Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0a416920-1fdf-3f93-a383-1d8b98b4e940.roa
File:                     0a416920-1fdf-3f93-a383-1d8b98b4e940.roa (raw, json)
Hash identifier:          ZdVEq558WGfg0PiZbqVR7VRcCzaiG9EZXarPn9y/yUk=
Subject key identifier:   E8:3C:39:32:61:12:A5:4A:87:71:02:F5:48:A7:BB:5B:9D:6D:BF:1A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285845963360B99C34D67646D97D00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0a416920-1fdf-3f93-a383-1d8b98b4e940.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     3360
IP address blocks:        2607:f028:142::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:60:b9:9c:34:d6:76:46:d9:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=8d9527bf-3ef7-49fa-9006-cc8a17a4360c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:6f:96:7c:cb:d3:24:be:96:37:0e:c2:78:
                    65:ec:88:44:98:83:b6:b1:f5:7c:e7:69:5d:02:a6:
                    54:71:5a:be:10:85:e5:f9:b0:48:b7:43:75:fe:86:
                    a2:61:b9:55:99:c3:3a:09:ce:28:2d:40:0e:6c:c9:
                    6b:cb:b1:66:ff:21:30:0e:72:a8:55:0f:61:d4:b5:
                    1c:52:97:63:ee:8d:38:64:3d:65:68:c0:20:20:67:
                    3f:e1:2c:e6:51:13:c4:8b:4a:a2:90:cf:fe:6c:a3:
                    03:7c:db:30:7e:95:d0:df:0b:65:08:25:68:8e:72:
                    e7:39:63:94:59:e1:bc:a7:b1:a9:39:de:c0:c3:6f:
                    6d:70:97:25:ab:d0:83:4c:cf:6d:b4:eb:41:76:80:
                    42:9f:6c:b8:6d:4d:f7:cd:79:6e:90:21:a2:4e:d4:
                    2d:a0:0b:c4:6a:da:7b:90:a7:37:8c:87:5a:98:99:
                    e5:f9:46:17:af:65:f5:5f:a7:69:4d:9d:fd:0a:76:
                    5e:eb:5f:09:1d:66:ef:63:b8:a9:73:b4:a2:2b:71:
                    51:b3:bd:c4:b5:67:d1:27:e1:11:f3:0c:78:02:f7:
                    ad:b4:a2:3a:3f:3a:97:c1:37:f8:ee:69:8a:6c:d6:
                    33:4e:2d:19:8f:0e:1d:26:86:e3:77:f3:7d:60:08:
                    a1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3C:39:32:61:12:A5:4A:87:71:02:F5:48:A7:BB:5B:9D:6D:BF:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0a416920-1fdf-3f93-a383-1d8b98b4e940.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:142::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:54:7e:64:34:77:80:05:84:f8:fd:e0:32:a2:d5:ac:30:6b:
         f3:f5:37:b9:2e:55:82:a8:6e:3d:3a:ee:34:a6:9b:26:7d:5b:
         40:b4:ca:d8:94:2d:38:a9:8f:7a:01:4d:18:44:8a:a6:e6:f4:
         11:0f:f6:38:5c:da:3d:21:f9:d9:87:eb:5c:92:f3:62:c3:e2:
         34:f2:f3:79:7e:b0:40:84:f5:40:c3:03:e3:11:06:08:23:1b:
         54:a3:9b:98:f8:a2:3b:52:e0:2f:ff:ce:d1:89:dc:a1:5e:63:
         7b:d9:92:cd:09:79:81:1e:c4:0f:36:aa:16:58:cc:f3:e7:aa:
         c6:28:db:54:f4:32:f3:4a:49:6e:06:38:86:5a:2d:54:ca:d3:
         18:f9:e2:bb:14:e1:c6:f2:9a:c1:b1:f2:86:a7:b9:1f:38:0a:
         11:46:92:2e:cc:b6:6a:6d:a4:36:1e:e1:08:b2:c1:9a:f1:75:
         31:a1:b3:f2:ca:ec:50:7c:36:e6:b6:d3:a0:59:54:0b:a0:2e:
         4d:35:d7:b1:86:4d:35:98:cd:b2:f2:4a:70:af:1f:2d:58:73:
         59:e0:30:a9:e2:6b:3a:6d:e8:e7:f5:15:9c:51:81:9e:55:96:
         1c:83:5d:62:c2:b6:de:6b:78:10:fb:73:1c:35:02:13:a4:91:
         7b:83:63:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 02:54:32 2024 by rpki-client on console-ams.rpki-client.org