Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/132b22f4-2cb9-3d60-add7-7e81814fea2e.roa
File:                     132b22f4-2cb9-3d60-add7-7e81814fea2e.roa (raw, json)
Hash identifier:          eNd3zikT0z4EigwqWPDZqB6GaHOHPFb2/sTkgH10mdM=
Subject key identifier:   65:35:AF:B8:CD:D4:1E:78:0E:E7:9A:92:A6:F9:85:16:ED:D7:7B:DE
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849FE0FF688085613EAD98E6330
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/132b22f4-2cb9-3d60-add7-7e81814fea2e.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     3356
IP address blocks:        2607:f028:111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:f6:88:08:56:13:ea:d9:8e:63:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=5459eb99-81e9-4143-99b6-d15a9313ea66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4b:69:ba:43:55:cd:74:2d:e3:01:0c:21:dd:
                    e1:db:fd:30:3d:f5:09:4f:30:e7:b1:3d:cf:6a:87:
                    c7:34:50:93:06:49:0d:e3:1e:c2:99:9c:78:85:ab:
                    9c:3c:35:4c:fd:6c:07:3b:0c:dd:89:66:a0:a8:ce:
                    35:ed:ea:be:a0:78:30:ec:ab:6a:eb:52:3e:41:15:
                    2f:89:54:e1:55:71:ad:ad:29:db:1f:96:77:fb:a2:
                    1b:cb:c8:b0:70:1f:60:67:5c:a8:a5:b1:d8:9c:fe:
                    de:cf:c7:dc:7a:e2:a1:0b:21:8e:32:cc:ab:f7:cf:
                    aa:c8:8f:be:cd:41:60:8a:a6:83:98:f7:84:79:34:
                    a2:76:cf:c2:1c:0e:11:39:35:cc:b3:e9:54:0e:23:
                    53:95:75:2f:5c:2a:c7:9d:56:31:37:15:71:b9:4f:
                    a1:80:72:bf:d5:96:f7:3d:aa:48:78:7c:0d:d1:dd:
                    f4:79:3b:e5:a7:ab:61:e4:11:67:c1:63:74:0b:7d:
                    02:10:ea:9d:21:4c:c0:b7:91:97:66:8d:cf:9f:22:
                    3f:75:17:d3:fe:13:d0:89:1e:db:05:5d:93:6e:16:
                    68:28:4d:88:77:3e:d6:52:12:7b:dc:5f:2c:4b:83:
                    55:59:b4:0e:24:f4:b8:95:a3:62:77:34:e1:e2:91:
                    1a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:35:AF:B8:CD:D4:1E:78:0E:E7:9A:92:A6:F9:85:16:ED:D7:7B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/132b22f4-2cb9-3d60-add7-7e81814fea2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:25:19:8a:f8:28:fd:14:50:d1:d7:01:89:74:b3:f7:2e:a6:
         95:1e:7b:b1:98:1d:f2:69:de:91:d7:dc:2a:51:12:c2:93:5b:
         bf:e1:0e:94:20:95:be:5b:fc:79:30:d7:d4:9a:2e:89:02:ed:
         c3:94:06:01:95:c2:4e:7e:dd:3b:0f:17:6d:36:f3:d5:9b:b9:
         65:bf:e0:2d:0e:d4:0c:df:4f:71:b9:1a:b7:34:c1:20:35:2a:
         c9:c5:88:1c:ac:a9:a1:72:00:3b:ee:74:1e:2f:3c:5b:73:ad:
         f7:7b:c3:35:32:ae:b6:bc:0a:24:42:ef:9b:35:60:5a:5f:1a:
         3f:b9:6b:bc:d5:db:5c:90:6c:6a:25:cd:cb:c6:22:78:42:26:
         70:cb:07:98:98:fc:9d:cb:49:bf:ca:76:aa:a0:8b:c9:81:e4:
         79:17:eb:d3:5f:74:09:c4:fa:da:c2:4b:23:ce:1d:09:1f:1d:
         f5:d6:e3:6e:58:12:82:92:1b:04:4e:cc:0f:c9:99:4b:bb:b0:
         90:29:1c:43:ec:3b:a5:85:51:d4:e8:8c:78:83:f9:2c:d3:6f:
         2d:e9:83:9a:51:66:bd:11:c5:13:df:3d:0d:25:1c:31:57:3f:
         b8:a3:3e:ec:68:80:90:81:60:16:36:8b:b5:82:15:b6:da:c7:
         88:c5:9d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:43:35 2025 by rpki-client