Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6f309fb5-cb2f-3804-85fe-0e0e03472816.roa
File:                     6f309fb5-cb2f-3804-85fe-0e0e03472816.roa (raw, json)
Hash identifier:          MCGO/b7Qc+f/MvDqqH44yJTdmrlrwhgAoZ8ZULOh0tM=
Subject key identifier:   4D:00:FD:DB:BB:3C:32:27:7F:F0:32:B9:E1:59:66:EE:58:9E:04:F1
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB45D2919F460420B783D3500
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6f309fb5-cb2f-3804-85fe-0e0e03472816.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     3356
IP address blocks:        2607:f028:142::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:29:19:f4:60:42:0b:78:3d:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=b6f4f44c-e096-42fd-826d-6a02019fd4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c7:e5:28:45:82:63:34:a5:df:d6:17:94:83:
                    4c:b2:d2:f1:32:f2:4b:48:54:bd:29:b0:01:da:36:
                    b3:8f:92:93:05:85:5f:6f:cc:8f:d9:79:dd:40:fb:
                    e0:7f:9b:11:d1:7d:cc:bb:4d:07:01:01:6f:98:6e:
                    6f:d8:ed:82:9b:46:c3:0b:3a:a0:56:f9:3a:e5:f2:
                    cc:03:0b:31:fc:b2:06:d1:81:d8:d4:8a:68:e6:7b:
                    1a:9a:b0:25:27:00:c1:54:65:a1:ec:45:72:dc:20:
                    52:ee:47:1d:9c:00:f2:79:88:03:dc:2f:33:5b:39:
                    cc:c1:d0:17:1b:67:9e:0f:a6:9e:89:f0:1d:d2:c9:
                    ff:93:b8:dd:61:52:70:20:0b:22:1c:92:6b:37:78:
                    e1:8f:04:21:b4:0d:05:af:fb:e8:fc:0a:99:e9:a9:
                    1a:36:07:10:2e:a7:a2:f7:8a:41:15:c4:8e:a3:d7:
                    06:d6:7d:a8:40:a0:eb:18:e3:92:26:ef:e8:1f:fa:
                    40:cc:90:da:1d:00:41:2c:32:3c:d5:15:03:a7:84:
                    da:35:f3:00:ef:3c:c0:d5:3a:07:5b:f0:66:28:0b:
                    bc:75:4d:65:23:3a:91:8b:91:79:ec:a7:f4:11:26:
                    82:34:9b:c9:ff:e5:b9:ce:27:29:2f:32:1f:25:24:
                    c2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:00:FD:DB:BB:3C:32:27:7F:F0:32:B9:E1:59:66:EE:58:9E:04:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6f309fb5-cb2f-3804-85fe-0e0e03472816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:142::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:60:1c:75:c6:73:06:2b:f8:13:f2:28:32:c4:48:7f:48:68:
         60:19:d1:3f:46:51:ef:00:f9:f9:bb:b6:b6:c6:48:46:9e:3c:
         66:04:be:c6:d4:71:13:62:70:d6:a7:fd:6b:b0:f8:70:12:a5:
         ea:f6:0f:d9:e8:54:08:40:ae:15:d7:3c:6f:8b:ab:8f:43:7b:
         7b:67:18:80:d5:d2:82:cb:2b:17:d7:88:cf:db:7e:bd:a5:e0:
         64:da:19:32:ef:d7:0f:c0:fa:05:4f:6a:fe:92:28:d1:db:32:
         e9:de:5f:e0:fd:9d:0e:6a:19:8f:f6:a7:99:c2:fa:5a:da:cc:
         8b:19:d7:a9:c8:24:cf:41:42:1e:2f:e5:52:37:df:ba:31:83:
         c9:36:73:46:e9:4f:b3:d8:41:f6:19:12:55:40:85:37:75:9e:
         2f:8a:f9:b5:62:56:28:4b:c3:52:0d:f2:ec:75:2f:bb:2b:77:
         95:35:d1:48:ab:1d:a2:04:be:1b:c9:82:ef:ca:37:2f:1e:16:
         b9:e2:24:11:59:20:58:b3:23:5e:ad:58:5e:cc:33:e7:78:a9:
         14:db:bf:9d:f4:93:6e:f9:f0:49:0b:5e:90:84:d9:04:4a:02:
         07:85:0c:ea:6c:7e:9d:56:c9:45:bb:e1:58:32:7b:cc:d5:4b:
         53:fc:67:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:12:14 2025 by rpki-client