Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/349b3d5f-f6c1-3d8b-9d01-62a4402f9d65.roa
File:                     349b3d5f-f6c1-3d8b-9d01-62a4402f9d65.roa (raw, json)
Hash identifier:          7dx7Dcjr4Mn3fAEookQmdm/7g2Pku9Yk7QiNBlwnJNw=
Subject key identifier:   86:3C:FE:32:63:95:CF:61:FF:A8:D3:B4:8A:C2:AE:4B:C5:8C:26:DE
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB45D297C1E01C47E8CB96600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/349b3d5f-f6c1-3d8b-9d01-62a4402f9d65.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     203
IP address blocks:        2607:f028:51::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:29:7c:1e:01:c4:7e:8c:b9:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=b439dfd9-d259-4119-b7e4-98b11bc7b6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:32:8e:a9:a8:da:08:2c:9c:32:dc:e8:93:f0:
                    af:5e:a3:c0:e3:5d:99:46:e0:3a:32:97:15:6c:ba:
                    f1:86:be:c5:fe:e1:b7:aa:32:b5:31:b9:52:13:c0:
                    a4:93:6d:51:5b:54:46:c5:b9:cd:40:a8:9d:8f:c2:
                    8a:d7:a6:ff:eb:62:16:d1:e5:99:4d:f0:0b:5b:63:
                    f6:32:87:5d:b5:78:94:84:68:72:66:04:d6:be:57:
                    c2:fe:97:e9:f6:7e:b7:00:87:59:26:3f:d6:e2:97:
                    33:8d:62:9f:76:c3:f0:66:03:62:0c:c6:ea:92:50:
                    f6:7b:78:09:b2:82:0c:8d:f0:ef:f3:31:2e:68:8d:
                    54:4f:3b:3c:15:8e:0b:bf:3d:0d:40:16:ef:4f:01:
                    af:6a:b7:7e:66:b5:cd:37:45:22:97:81:0b:3f:86:
                    fc:d7:82:a1:e1:63:e4:18:cf:88:0a:2d:3b:34:07:
                    9a:17:70:dc:2a:6f:ac:58:53:20:ce:f0:0b:51:f9:
                    c1:0f:6c:db:8b:e1:7a:fd:ad:3b:6b:b8:7f:52:d6:
                    a2:e0:ec:cc:b3:9e:91:24:d7:45:2e:0d:10:30:77:
                    d6:9c:a8:e9:05:b7:ef:db:53:84:66:ae:72:2c:20:
                    87:99:0a:45:1e:2e:a9:cd:a8:ca:0b:a1:02:27:4b:
                    81:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3C:FE:32:63:95:CF:61:FF:A8:D3:B4:8A:C2:AE:4B:C5:8C:26:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/349b3d5f-f6c1-3d8b-9d01-62a4402f9d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:51::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:50:81:83:c6:89:f2:83:0a:f6:9a:5f:32:39:7b:75:4a:41:
         7b:fb:6f:0c:60:d8:8d:e5:d9:53:8c:f1:0a:01:3d:81:f4:99:
         92:fe:8f:4c:cb:63:2e:a4:34:d4:2c:d0:d8:96:38:87:71:f0:
         eb:9d:3f:2a:0f:52:91:a2:93:44:41:6e:29:01:57:bc:83:a8:
         ed:1d:ec:ce:a3:d0:78:78:4e:c3:96:04:71:e6:28:74:1d:be:
         40:f0:73:5e:e2:28:ee:5c:36:ef:a4:f9:b8:cf:c2:71:7f:ea:
         2e:e4:f3:a6:72:5e:3c:28:f7:4b:c1:e9:70:3f:ea:d2:df:c7:
         72:dd:f9:11:c2:a0:7b:9f:f4:b4:b8:19:33:77:07:f3:89:e7:
         53:0a:0d:7f:05:9c:5e:47:6d:eb:26:f2:68:0e:78:e1:ce:ba:
         1c:0b:27:df:de:d5:fd:ba:d5:eb:15:01:78:ff:17:4c:87:77:
         85:5c:12:7e:51:29:d0:4c:1c:c2:71:a1:ee:b2:73:4b:8c:97:
         56:72:0e:c6:53:e6:35:e8:fb:f4:c1:99:28:cd:7f:91:63:72:
         4e:49:06:1d:9f:1f:76:bf:10:e5:05:1c:42:62:4f:ec:68:86:
         e0:cf:d6:5f:30:31:70:b2:0c:9b:83:c9:e0:2d:aa:c9:da:fe:
         a1:3f:03:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:05:05 2025 by rpki-client