Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61999f0d-5130-356e-a216-b4c008444000.roa
File:                     61999f0d-5130-356e-a216-b4c008444000.roa (raw, json)
Hash identifier:          2hm0+KSofYw1/Io4NwbYo6jf6ff9LWKhCPQQVqAIm5Y=
Subject key identifier:   BD:B2:9E:B2:CB:30:38:6B:3D:30:DC:31:BC:B8:9A:2A:10:15:1E:02
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F2E542D09811A52C1F1262E0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61999f0d-5130-356e-a216-b4c008444000.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     202
IP address blocks:        2607:f028:132::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:42:d0:98:11:a5:2c:1f:12:62:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=76e8e4ce-9b81-4fce-a114-99cfea99656d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:f1:7f:9e:13:93:c4:ef:54:6e:3e:34:30:
                    76:8b:86:b7:ac:7a:4b:da:65:0a:db:39:fa:97:85:
                    be:e4:f2:31:79:40:bf:f3:40:1b:1f:74:18:54:55:
                    27:9c:97:97:8f:c8:8f:6e:d2:52:3d:80:dc:34:b0:
                    fd:7f:29:87:07:0a:ac:26:f4:7f:bc:a2:52:39:0c:
                    1e:39:e5:cb:b6:65:ac:8a:29:bb:88:cf:ec:77:53:
                    af:42:71:e5:f0:c0:c0:40:7e:66:59:19:4c:a0:80:
                    70:c4:67:92:93:b2:2c:81:cb:68:9b:50:75:5d:4f:
                    7a:49:ad:37:f4:06:98:39:f7:22:34:e9:fb:13:c0:
                    c4:cb:a3:57:5a:51:5a:34:43:5d:44:5c:d9:8a:9f:
                    bb:70:54:1a:ff:d4:08:8a:0e:af:7f:19:49:93:9c:
                    4b:d2:80:a9:4a:15:31:5d:54:0a:4e:ae:7e:21:f4:
                    b4:1b:75:44:a9:88:15:af:9c:fa:de:dd:75:38:76:
                    d7:06:bf:35:0c:97:f6:e9:e1:38:10:d7:50:f6:9a:
                    2d:13:37:d0:c4:68:46:03:d6:49:56:fd:a2:59:a3:
                    f1:de:f6:8e:3d:bb:a9:37:fa:5c:da:10:7a:07:0d:
                    6c:92:3f:8a:89:e3:dd:34:6c:c8:8c:10:6c:f3:f1:
                    b9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B2:9E:B2:CB:30:38:6B:3D:30:DC:31:BC:B8:9A:2A:10:15:1E:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/61999f0d-5130-356e-a216-b4c008444000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:132::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:13:c5:53:28:41:27:0e:7f:ca:13:e6:cf:9c:54:df:b6:09:
         23:cd:e7:70:e1:81:40:bc:16:2b:e5:a0:8e:06:82:81:4d:f9:
         9a:33:64:14:ba:ed:81:02:5d:1d:52:10:d6:ce:69:a3:da:dc:
         c7:0f:25:5d:4d:e3:52:8a:1c:81:c7:3d:68:95:39:37:ed:6c:
         f6:51:22:1f:67:06:23:d1:08:e7:bb:bf:82:b1:f8:0d:e4:93:
         29:b1:32:62:c6:9c:76:1b:c7:f5:cb:72:52:0f:2b:ec:de:30:
         3c:a8:2e:a6:dd:7b:70:0d:3e:5c:07:52:70:44:f5:43:a5:eb:
         de:db:2b:98:67:89:4b:7c:6c:c6:d9:2a:2d:bb:c5:8e:6c:19:
         b6:a9:ce:76:57:d9:2a:63:2a:0d:d1:85:11:35:e9:13:aa:e0:
         72:c7:93:dc:e7:9b:e1:b1:88:af:a5:19:b3:34:03:65:91:c4:
         47:83:59:1e:96:b2:d9:81:81:ef:21:cd:47:f3:8f:2c:1c:8d:
         a4:62:ca:6f:c6:38:3c:5a:2f:39:1d:64:c6:c9:38:2f:30:55:
         7f:43:0e:c3:64:fa:42:96:c1:4b:91:92:03:b7:57:3c:e8:15:
         0d:81:73:f5:d7:49:a5:e7:41:3e:06:be:c1:5e:75:79:49:d0:
         62:cd:cc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:49:51 2025 by rpki-client