Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4c2ffed-a68f-3878-95f2-90e338f2cd71.roa
File:                     d4c2ffed-a68f-3878-95f2-90e338f2cd71.roa (raw, json)
Hash identifier:          X1S1XWL6BibLe5h3NeBTXV4WgmpVMdd5kpbxg2kZJ64=
Subject key identifier:   E0:60:0D:C0:BC:2E:38:60:BA:7B:00:33:15:7D:05:73:0E:BA:AF:91
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F2E5413D4360D25F510401D0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4c2ffed-a68f-3878-95f2-90e338f2cd71.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     202
IP address blocks:        2607:f028:52::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:41:3d:43:60:d2:5f:51:04:01:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=fafea73b-257b-4282-8cd4-582dd29d72a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:18:59:be:6d:c3:a1:8f:c4:38:40:63:8b:11:
                    27:9b:00:1c:42:77:73:f2:76:33:b0:e7:68:90:bf:
                    01:7d:95:6b:9e:43:51:b2:4d:b6:43:d3:5d:e8:f0:
                    b7:28:52:77:8f:4a:32:40:67:cc:4f:5e:89:63:2a:
                    21:aa:cd:99:03:42:04:4c:6f:68:1a:88:da:8f:bd:
                    49:8e:ba:3b:e8:0a:09:0c:3b:75:7e:23:34:13:f1:
                    64:89:23:e3:67:dd:9f:57:ab:c1:7c:6c:17:a4:20:
                    4f:09:e6:50:96:68:e0:c2:c3:e5:98:be:94:77:a3:
                    73:45:83:4b:5a:19:d3:38:62:35:94:36:bc:54:7d:
                    77:87:66:ed:a4:d0:d5:ca:2f:59:fe:f4:0b:e7:56:
                    58:da:f3:8d:0c:e5:98:c7:57:5c:eb:aa:ba:f3:72:
                    9c:84:b1:39:bf:07:2f:52:31:d0:9d:cc:c6:47:a3:
                    13:57:f0:f2:3e:d0:85:e2:4c:a6:b6:3b:55:b4:64:
                    02:b3:d1:60:cf:ec:4e:2f:29:7f:3b:44:da:01:f1:
                    8a:68:e6:e1:d6:ff:f2:90:fa:55:bf:8e:bd:b0:3a:
                    0b:6e:b7:06:89:3e:42:ef:3d:b5:32:d4:29:55:37:
                    c0:f0:99:1d:a4:7c:c2:12:03:b8:24:93:60:3d:d1:
                    02:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:60:0D:C0:BC:2E:38:60:BA:7B:00:33:15:7D:05:73:0E:BA:AF:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4c2ffed-a68f-3878-95f2-90e338f2cd71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:52::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a4:b3:c8:a2:4a:ab:1c:cf:b8:f4:df:6c:a8:90:b6:75:58:
         8a:de:05:f2:0e:ba:79:75:be:02:f6:bf:1f:12:22:d0:74:13:
         0d:83:1e:11:89:2c:fa:cc:b3:05:67:ab:98:30:2a:f1:19:97:
         ee:60:15:4e:3c:b9:9d:4d:5e:c5:e6:9f:fb:a0:32:66:31:9f:
         85:0f:d8:ed:34:4f:ac:99:40:b7:f0:ed:43:58:dd:e6:63:85:
         e3:df:cf:25:57:e7:b8:f3:56:1f:e2:45:3c:5c:19:40:84:14:
         ba:a8:b9:00:1c:93:c7:bf:d7:24:f5:ce:1c:32:11:23:e3:5b:
         eb:9c:e1:15:17:c7:cb:65:e7:6b:3d:de:83:51:5e:88:4e:f2:
         6c:eb:fa:83:50:fe:40:be:9c:91:02:15:d6:b9:5b:bd:41:c4:
         37:bc:78:f8:c6:97:f6:99:87:86:a1:df:7c:2f:58:cd:df:cb:
         80:e2:8b:38:3d:7d:aa:ab:56:c3:19:0c:fe:b4:17:34:26:f0:
         0f:07:a2:2b:23:e9:5d:1b:3b:40:a3:ac:ec:d8:0e:21:dd:3b:
         83:5a:39:0c:33:a0:11:68:1a:69:21:f2:bc:cc:7e:c6:08:6c:
         98:b5:6b:41:34:29:f5:a7:b9:15:48:f2:2b:83:9d:7e:4b:de:
         9b:69:b2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:38:42 2025 by rpki-client