Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f733c5f2-bc12-3156-9ed8-901b469329d3.roa
File:                     f733c5f2-bc12-3156-9ed8-901b469329d3.roa (raw, json)
Hash identifier:          +nBGbLwq1Wrg/i0gg7pIcGEYA5LND7oITrdh19au8x4=
Subject key identifier:   20:ED:9C:56:6E:CD:6D:A3:54:36:E1:6D:CC:69:B0:19:13:B0:04:AB
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584BB45D2B19BA97B9E824DDEC00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f733c5f2-bc12-3156-9ed8-901b469329d3.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     203
IP address blocks:        2607:f028:131::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:2b:19:ba:97:b9:e8:24:dd:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=01f2c260-bd03-4d86-811d-a71e94fe5a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:da:1e:44:aa:2e:de:0b:b9:0a:78:9b:4c:07:
                    43:47:64:55:ad:5d:00:06:32:2f:fe:5f:78:71:a3:
                    96:d9:57:ba:1b:21:10:28:c8:21:88:33:3b:00:de:
                    3d:d0:27:79:3b:0d:94:70:6d:4c:a9:2a:36:c7:76:
                    24:10:0a:08:48:68:38:ea:47:21:ca:2c:48:16:8b:
                    28:b7:e4:29:15:27:a7:4b:53:f6:fd:73:66:72:7f:
                    75:22:2e:30:21:14:37:19:c5:ff:d4:a6:7f:a7:32:
                    01:d5:60:17:df:5f:f4:51:da:1e:6a:57:84:43:af:
                    27:7c:d8:98:38:c0:24:7f:de:ca:1d:dc:da:ac:74:
                    7b:8e:72:96:b8:cb:9c:fc:9f:a0:85:76:e1:aa:4e:
                    e7:0d:c9:a5:eb:2b:30:d9:b5:db:d8:8a:27:43:3f:
                    ad:3c:d9:6e:e8:13:c5:2d:5b:dc:32:62:7c:92:18:
                    bc:94:49:22:27:0b:37:89:c8:fe:8d:18:f0:4b:60:
                    56:58:6a:8f:e2:58:8f:17:02:e7:34:8c:36:1c:07:
                    1b:e6:e0:35:29:f1:87:10:3e:94:69:1a:2c:52:cb:
                    a9:58:b5:9d:51:56:a6:c8:0e:28:67:ad:d8:96:e4:
                    bb:35:e9:75:a6:18:33:58:93:0c:64:db:83:66:91:
                    0a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:ED:9C:56:6E:CD:6D:A3:54:36:E1:6D:CC:69:B0:19:13:B0:04:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f733c5f2-bc12-3156-9ed8-901b469329d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:131::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:8b:de:77:5d:8c:24:a0:43:b9:fe:bb:ff:06:4f:e3:ec:50:
         02:a5:a3:34:64:d0:f2:a9:f9:60:6a:d7:61:52:0c:70:f5:18:
         0e:7c:c2:2e:36:d7:ca:d9:ec:4b:5e:d4:51:76:ad:7a:ea:87:
         1d:c1:9a:f1:39:1f:fa:a4:12:8c:ed:94:4c:0f:32:2d:7c:1f:
         b5:5a:b1:92:da:07:d4:c9:dd:95:97:4e:19:da:e2:66:77:40:
         ed:70:97:cf:c5:ba:d0:b2:b8:2b:3d:4f:1d:c4:d2:4d:97:25:
         a9:64:b7:03:f7:3c:49:a0:a4:9a:d9:ea:33:be:a2:cb:51:c4:
         2e:f3:ac:92:8d:ff:8f:9b:28:28:b1:36:6d:f1:fd:6a:38:1a:
         21:3e:47:c6:84:91:4d:24:87:0f:a5:dc:d4:28:b2:c7:e2:6f:
         8e:c7:53:30:2b:57:ff:62:54:ad:f5:d8:50:92:f9:45:7d:fb:
         d5:1d:ee:fc:83:bd:f4:0a:bb:1e:9f:ef:a7:56:b5:2f:e8:d2:
         b1:ff:c6:2f:08:0b:4d:05:83:3b:fd:dc:16:a4:0a:12:00:56:
         19:9f:e5:a7:e7:95:9d:6f:5f:dd:eb:8f:36:9b:df:eb:8e:aa:
         65:23:8b:b8:e8:68:25:e5:13:99:28:a2:ad:f8:b6:2f:e3:ac:
         15:22:d1:f3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XSsZupe56CTd7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk
MDFmMmMyNjAtYmQwMy00ZDg2LTgxMWQtYTcxZTk0ZmU1YTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9oeRKou3gu5CnibTAdDR2RVrV0ABjIv/l94
caOW2Ve6GyEQKMghiDM7AN490Cd5Ow2UcG1MqSo2x3YkEAoISGg46kchyixIFoso
t+QpFSenS1P2/XNmcn91Ii4wIRQ3GcX/1KZ/pzIB1WAX31/0UdoealeEQ68nfNiY
OMAkf97KHdzarHR7jnKWuMuc/J+ghXbhqk7nDcml6ysw2bXb2IonQz+tPNlu6BPF
LVvcMmJ8khi8lEkiJws3icj+jRjwS2BWWGqP4liPFwLnNIw2HAcb5uA1KfGHED6U
aRosUsupWLWdUVamyA4oZ63YluS7Nel1phgzWJMMZNuDZpEKOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCDtnFZuzW2jVDbhbcxpsBkTsASrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjczM2M1ZjItYmMxMi0z
MTU2LTllZDgtOTAxYjQ2OTMyOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEx
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEaL3nddjCSgQ7n+u/8GT+PsUAKlozRk0PKp+WBq12FSDHD1GA58
wi4218rZ7Ete1FF2rXrqhx3BmvE5H/qkEoztlEwPMi18H7VasZLaB9TJ3ZWXThna
4mZ3QO1wl8/FutCyuCs9Tx3E0k2XJalktwP3PEmgpJrZ6jO+ostRxC7zrJKN/4+b
KCixNm3x/Wo4GiE+R8aEkU0khw+l3NQossfib47HUzArV/9iVK312FCS+UV9+9Ud
7vyDvfQKux6f76dWtS/o0rH/xi8IC00Fgzv93BakChIAVhmf5afnlZ1vX93rjzab
3+uOqmUji7joaCXlE5kooq34ti/jrBUi0fM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:28:20 2025 by rpki-client