Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/27ad6e45-7775-341b-a270-31e4034cab7f.roa
File:                     27ad6e45-7775-341b-a270-31e4034cab7f.roa (raw, json)
Hash identifier:          GeQ1TxCL/LDJFqY94iqkGjiZh4hnyB7t/zxccinn+yQ=
Subject key identifier:   95:22:F4:17:0B:5C:BF:63:68:F8:D0:C7:A1:5B:5F:6F:1C:CB:4C:2F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584596335DFB8EBBA56051F41B10
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/27ad6e45-7775-341b-a270-31e4034cab7f.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     202
IP address blocks:        2607:f028:21::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:5d:fb:8e:bb:a5:60:51:f4:1b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=5aa4b58c-2736-46be-a25f-00fef6c37ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:46:4f:15:7b:5a:2d:16:57:8b:f7:d0:18:1a:
                    8a:08:0f:68:da:de:ea:14:82:cb:4c:ad:31:e2:61:
                    05:fd:dc:d8:44:bb:d7:ca:4e:b0:be:eb:c2:3c:8c:
                    e5:6a:7e:12:2b:8a:21:ea:de:81:f2:42:d3:de:41:
                    24:07:ac:a5:da:0b:2d:2c:10:f4:e4:f8:db:8c:e4:
                    62:35:ef:05:41:42:14:a2:9c:15:04:69:0c:b4:21:
                    be:8f:24:1a:3f:71:76:92:98:62:49:e9:d6:26:9a:
                    68:7a:1c:9e:17:e9:a5:56:99:9d:7a:57:23:49:31:
                    da:b9:2b:af:56:0e:b9:3f:28:d5:c8:53:80:04:fa:
                    63:00:fc:2a:e3:84:f8:63:56:04:25:82:1d:0f:d7:
                    18:c5:a5:b4:f1:ce:24:f3:25:96:e5:c2:e8:b8:b2:
                    9e:5f:6c:41:db:ec:ee:28:cf:16:c7:88:a4:97:75:
                    35:24:85:43:16:25:45:6a:86:7f:b2:22:30:71:0f:
                    67:e7:62:ab:47:dc:de:51:1a:5c:5b:cf:fa:b3:ad:
                    0c:da:e8:6e:01:d1:75:6d:89:6c:14:43:8b:69:78:
                    cc:8a:ee:b4:40:12:c1:e6:70:69:05:18:9d:82:2a:
                    95:3b:84:3f:ee:e0:1c:e5:d8:ac:d8:43:2c:cd:ee:
                    ad:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:22:F4:17:0B:5C:BF:63:68:F8:D0:C7:A1:5B:5F:6F:1C:CB:4C:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/27ad6e45-7775-341b-a270-31e4034cab7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:21::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:6b:3d:9e:85:30:80:31:9f:3e:3c:48:94:c3:73:34:68:e6:
         31:1f:b9:33:85:83:63:fb:b9:84:ed:96:14:39:7d:6a:86:61:
         b5:36:b7:01:bd:7d:06:4c:49:43:8e:6a:a7:2c:5a:61:0f:ed:
         f0:55:f7:27:3c:ca:0b:f1:be:0c:8d:bc:15:6a:68:0c:a5:00:
         df:df:93:c4:26:1c:31:1b:f6:bb:bb:bc:cf:95:06:54:3e:93:
         12:3c:6e:92:f5:eb:94:89:83:54:1d:ed:ef:3c:79:79:66:58:
         19:64:15:65:da:b6:d1:e9:7a:1a:e2:1f:20:ee:1d:63:13:a5:
         d5:d4:39:f1:71:9d:90:d0:75:cd:52:e8:10:f5:d3:d2:82:35:
         e8:f5:35:77:03:e6:fb:2a:fe:a2:cd:4d:dd:de:42:6a:53:df:
         50:c7:99:cf:19:ee:46:f7:08:e0:e5:54:0f:1c:76:f0:91:1e:
         55:b1:fb:4c:e8:d0:ec:45:0e:6a:86:cd:1a:13:2e:4e:e6:18:
         1c:4b:8a:23:e7:b2:17:7f:77:e0:4a:d8:29:84:af:6d:9f:81:
         a4:cd:e0:1b:67:0f:69:b8:c9:6a:22:fb:9f:5f:66:11:c5:c9:
         0c:32:8c:b3:ef:7f:5f:6e:dc:af:96:fd:8a:f0:bd:70:2a:f9:
         b7:ab:f0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:28 2024 by rpki-client on console-ams.rpki-client.org