Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/64397822-2a0c-33ef-a18f-86fbba6436f2.roa
File:                     64397822-2a0c-33ef-a18f-86fbba6436f2.roa (raw, json)
Hash identifier:          h7zcIqIwVepBhhxHjstFaVXy183YD3LOrGGOXVUMKg8=
Subject key identifier:   28:89:E9:10:71:30:96:8B:8F:72:BF:82:3E:72:C8:8A:9C:46:A7:E0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285849F2E54209179180B7D6D46770
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/64397822-2a0c-33ef-a18f-86fbba6436f2.roa
Signing time:             Fri 23 May 2025 13:01:03 +0000
ROA not before:           Fri 23 May 2025 13:01:03 +0000
ROA not after:            Thu 21 Aug 2025 13:01:03 +0000
asID:                     203
IP address blocks:        2607:f028:71::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:e5:42:09:17:91:80:b7:d6:d4:67:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: May 23 13:01:03 2025 GMT
            Not After : Aug 21 13:01:03 2025 GMT
        Subject: CN=238bb758-5e9b-4abc-b164-fa0f3a6538a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0c:0d:b3:27:78:da:14:e9:8d:53:90:d4:bc:
                    1b:77:a7:fc:21:e3:1c:13:7f:3c:c2:19:67:c2:f4:
                    f6:9e:92:54:46:3d:63:2d:26:91:d2:1f:98:1a:f2:
                    f2:d1:1a:dc:86:c6:9b:54:89:e5:d1:20:3f:b5:b5:
                    42:ea:be:5b:d5:3a:57:ca:36:1e:82:3a:46:c2:3b:
                    60:4f:b8:d9:8f:39:91:8f:0a:c6:9f:2e:a0:ca:a4:
                    b2:db:bf:74:25:80:2e:ea:b7:a1:3a:d5:29:e2:cc:
                    ff:2e:ff:7d:d9:ce:ad:dd:bb:e3:5a:f6:26:6b:97:
                    1c:23:0e:d6:7d:57:63:45:2b:49:8a:6b:cf:b8:03:
                    ed:95:37:99:c3:99:0c:9c:14:66:8f:e0:fe:5a:1e:
                    2a:69:4f:eb:b0:de:28:a4:1d:40:b6:41:8b:f0:6c:
                    17:95:06:ab:2b:c1:00:32:4a:23:52:da:19:b8:18:
                    f8:51:d8:3d:43:a7:bc:cd:d1:ef:09:7e:45:dd:61:
                    68:12:22:a8:ae:cf:d3:84:45:80:ca:f6:cf:38:b6:
                    5c:6c:74:2f:e6:5d:2d:0d:84:69:6d:91:63:99:86:
                    07:ab:5b:df:17:59:eb:e7:97:ab:5f:98:d0:fa:d7:
                    37:f9:c1:f7:9a:2f:f0:e8:56:68:ab:41:25:ae:c6:
                    01:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:89:E9:10:71:30:96:8B:8F:72:BF:82:3E:72:C8:8A:9C:46:A7:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/64397822-2a0c-33ef-a18f-86fbba6436f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:71::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:fd:27:3a:c7:65:99:f5:ea:a1:57:e7:3b:67:8d:90:33:a0:
         a6:59:3b:f3:2e:50:a4:df:81:26:d9:9d:d3:61:2b:51:5e:a7:
         fb:7f:46:5b:5e:23:d6:86:4d:21:6c:83:d2:fb:8c:df:d2:57:
         7f:92:73:cf:3d:b2:40:77:94:0f:63:0f:f1:53:41:4c:68:aa:
         9c:c5:ab:24:3e:be:da:31:d2:0e:00:fe:89:3d:3c:c1:28:f1:
         72:59:3f:f4:39:de:b3:75:7c:a5:9b:10:6f:27:01:f9:0f:f8:
         c5:46:a9:53:a0:d2:a0:fa:64:15:df:e5:00:59:3e:eb:de:c4:
         ce:2d:11:18:86:be:f5:bc:91:8c:97:ce:18:4a:e8:d1:de:31:
         35:47:75:30:dd:94:15:87:03:3a:23:d7:62:88:dd:0d:67:ca:
         0c:7c:2b:be:4d:cc:f1:d4:44:b6:f6:29:93:c7:cb:09:80:7f:
         01:ad:3f:9e:09:5c:6e:c7:66:e2:8b:88:92:40:67:33:4a:52:
         8d:a1:38:77:a3:e4:dd:e9:d2:ae:e5:82:a5:61:15:33:56:05:
         60:69:14:d1:d1:f2:f1:df:16:5e:91:5d:d9:4f:e8:fb:e7:8d:
         3d:f4:38:4a:e4:f7:96:58:24:9f:fa:2b:d0:69:b2:15:3c:9c:
         a0:27:0d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:46:49 2025 by rpki-client