Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6f776027-f612-3b1d-9b6b-ed757a64927f.roa
File:                     6f776027-f612-3b1d-9b6b-ed757a64927f.roa (raw, json)
Hash identifier:          aN5/uaGJ5WaSICSz6CXhzHJ4qBPw/1D73trDjR0eFUA=
Subject key identifier:   59:D5:7E:8F:C9:6B:4C:CB:22:90:82:F5:B5:62:E2:16:41:E9:77:EC
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BD6EA1F0B4B5ABF0A2FA43640
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6f776027-f612-3b1d-9b6b-ed757a64927f.roa
Signing time:             Wed 12 Nov 2025 22:02:25 +0000
ROA not before:           Wed 12 Nov 2025 22:02:25 +0000
ROA not after:            Tue 10 Feb 2026 22:02:25 +0000
asID:                     3356
IP address blocks:        2607:f028:b61::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d6:ea:1f:0b:4b:5a:bf:0a:2f:a4:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov 12 22:02:25 2025 GMT
            Not After : Feb 10 22:02:25 2026 GMT
        Subject: CN=9a99c97e-9695-419d-b703-c0a1742b123d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:05:40:8c:19:10:ed:d8:59:96:fe:d9:de:0e:
                    05:a5:56:4d:1f:5b:25:c3:4a:41:39:cf:96:e3:71:
                    15:0d:aa:e0:e6:0a:d4:e7:91:25:54:d5:b7:5e:59:
                    24:e4:c8:07:97:c8:2e:0d:8a:c6:5a:3f:51:0a:d1:
                    2e:69:93:db:13:3f:ff:8d:ef:6e:7b:07:c0:0e:59:
                    8e:52:81:de:42:3f:e5:71:e8:23:8f:44:81:86:1f:
                    59:6e:c8:fd:74:75:fd:0f:88:40:18:9f:69:04:18:
                    b7:a5:83:e5:fa:71:bf:37:bb:52:77:f3:06:bb:31:
                    69:05:9e:e3:f9:f2:57:58:b3:db:93:0d:3b:84:20:
                    44:a4:9a:83:0f:c2:9b:8c:d4:89:21:8c:f4:9f:87:
                    f7:88:06:d3:65:9b:25:98:ce:27:7f:f8:f7:32:2c:
                    f9:d7:88:b8:b0:2a:84:ab:d3:fe:d9:b9:cb:bd:c4:
                    b4:df:ad:cb:85:2d:82:4f:df:42:98:d8:38:fd:b0:
                    8e:65:80:a9:b7:e5:71:6b:53:45:d4:a1:8a:cb:15:
                    7b:da:74:40:4f:07:3a:71:b5:57:c6:dc:61:50:94:
                    00:6a:59:39:00:60:1a:9e:79:3b:25:5c:e2:51:1e:
                    21:eb:69:3c:c6:64:35:7e:42:19:b1:db:e7:ce:19:
                    30:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D5:7E:8F:C9:6B:4C:CB:22:90:82:F5:B5:62:E2:16:41:E9:77:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6f776027-f612-3b1d-9b6b-ed757a64927f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:b61::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:9f:28:38:5d:b1:1e:94:9b:6a:bc:b2:da:e5:f1:e8:8e:dc:
         f4:61:a9:2b:7f:0b:15:5b:8e:2d:bd:98:21:d2:47:fe:5e:96:
         e3:4e:09:ec:10:7e:2c:31:d9:78:71:af:05:9c:0c:52:62:f3:
         33:1e:19:0a:42:b5:98:ef:40:93:bb:9c:ce:0e:a0:06:9a:b3:
         8f:10:3a:9f:b1:f7:c8:d6:13:cb:d1:d3:7e:45:a3:45:75:63:
         4a:cb:3c:88:c0:de:1f:2a:42:26:ba:1e:59:db:58:89:ad:41:
         ad:6f:78:8b:19:b8:09:03:ff:1d:25:96:59:b5:b2:73:7a:ce:
         1a:f2:80:6a:38:05:24:b2:72:11:dd:6c:c6:2c:a6:f8:c2:ec:
         bf:06:73:7e:5d:e7:e1:6a:97:07:e7:13:55:60:62:0b:57:95:
         2b:19:91:18:b3:99:98:d8:bb:36:65:9f:be:d1:9a:98:fb:2a:
         3a:35:58:e4:b2:53:c4:3d:13:2c:c4:bf:fa:bb:57:05:c4:2e:
         de:38:0f:77:99:6c:73:02:6b:22:cf:b3:3e:bf:d3:17:7c:bc:
         5a:15:af:1c:b4:88:a9:a9:aa:d7:e1:1b:49:c7:26:57:a8:96:
         e4:01:d6:2b:05:a6:3e:b9:c6:e0:52:c3:b0:d1:9f:23:29:b1:
         2a:a8:a4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 01:16:45 2025 by rpki-client