Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b34b4cc7-14c7-3b1f-bf89-ef9f60211037.roa
File:                     b34b4cc7-14c7-3b1f-bf89-ef9f60211037.roa (raw, json)
Hash identifier:          bXQvWPpmVJIgZOke0mDZ2uer13MQCx9x/sPxn8ejUgk=
Subject key identifier:   AB:7D:D2:5D:34:43:FC:37:E8:A9:F2:48:01:F9:D8:39:6F:81:05:32
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB45D2C9278DFE62ED7C93A00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b34b4cc7-14c7-3b1f-bf89-ef9f60211037.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     3360
IP address blocks:        2607:f028:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:2c:92:78:df:e6:2e:d7:c9:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=029c2606-6847-4c6a-a07b-533c4bd97f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:95:4a:30:d4:b9:65:c8:b6:97:ee:bb:3b:
                    b1:70:58:c6:e9:72:1b:e2:ab:57:f9:b9:1f:e1:12:
                    6d:af:c1:76:0f:4d:7c:54:1a:30:e7:0d:49:7a:1b:
                    ef:0f:97:30:c4:45:2d:15:20:6b:10:3e:1a:e5:e6:
                    21:03:ce:fe:9a:7a:1b:c5:68:52:cc:e3:07:3b:59:
                    65:29:f5:2e:f3:f7:74:5b:63:c2:5c:c9:1e:a0:01:
                    b5:92:80:fd:53:6e:89:14:8d:cd:51:5b:e0:ea:90:
                    39:43:a8:5b:78:b2:a2:fd:0f:3a:81:97:94:b8:ac:
                    77:2c:29:42:a3:16:ef:1c:0f:18:4e:9a:74:a9:5c:
                    0a:90:ef:18:23:be:1d:7e:29:c9:47:6f:17:aa:de:
                    04:c8:40:d0:d3:6b:8a:33:16:0f:68:b4:5d:d5:18:
                    0f:91:23:c9:32:41:bb:ee:bf:94:9d:bb:1a:4d:85:
                    d1:13:50:90:07:ca:c5:ce:0f:7b:89:dc:49:a6:c1:
                    a4:0f:56:6b:2b:b5:fe:30:20:51:bd:57:66:e6:97:
                    e0:8a:96:ea:00:94:1f:3b:17:bd:3b:d1:5d:b9:3e:
                    34:5a:72:1d:f9:76:45:67:d9:fc:7c:fb:ec:13:4b:
                    07:a3:ef:f4:a4:72:f5:8a:28:89:0b:be:4e:96:d5:
                    5a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7D:D2:5D:34:43:FC:37:E8:A9:F2:48:01:F9:D8:39:6F:81:05:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b34b4cc7-14c7-3b1f-bf89-ef9f60211037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:62:77:01:58:5a:c3:2f:f2:6b:fc:c4:70:62:71:a8:c8:88:
         50:21:c3:40:fb:10:dd:b6:07:f6:66:a2:84:de:5b:d6:b6:55:
         39:dc:4d:61:0a:bf:9a:26:f9:81:95:6c:52:d5:28:a3:4d:0f:
         40:e8:56:b7:1a:b3:24:0a:13:a2:8c:00:5e:dd:fb:43:36:94:
         0f:6d:78:3f:b0:04:90:8f:9d:10:71:76:af:cd:79:f7:9a:d2:
         2b:27:40:83:25:f5:5e:6f:23:47:bf:8f:3d:e4:ed:12:c5:7c:
         9c:d9:79:73:38:26:43:6c:66:fe:3f:a0:ee:30:db:ec:76:d1:
         03:80:b5:88:e7:c2:3a:4c:ac:65:02:34:83:e8:3b:3f:e8:a9:
         51:e6:09:de:ad:fa:1f:fa:c9:95:50:3c:fd:f0:61:3e:cc:17:
         42:a4:c1:63:d8:71:c1:99:48:74:fc:ca:bd:6b:4c:6e:84:66:
         c1:be:2d:80:ec:f3:0e:75:5a:b2:c6:09:e7:e1:72:3e:b7:70:
         d0:54:a7:e8:46:be:48:60:12:27:a7:56:fd:32:f3:b4:e7:38:
         f3:1c:25:ea:52:73:44:c7:e7:f2:22:5d:3d:ff:23:8c:1a:cb:
         18:10:d7:ba:36:09:2e:33:2b:4c:31:23:db:ae:38:ae:30:06:
         48:39:62:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:33:37 2025 by rpki-client