5:65:33:
         b3:d7:34:9d:dd:91:ec:88:e1:d7:58:f2:b2:96:0c:38:0c:b8:
         e8:67:22:7f:17:8e:cf:db:fd:d1:66:db:c9:34:ab:91:27:a4:
         75:ce:67:e9:d0:87:6b:2f:ff:fb:51:70:e1:ff:09:1e:b4:fa:
         b4:34:fc:21
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrC/10fCdriY1InAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
OTFiN2I3NDYtNDkxNi00MDg1LWIyYTYtODY0YTA1ZjFlZDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ9XU3cZNdU/QVq6/vb8UFyRJ8tuvNvv1mv3
mGV5hYLb2UDH2p6V/SE9aw9FPKzOCBfb6/G2Bu/5EXkHHH2eR4+vBqt5Ey283p3D
j9+2cZNIVWtaejUlv4HGNL9XLIccAFgpLAi7+xFeSFL7ufriqM4nsYn7ARd0B5GR
RKdu71+CAQeMiSiy9ErrqtdzchftQOKJnCNqcztVYKKuwGmBe0+zcBSZv2fz/x4x
b4hCoLrxSRaiQQ1zd3Kr/T/pETa/hey1Q1qtCTRz8GWvo/xpyn/h+8DWKNQ34iY4
V0rXJs8133GFxR+MHwto3pTr7jg3FES6cPOxH1grEVeWlgwOcwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL8hqONYJDU2hwLRUipwmYIWddKiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmQyMmVhNjgtNDZhNC0z
MWRhLWFkNWUtMDlhMWQzYjgyNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEx
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABSxjMSpUiJeuVG2o3iaV3SJ/KbLzHmjpP8hOifpg6kt5/Oy/y4p
u0HQL7qLamYaOpK2uX82ROYqHdKUGyLrZYIBWx8wvKEDPyWdxWGve/NvrfBPb08v
BNahOli8SetEW1d/otNE7al2oAILXirOLva0qwsnRDKmdZR+ygi0qaJHkc81Nhfa
dJxQXYhjpDGXYAxHS5u8WyWJuk0xAH/HYN5Lt1u6BMaeU46ia+FIBDAWtmFjDDZx
13W17HgbTOGbjAScrfVlM7PXNJ3dkeyI4ddY8rKWDDgMuOhnIn8Xjs/b/dFm28k0
q5EnpHXOZ+nQh2sv//tRcOH/CR60+rQ0/CE=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:19:22 2025 by rpki-client