Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/16705422-4822-347d-b5ef-296575229cc8.roa
File:                     16705422-4822-347d-b5ef-296575229cc8.roa (raw, json)
Hash identifier:          D2Cn9x222XOs7WJi8A0EKb3ydD66zhdZpPLUSMbrCxI=
Subject key identifier:   53:B2:6A:9C:C9:5F:AB:CB:B2:1D:5C:26:48:74:3A:40:D5:C1:2B:E6
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AC1CC8AD73FB7103C14A15500
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/16705422-4822-347d-b5ef-296575229cc8.roa
Signing time:             Tue 05 Aug 2025 15:43:54 +0000
ROA not before:           Tue 05 Aug 2025 15:43:54 +0000
ROA not after:            Mon 03 Nov 2025 16:43:54 +0000
asID:                     14618
IP address blocks:        2607:f028:272::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c1:cc:8a:d7:3f:b7:10:3c:14:a1:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug  5 15:43:54 2025 GMT
            Not After : Nov  3 16:43:54 2025 GMT
        Subject: CN=08d6601f-fe35-4fc6-a030-e831905170a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:d5:97:57:aa:0e:b5:44:b8:43:2e:40:ab:
                    ef:61:e3:72:e9:d0:f6:1d:af:f0:4d:48:35:c1:29:
                    56:15:26:dd:6c:5e:f1:64:76:6a:17:34:b0:94:f4:
                    80:87:57:e6:e8:de:d3:2e:35:81:22:b5:b4:d0:4e:
                    af:79:d8:30:ff:e4:17:ff:68:d2:c2:fe:65:d8:47:
                    e7:26:f7:e2:61:eb:04:e1:69:d8:a4:3f:90:f3:2f:
                    6c:11:95:0c:c3:b0:c3:c3:45:28:1b:9a:a1:12:b5:
                    80:e4:2f:7a:73:0a:45:d0:ef:49:6b:d8:03:b8:63:
                    dc:54:45:0a:88:6b:19:27:d9:b8:52:56:cb:fc:6d:
                    ff:1b:17:19:1b:67:e8:54:5f:d0:20:7d:3f:ec:41:
                    7c:fc:24:dd:8a:91:c0:e6:24:b6:b3:fa:ec:60:0c:
                    79:b9:5c:9a:5c:0d:29:9e:3c:0c:6b:30:d2:8c:94:
                    d3:3b:a7:f4:1b:15:23:1c:4d:63:e8:72:7d:54:37:
                    66:b0:cb:8d:b2:25:7f:18:7e:1d:c4:db:f4:53:ee:
                    bd:60:75:9b:ec:de:7c:dc:76:df:cd:70:db:35:9d:
                    52:f4:63:c0:56:8a:b5:da:bc:c1:88:30:87:d9:ad:
                    34:f5:70:9a:b1:16:fa:30:df:2f:d7:e2:bf:9d:31:
                    c3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B2:6A:9C:C9:5F:AB:CB:B2:1D:5C:26:48:74:3A:40:D5:C1:2B:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/16705422-4822-347d-b5ef-296575229cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:272::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c7:85:5f:96:5a:62:fa:e9:c2:64:4f:49:bf:eb:00:b2:df:
         6a:d7:27:70:8b:9f:bc:43:5a:fc:fc:d0:f7:7a:2a:40:ca:43:
         7a:14:ec:fb:1f:85:f3:b8:8c:ee:3c:cc:15:ef:44:3b:82:38:
         f3:7c:f6:5f:60:e6:b7:0f:a7:40:5c:6b:d1:94:6e:3d:a1:bd:
         f3:7c:f3:26:35:91:6c:6a:42:19:81:8f:80:86:7a:61:08:e4:
         8d:a4:79:61:9b:ad:7b:07:bd:95:fa:f1:48:49:4a:c2:f3:39:
         a3:a3:e8:ea:2b:6c:7d:74:e9:e2:fc:28:18:5d:98:d0:a5:df:
         cd:82:78:49:9a:ad:5c:e5:21:c3:b8:38:54:34:23:8f:2f:09:
         ac:b3:b0:44:49:5d:46:b3:f0:ec:4a:2d:be:91:74:20:19:e5:
         10:ad:26:66:07:01:ef:b0:54:4d:6c:b5:79:4c:f3:24:7a:46:
         a7:b4:e3:58:4c:e6:41:78:76:82:ad:5a:36:9c:47:6c:0d:57:
         47:d9:05:d8:be:9a:89:65:ee:17:4f:ce:31:c6:d9:39:cb:14:
         58:e7:a1:2e:7b:03:82:0b:b2:ea:34:43:b8:e8:f1:bd:39:dd:
         90:ee:89:e4:2b:02:45:f9:90:ef:96:c8:fd:97:4d:bd:28:78:
         fa:d6:a5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:48:39 2025 by rpki-client