Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/178f08d9-1c65-3b9a-85f1-c45c2bce862f.roa
File:                     178f08d9-1c65-3b9a-85f1-c45c2bce862f.roa (raw, json)
Hash identifier:          r5NaH0MHDzvd/Egaq4Dw0C83KnRq6Pw0tJhlgzMaDbg=
Subject key identifier:   38:77:03:E9:E1:F9:29:D8:AD:A5:D1:02:69:B5:4E:CF:EE:93:E7:E2
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB45D2A453ACAFF09DD5F9880
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/178f08d9-1c65-3b9a-85f1-c45c2bce862f.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     3360
IP address blocks:        2607:f028:62::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:2a:45:3a:ca:ff:09:dd:5f:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=6db49747-3578-4ce6-b3a7-a1217d6069b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:c3:e1:72:48:bb:47:2d:af:b2:68:67:48:
                    8d:37:98:6b:da:80:72:31:be:2e:b3:b5:4b:ce:50:
                    d9:65:0c:a5:c8:d7:8b:49:04:00:bd:30:73:4f:d2:
                    fb:89:e1:2d:8a:a3:a9:f0:3f:67:3e:8e:66:92:bf:
                    7d:6e:65:69:78:fc:59:0b:73:6e:12:ba:af:51:b1:
                    c5:0c:85:54:5f:06:36:6d:16:9f:16:6e:9c:c4:5b:
                    68:5c:4e:31:34:9b:95:48:dc:a5:27:eb:60:08:c0:
                    ea:35:b8:d7:28:b4:ac:65:d6:84:b8:58:bd:e9:e4:
                    88:cd:e1:89:9f:2d:79:a5:c8:6c:b2:05:5f:2b:13:
                    84:bb:aa:db:09:97:a8:44:ee:ae:88:e4:e4:5e:04:
                    c6:b1:42:6a:a7:67:0c:4b:85:41:44:58:ee:28:33:
                    da:7e:7f:f3:6b:66:8a:f8:9a:14:44:90:5c:f8:83:
                    e7:aa:18:a8:33:2e:44:31:82:e1:a8:b5:29:97:8a:
                    4f:1e:30:d6:24:c5:05:5b:2e:9e:48:1c:94:c1:04:
                    ec:17:5a:fa:b8:ea:16:18:1c:b4:84:2f:9e:02:2f:
                    7a:9c:3b:ae:b7:00:1b:52:50:20:31:f0:17:01:15:
                    02:dc:ed:7e:35:d4:9a:bf:7e:1b:e0:e7:eb:02:7c:
                    33:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:77:03:E9:E1:F9:29:D8:AD:A5:D1:02:69:B5:4E:CF:EE:93:E7:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/178f08d9-1c65-3b9a-85f1-c45c2bce862f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:62::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9e:32:c5:31:22:7f:a7:20:10:0c:a5:71:0a:25:c4:29:f1:
         a7:e6:85:d3:55:76:10:fc:73:1d:af:a2:e8:8b:3e:75:32:0a:
         65:09:92:e4:de:22:37:0e:23:bf:9b:27:ad:f3:43:e0:0f:78:
         34:48:f3:a2:24:06:6d:98:25:c3:41:93:88:09:1d:af:75:14:
         c7:30:f1:9b:c5:a0:8c:32:1e:6e:ab:e5:02:c9:3c:88:e7:01:
         eb:d5:b3:39:7a:67:4b:44:78:ac:6b:cb:83:b5:7f:b9:c3:75:
         bc:31:dc:7c:77:f3:3c:c7:56:c0:d3:08:1e:7c:72:ad:e0:c8:
         9e:26:c3:fd:73:d4:f4:44:5a:db:f5:c4:01:dd:54:35:8e:5b:
         fe:88:9f:f1:49:c3:8c:71:1b:5e:98:62:05:99:af:47:02:70:
         79:0b:8a:60:85:26:b2:87:ba:62:7a:34:26:cc:e5:cf:5b:a5:
         2e:35:4f:1d:fa:b2:13:0d:91:00:54:18:7d:bf:42:d1:de:08:
         cd:7c:56:78:d5:34:ef:3d:71:16:57:2e:0c:c2:44:0c:14:7f:
         e4:9d:fc:a3:66:d4:79:7e:bf:f1:9c:46:ed:75:54:c3:3a:de:
         26:17:e5:83:f2:88:8d:3d:24:4d:45:13:d8:cf:ae:02:08:01:
         65:74:b1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:26:53 2025 by rpki-client