Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cecb1897-15f4-3893-bab4-ba93528cccd4.roa
File:                     cecb1897-15f4-3893-bab4-ba93528cccd4.roa (raw, json)
Hash identifier:          8qWhzsGh/6adSvWEYU7BEYOVJTjxpRXngTEH6fruzlI=
Subject key identifier:   CD:6F:3A:B4:12:EF:4A:E2:6D:98:23:32:9F:17:DD:F2:79:47:C6:D4
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858491ED6E2B61B88C03A37882200
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cecb1897-15f4-3893-bab4-ba93528cccd4.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     203
IP address blocks:        2607:f028:111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:e2:b6:1b:88:c0:3a:37:88:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=d07f7f97-a472-473f-bf6a-11b2bd067817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:40:b6:8c:29:1f:2d:b0:c2:1f:48:0b:21:19:
                    bd:2f:ae:06:66:ec:c7:fc:2d:b7:79:62:7b:b7:b0:
                    3c:82:3f:63:01:1b:e8:42:10:4d:4c:73:21:bf:2d:
                    31:e8:b0:7b:83:19:af:95:e1:b1:a8:34:92:53:ab:
                    9e:c6:6f:f9:32:26:d4:76:e2:ef:79:f5:51:43:c6:
                    64:6e:be:e3:5d:99:0d:f3:81:41:de:87:12:e6:0d:
                    10:b3:0b:26:71:75:51:68:7e:dc:6e:90:5a:5b:47:
                    3c:03:94:92:f2:52:67:91:b0:cc:93:9d:39:4e:61:
                    51:1f:87:27:e9:39:d5:f9:49:3f:32:5a:32:7e:f7:
                    f7:6d:cd:31:c2:a7:1a:1e:c8:3c:9a:c4:5a:59:08:
                    45:f9:c5:1f:4f:c1:e6:32:7c:99:5a:b6:ba:93:67:
                    1c:8c:77:c3:44:97:7f:99:fd:dc:8a:96:af:cb:b4:
                    08:1e:17:ea:fc:06:61:39:ed:b9:b0:1e:98:55:7e:
                    43:2e:0e:02:05:80:5c:af:f1:6c:5e:96:63:c3:e5:
                    09:e4:59:5f:00:8f:5a:b5:3a:0f:3e:81:fe:a8:4b:
                    87:6e:b2:09:33:d9:0e:e2:d4:3f:a2:6d:f0:ab:70:
                    7b:78:24:ac:5d:81:93:03:6c:08:f1:fe:55:b9:fa:
                    26:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6F:3A:B4:12:EF:4A:E2:6D:98:23:32:9F:17:DD:F2:79:47:C6:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cecb1897-15f4-3893-bab4-ba93528cccd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d7:94:81:2a:03:66:03:ec:54:89:46:a9:98:9f:e6:df:5b:
         24:0c:6a:1e:b8:95:7c:32:c8:82:e1:b6:d8:b8:a9:32:c1:11:
         aa:e7:71:bc:81:83:1c:47:a3:b4:55:d0:50:58:96:11:d4:4e:
         f1:05:c6:7f:a7:c4:7d:d0:d4:49:eb:ab:fc:8d:34:2a:8a:b1:
         8c:5e:23:f1:1d:e2:bf:7d:c0:44:81:c6:08:0b:5e:e2:8f:e1:
         dd:07:31:89:0b:7a:7e:37:d0:02:64:5c:1a:57:fd:93:89:2d:
         5c:b8:90:ac:ce:28:28:1a:be:ef:1a:ae:04:8f:78:9e:e2:54:
         29:15:03:ff:d7:45:14:f2:e0:4e:ad:54:20:0c:8b:64:f0:7c:
         ca:1e:64:8c:d0:0a:69:5b:1d:cc:76:f4:f1:92:68:01:14:4a:
         16:e2:af:e7:f1:31:3c:70:34:f2:07:87:34:25:f4:54:20:72:
         f8:73:f8:26:d7:1c:79:34:45:e9:e9:7c:86:7d:14:a4:8f:80:
         4c:80:6b:d0:14:73:75:96:21:f0:c9:42:71:9a:2e:fc:25:93:
         c7:94:8e:ca:ff:1d:f4:36:4a:74:19:a7:73:15:79:47:35:e0:
         6c:8e:ac:6b:1a:c1:52:97:1e:1c:8a:4f:c0:a0:f6:19:cd:0f:
         3b:85:fe:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:35:58 2025 by rpki-client