Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0adca44c-7aa0-3e55-a449-6c717a46201b.roa
File:                     0adca44c-7aa0-3e55-a449-6c717a46201b.roa (raw, json)
Hash identifier:          +EzLdcobmBqmbR6qfqbVaXGaEYoVOS9wrLkISn81KE0=
Subject key identifier:   28:B3:5D:15:A4:44:FD:6A:75:78:6C:BE:3D:AA:71:63:2D:30:A1:AD
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BBFA5A1A0EC8D45BF3DE89580
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0adca44c-7aa0-3e55-a449-6c717a46201b.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     202
IP address blocks:        2607:f028:112::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:a1:a0:ec:8d:45:bf:3d:e8:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=6196b1ff-3322-4bbe-a1d6-3a8b927713d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:23:86:18:c8:1b:cb:3d:de:87:8e:36:a8:
                    89:5c:a9:02:33:86:b8:e1:58:7b:83:b2:84:67:84:
                    5a:8b:cb:0b:a6:d1:30:2d:df:55:3d:f9:68:01:9d:
                    5b:30:f4:c1:20:98:52:7d:d9:7b:ae:2b:19:ab:d1:
                    b8:9f:db:27:87:56:62:d7:55:01:a9:21:d6:5c:86:
                    76:04:68:16:9c:02:30:ca:ed:68:90:6d:d4:04:ff:
                    b9:ee:70:f0:ad:74:96:c1:6e:4f:47:41:d1:43:33:
                    d6:d3:5f:66:7d:16:f3:8e:7a:8e:e7:04:15:1a:12:
                    e7:c9:5e:57:80:02:6b:28:04:ad:2b:b5:2d:95:bd:
                    92:99:5d:c3:4f:dd:35:92:93:0c:5a:8f:ad:25:63:
                    58:3d:df:69:e0:69:dd:e2:60:f4:cb:5b:bf:db:8b:
                    e9:bd:53:a8:5d:59:a4:79:7c:99:da:50:0f:ad:dc:
                    a1:28:46:70:35:5e:28:ee:83:2f:81:17:20:fd:b9:
                    c7:04:55:f5:ef:67:5f:bf:3c:b0:06:72:b7:59:94:
                    91:37:69:56:a0:db:57:84:10:a3:bf:51:63:af:02:
                    ce:6a:09:58:8c:53:b4:ef:0f:12:94:56:d4:19:81:
                    20:02:66:2b:c6:75:c8:fe:7e:30:05:66:16:ef:c2:
                    2f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B3:5D:15:A4:44:FD:6A:75:78:6C:BE:3D:AA:71:63:2D:30:A1:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0adca44c-7aa0-3e55-a449-6c717a46201b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:112::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:af:ee:c9:47:eb:49:76:f9:2a:63:8a:7d:6c:10:54:ec:73:
         86:d4:bb:9f:b3:67:c5:98:ba:a9:4f:4d:5e:c2:8b:b4:73:0f:
         f8:76:09:b2:4e:38:98:19:cf:0a:28:68:96:31:6f:06:43:20:
         56:0d:84:fd:f8:37:a2:48:71:db:f8:24:44:0b:dd:2f:45:59:
         42:df:77:ea:68:be:62:92:25:75:b3:52:d5:d6:d2:e7:7d:19:
         04:f3:d6:de:cc:f0:ae:c0:3f:64:ff:9f:1a:43:d0:62:9d:89:
         5f:0e:d1:80:19:18:e9:89:75:13:a3:28:77:5f:d0:e4:82:a8:
         57:a5:c3:e0:26:84:18:f5:8e:94:13:eb:31:90:2e:d7:8e:90:
         aa:9d:a5:3a:31:32:80:1b:bb:0b:5e:1a:bd:ed:08:3e:2d:a6:
         64:20:3d:67:6d:b3:41:9e:21:e2:2e:dc:19:fa:55:c0:47:ec:
         6b:27:72:0c:d9:7e:37:10:d8:d5:db:3c:c3:95:0b:50:97:d4:
         da:0c:0c:12:68:9f:ba:45:e4:11:47:3a:da:88:0d:59:d8:a6:
         f4:f5:93:b2:83:03:1e:8f:9e:78:ea:4e:de:c5:e5:5f:a9:68:
         13:db:7f:ee:ef:21:84:22:66:46:a4:ac:40:59:e6:2d:87:05:
         62:cf:d9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:27:04 2025 by rpki-client