Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6d22ea68-46a4-31da-ad5e-09a1d3b8268b.roa
File:                     6d22ea68-46a4-31da-ad5e-09a1d3b8268b.roa (raw, json)
Hash identifier:          JrgDHTG2rMrNA7ZQ3ododaE51C64xuXEdO+Ix7afnyU=
Subject key identifier:   E1:1C:8F:B3:C7:C1:B1:E8:33:0A:16:42:51:C3:E8:D4:7B:3C:C4:82
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB45D2B285D5C002D9C380980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6d22ea68-46a4-31da-ad5e-09a1d3b8268b.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     202
IP address blocks:        2607:f028:131::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:2b:28:5d:5c:00:2d:9c:38:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=d07662af-ca10-4340-b49e-c0c5c75ae8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:00:75:8e:eb:c8:8b:b8:f0:2c:93:8d:e1:f8:
                    3c:8f:6d:95:7e:d5:99:04:83:52:e9:23:bc:c3:ec:
                    f6:e8:bb:25:ae:e4:67:e8:ea:bd:f8:5e:b7:b7:37:
                    15:bb:27:ce:84:8b:85:79:11:57:a4:b8:4c:52:1c:
                    5b:c5:0c:b5:23:6b:f6:82:99:35:9f:13:d8:05:54:
                    26:28:ae:08:64:80:82:56:30:0a:fa:34:38:ab:8f:
                    8c:2f:ee:27:9a:d6:9e:8b:36:e6:8c:af:87:8f:00:
                    31:40:c6:e6:ab:09:64:70:ee:d2:df:e6:40:ba:a0:
                    d0:c4:bc:95:51:14:03:dd:cf:2d:10:90:15:f4:5b:
                    15:7b:dc:81:25:fa:7d:e6:34:3c:fc:d6:69:03:2e:
                    fa:c6:9a:7c:95:89:6e:df:6c:0d:1a:2b:1c:1f:b8:
                    9f:73:36:ad:dd:83:c0:8c:84:c6:30:91:0b:e0:85:
                    00:cf:49:dc:27:ae:82:2b:33:d5:8d:78:0c:a3:b9:
                    ef:1d:28:64:7f:b8:74:00:b9:74:9a:6f:f0:91:3b:
                    1d:f4:b1:69:b3:77:c6:a0:ff:3d:46:ce:cb:18:9a:
                    1e:75:4a:4a:52:2a:dc:28:a5:cc:e5:2b:d9:a6:78:
                    9a:a0:2f:0b:77:3e:ff:0a:d6:5b:43:03:9c:8e:b1:
                    6b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1C:8F:B3:C7:C1:B1:E8:33:0A:16:42:51:C3:E8:D4:7B:3C:C4:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6d22ea68-46a4-31da-ad5e-09a1d3b8268b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:131::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:13:ba:92:bd:de:a9:67:fa:f0:90:15:37:64:b5:95:44:06:
         64:e1:d7:b5:44:f6:42:d5:e9:f2:1d:0b:42:20:0c:0a:35:f6:
         2d:9e:6b:83:a3:26:e5:98:87:37:9a:1d:10:7c:83:cf:df:c8:
         50:fe:37:43:3c:2b:cc:b9:32:e3:d2:50:27:3d:51:03:11:10:
         a5:7c:91:c5:42:e6:20:c5:1c:94:50:39:9d:70:41:01:82:e1:
         22:da:0e:0b:a0:fb:16:bf:eb:33:cb:7a:2a:ea:c5:a6:be:6d:
         e0:fc:64:e2:7b:39:65:bd:ae:0b:c3:a9:10:9b:b0:28:3f:72:
         cc:4d:87:ac:d6:2c:60:38:a1:a8:83:45:9f:62:d9:be:58:45:
         88:22:13:b4:b4:3f:64:9b:02:2a:e5:44:3d:3b:51:08:f0:40:
         cb:b5:ec:15:f4:73:67:ca:8c:85:50:01:ae:be:26:4e:2e:c6:
         38:98:e6:99:5a:79:76:ff:57:57:a0:35:53:55:51:70:7d:90:
         85:59:5f:07:7f:2b:47:26:74:ab:52:64:af:b9:2c:69:ce:44:
         27:99:50:22:bb:22:ae:4a:47:88:67:64:4a:05:06:b5:37:cf:
         c3:d9:1e:e3:db:6e:29:2c:24:b4:74:11:2d:79:df:e0:4f:6d:
         4a:4a:05:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:26:26 2025 by rpki-client