Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b553a2c7-55db-3f83-aa1a-8a56b8b78a03.roa
File:                     b553a2c7-55db-3f83-aa1a-8a56b8b78a03.roa (raw, json)
Hash identifier:          kctEv43YzYcbc1TTWpuKcJA7reJCdhSmGJUr3bifFI4=
Subject key identifier:   20:31:F9:19:CD:72:01:64:94:FF:92:15:B8:7B:CA:F5:90:70:50:C9
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BD6EB293FEC8ACF9C65D6E080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b553a2c7-55db-3f83-aa1a-8a56b8b78a03.roa
Signing time:             Wed 12 Nov 2025 22:04:30 +0000
ROA not before:           Wed 12 Nov 2025 22:04:30 +0000
ROA not after:            Tue 10 Feb 2026 22:04:30 +0000
asID:                     202
IP address blocks:        2607:f028:b62::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:d6:eb:29:3f:ec:8a:cf:9c:65:d6:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov 12 22:04:30 2025 GMT
            Not After : Feb 10 22:04:30 2026 GMT
        Subject: CN=26b69709-92b9-4430-951d-aad0a4fb0500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0c:9b:7f:bc:69:34:d3:1d:12:28:24:a2:f9:
                    91:24:98:e4:80:47:75:a0:93:80:08:f2:5f:da:4f:
                    66:32:ab:e3:0e:2c:c7:3f:f3:d1:74:6e:41:c7:4f:
                    21:b5:70:c9:b3:39:ef:93:6e:58:8e:e0:6b:c4:3a:
                    bb:0c:6c:5f:10:29:82:c4:8b:b5:87:cb:ca:29:7c:
                    99:fa:1b:8a:8c:82:cc:6f:1e:d8:84:f2:4b:57:99:
                    a5:6e:ec:1a:df:f5:11:31:c1:ad:f2:b9:14:f9:98:
                    01:a6:26:70:41:85:d7:ce:8f:51:c0:aa:d5:65:c0:
                    8e:39:b8:e8:5b:f6:24:29:d2:36:9b:9b:86:3b:63:
                    14:32:7c:22:5d:85:5a:34:b2:f7:d1:b0:0b:c7:f5:
                    55:5f:8b:cc:83:c5:9a:75:da:56:dc:ed:54:2e:5f:
                    e3:23:26:25:07:7c:2b:e8:99:d5:d8:bd:aa:e5:26:
                    59:10:81:7b:57:ed:4c:80:37:76:57:b5:e5:95:45:
                    13:5b:08:eb:e8:92:41:80:e5:32:25:23:56:4a:f1:
                    56:01:91:9c:87:db:96:86:b6:d5:e8:91:8c:4d:6f:
                    91:88:14:2d:d7:30:9e:e8:57:e2:72:c1:65:d0:9b:
                    d1:f0:54:92:06:43:47:ce:ff:da:88:04:31:d2:e2:
                    1a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:31:F9:19:CD:72:01:64:94:FF:92:15:B8:7B:CA:F5:90:70:50:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b553a2c7-55db-3f83-aa1a-8a56b8b78a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:b62::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:41:09:5d:a4:f7:e1:9e:be:0d:c2:8b:f4:04:e5:0d:42:c1:
         68:86:af:3b:d5:e4:b5:58:93:1d:eb:f5:3a:c5:19:ed:27:9a:
         15:8a:7d:39:e1:34:ee:5f:7f:6b:c8:a9:87:7a:42:ba:c3:fd:
         bd:d4:45:7f:5f:aa:80:90:0d:12:27:41:0f:dd:cf:e5:e0:bc:
         a9:03:d1:ba:cb:d1:98:5c:a5:d6:1f:14:26:b4:2c:f2:f5:60:
         7e:56:d5:d7:39:35:6d:24:95:7e:66:67:7e:4e:d2:fd:c1:f0:
         ad:f5:5e:49:7e:72:c7:9b:cb:45:a1:5f:b0:ee:96:dc:f3:d1:
         ec:03:3c:53:b4:48:02:70:27:02:66:87:1a:67:3f:1f:b3:61:
         42:68:2a:28:ed:89:fc:86:d0:a8:1b:bf:41:31:a7:c5:0d:ba:
         1d:f9:43:d5:f4:82:9e:65:82:b6:ba:06:cc:73:90:09:e2:4f:
         53:20:2a:8b:0a:ae:0c:ea:67:c1:d6:f2:6f:b5:cc:99:d8:70:
         27:1d:64:de:a8:47:48:11:de:f2:8e:82:7a:f2:10:65:b4:3d:
         89:89:d1:02:cb:26:d9:06:19:b6:23:05:bc:8e:fd:30:b1:a5:
         71:61:c3:ad:39:dd:ac:8d:84:f8:77:63:12:cd:6c:6d:f3:71:
         93:ac:4b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 17 18:15:35 2025 by rpki-client