Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7cd6391-9294-35a6-a7bd-59edd639bbcb.roa
File:                     a7cd6391-9294-35a6-a7bd-59edd639bbcb.roa (raw, json)
Hash identifier:          v7oi4KbN2oYxacjGu4im81b6Jykdmz3sfhRfuqr2Q4M=
Subject key identifier:   04:72:68:F9:7F:6B:F5:8A:7A:E3:AD:52:EE:6B:D9:9B:86:F5:0F:30
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC303BC390909B730A9040
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7cd6391-9294-35a6-a7bd-59edd639bbcb.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     3360
IP address blocks:        2607:f028:132::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:30:3b:c3:90:90:9b:73:0a:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=b0f81c72-2f14-4b37-8a57-87aba991e07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:90:95:23:87:a6:da:05:77:38:87:71:8b:72:
                    f9:8e:81:f7:b1:72:81:ae:a1:3c:a6:02:e6:a2:3a:
                    31:82:2c:82:02:5c:2c:6e:3b:bb:04:48:82:14:d9:
                    37:f7:5b:a0:94:cb:77:7f:89:be:a3:c6:c9:d7:3c:
                    0c:be:b4:d7:7f:62:35:34:77:05:19:84:8f:bd:b1:
                    83:29:63:da:4a:d3:ff:ad:5c:ee:fa:5c:b5:4e:65:
                    6d:5d:57:eb:e6:ab:d9:45:b1:d0:a7:09:06:9f:cd:
                    39:0c:b2:54:52:58:1b:51:15:ff:9a:72:80:d3:37:
                    80:86:41:a2:5f:16:dc:7b:aa:90:68:28:7b:b0:4f:
                    e1:fd:81:e5:1b:fa:c4:55:81:7e:cc:e5:87:5d:44:
                    7d:ef:22:30:7b:e2:a5:c1:2f:ec:c1:d3:bb:64:de:
                    01:16:e7:ff:1c:7c:93:32:76:60:a9:bb:6e:2c:ac:
                    0b:11:fa:b4:63:7e:a5:1a:fb:18:17:07:58:8e:6d:
                    cc:f9:46:ed:f0:f6:e0:16:9a:d8:cc:7b:10:e3:69:
                    5e:c0:8e:00:d8:45:26:49:d3:0e:2b:9d:14:f4:00:
                    40:18:37:21:89:6c:84:1b:43:1b:da:ef:4f:23:d2:
                    96:9b:ae:8b:de:eb:e2:ef:0d:68:75:8e:09:33:00:
                    0e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:72:68:F9:7F:6B:F5:8A:7A:E3:AD:52:EE:6B:D9:9B:86:F5:0F:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7cd6391-9294-35a6-a7bd-59edd639bbcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:132::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:74:ae:36:66:0f:f3:a2:a1:64:aa:c7:95:28:0e:fa:ea:57:
         b1:cf:b7:b1:f8:ed:1d:3f:17:e6:50:93:38:e6:f0:25:0c:5d:
         51:0d:35:9b:f3:90:12:15:ab:c4:a7:54:6d:4e:22:be:59:a1:
         45:07:4e:95:10:93:e9:c1:0a:db:33:d2:62:ba:a1:af:a0:c2:
         f7:0f:29:b7:2e:ce:8f:74:fb:94:1d:b9:ba:af:e7:30:07:f0:
         11:f5:b7:a7:45:41:09:a3:c1:3e:7c:76:50:0c:bc:56:09:98:
         1b:b6:83:f8:43:e1:bd:3e:9c:6a:d2:7d:84:d6:43:d8:a8:8f:
         da:93:f2:e7:bb:4c:72:59:6d:2f:61:f5:94:99:ff:2c:1e:f7:
         1b:9d:c0:78:89:5c:28:7c:ab:bf:58:e6:18:38:24:a7:d4:ee:
         98:94:ba:d0:08:3f:86:8b:48:3b:78:f4:fb:45:15:89:0a:cf:
         19:5a:64:2b:9a:eb:ed:5b:36:a3:67:f0:47:d4:7e:65:0c:53:
         09:99:92:93:6a:c9:a4:8e:7b:22:0c:ba:a3:c2:61:dc:71:3b:
         69:e1:08:c7:ba:a8:ec:7a:53:f0:8a:0e:71:9e:a1:bb:4f:91:
         9b:92:de:74:7c:9b:72:25:57:76:93:29:35:63:06:67:26:da:
         3f:b8:9f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:08:36 2025 by rpki-client