Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6b448742-7a7a-3542-9d8f-8a9e9e60a27c.roa
File:                     6b448742-7a7a-3542-9d8f-8a9e9e60a27c.roa (raw, json)
Hash identifier:          lnpgZpY8nCTEU2ACWZzb1tZvPqbWxnZREPsT3TjIHbg=
Subject key identifier:   18:00:4D:6E:44:BF:04:DA:FE:46:59:6C:22:C2:F1:09:28:E0:0E:EF
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AC113ACA755076FEDEA663B80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6b448742-7a7a-3542-9d8f-8a9e9e60a27c.roa
Signing time:             Tue 05 Aug 2025 09:31:25 +0000
ROA not before:           Tue 05 Aug 2025 09:31:25 +0000
ROA not after:            Mon 03 Nov 2025 10:31:25 +0000
asID:                     14618
IP address blocks:        2607:f028:281::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c1:13:ac:a7:55:07:6f:ed:ea:66:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug  5 09:31:25 2025 GMT
            Not After : Nov  3 10:31:25 2025 GMT
        Subject: CN=9252abf5-87c5-42ae-bac5-c9a6b62926d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c0:df:df:4d:76:ac:14:c7:b7:85:4f:ae:7f:
                    6d:74:51:76:2e:34:5f:81:2f:8e:48:d7:87:7b:a3:
                    8b:51:ad:52:07:1d:0b:84:9e:5b:64:80:39:3a:93:
                    c2:4f:16:96:71:b8:98:31:0f:d2:5b:17:23:a8:26:
                    d9:7b:2c:b2:d9:30:4b:a4:22:0f:68:9d:3b:6b:cb:
                    a2:e4:db:9b:be:20:b2:3f:99:b8:af:b3:84:c2:ec:
                    7e:bd:7c:5e:17:fc:25:e1:ab:69:0c:a8:e7:6e:da:
                    c5:b6:34:bf:36:62:a9:58:53:0b:15:b1:70:b0:b7:
                    41:1c:24:09:39:98:71:4e:75:15:40:24:c7:c0:8d:
                    fc:e1:f9:08:0e:c5:8a:b3:9d:41:3c:93:6f:8c:86:
                    59:ed:f2:56:f9:8a:9a:78:2c:78:36:54:da:0e:a2:
                    86:09:bf:0e:10:4e:94:0b:de:42:12:bb:6d:c1:81:
                    27:45:62:71:9e:49:34:27:62:93:ee:79:95:d3:b0:
                    3e:6d:a4:ae:93:75:a6:3b:01:13:e4:c0:0c:d1:41:
                    71:58:9c:2f:45:e4:39:f1:58:48:6c:16:7d:3a:3d:
                    b0:e0:62:37:2b:de:81:8f:94:57:21:59:08:2a:b9:
                    97:ca:ae:79:ab:9f:1b:36:b5:9b:46:28:33:d8:4e:
                    9a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:00:4D:6E:44:BF:04:DA:FE:46:59:6C:22:C2:F1:09:28:E0:0E:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6b448742-7a7a-3542-9d8f-8a9e9e60a27c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:281::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9f:de:2c:e6:8b:fe:ea:e7:ea:10:df:20:38:f8:ae:a1:fa:
         db:49:dd:c1:c8:0f:95:a3:25:f0:d5:27:1d:5e:7b:62:39:b0:
         84:27:5e:db:db:1c:40:09:0c:ba:e0:af:9e:37:de:34:5d:f0:
         8a:6e:3f:75:f0:7f:8e:fe:51:f9:40:71:51:49:dd:d4:a1:0f:
         e4:fa:31:30:50:94:ef:ea:17:97:58:c9:fb:4d:30:66:af:34:
         7c:19:32:12:61:7a:9f:eb:18:42:0e:45:a9:f5:0a:0d:cd:0f:
         3c:d3:40:36:01:46:f9:d4:4e:1e:02:6d:f1:01:f4:85:35:ae:
         cb:93:db:6b:13:32:db:42:4f:bd:21:4a:d0:fd:54:1e:13:89:
         14:61:af:05:f6:3e:05:83:9a:c1:72:22:f5:a3:c4:99:25:11:
         24:55:fe:5a:b6:fd:92:fb:04:28:1b:f6:68:3b:35:b9:e2:1c:
         b9:b5:9a:63:4d:01:aa:4a:62:e9:db:b7:c1:52:42:ec:45:d7:
         b7:71:0f:c0:37:c1:2a:f5:f9:15:6e:36:3e:00:23:55:9f:fa:
         e2:02:20:5d:a1:ee:b4:c0:7c:13:26:e1:5e:aa:a2:b1:52:2c:
         f2:07:36:4f:0d:c3:8e:f7:de:26:4a:b6:25:b9:dc:ab:50:cb:
         a1:ec:72:af
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErBE6ynVQdv7epmO4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDgwNTA5MzEyNVoXDTI1MTEwMzEwMzEyNVowLzEtMCsGA1UEAxMk
OTI1MmFiZjUtODdjNS00MmFlLWJhYzUtYzlhNmI2MjkyNmQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cDf3012rBTHt4VPrn9tdFF2LjRfgS+OSNeH
e6OLUa1SBx0LhJ5bZIA5OpPCTxaWcbiYMQ/SWxcjqCbZeyyy2TBLpCIPaJ07a8ui
5NubviCyP5m4r7OEwux+vXxeF/wl4atpDKjnbtrFtjS/NmKpWFMLFbFwsLdBHCQJ
OZhxTnUVQCTHwI384fkIDsWKs51BPJNvjIZZ7fJW+YqaeCx4NlTaDqKGCb8OEE6U
C95CErttwYEnRWJxnkk0J2KT7nmV07A+baSuk3WmOwET5MAM0UFxWJwvReQ58VhI
bBZ9Oj2w4GI3K96Bj5RXIVkIKrmXyq55q58bNrWbRigz2E6a5QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBgATW5EvwTa/kZZbCLC8Qko4A7vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmI0NDg3NDItN2E3YS0z
NTQyLTlkOGYtOGE5ZTllNjBhMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAKB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD2f3izmi/7q5+oQ3yA4+K6h+ttJ3cHID5WjJfDVJx1ee2I5sIQn
XtvbHEAJDLrgr5433jRd8IpuP3Xwf47+UflAcVFJ3dShD+T6MTBQlO/qF5dYyftN
MGavNHwZMhJhep/rGEIORan1Cg3NDzzTQDYBRvnUTh4CbfEB9IU1rsuT22sTMttC
T70hStD9VB4TiRRhrwX2PgWDmsFyIvWjxJklESRV/lq2/ZL7BCgb9mg7NbniHLm1
mmNNAapKYunbt8FSQuxF17dxD8A3wSr1+RVuNj4AI1Wf+uICIF2h7rTAfBMm4V6q
orFSLPIHNk8Nw4733iZKtiW53KtQy6Hscq8=
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:32 2025 by rpki-client