Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/722582a2-641d-3e58-a1e8-81e9e14d2d86.roa
File:                     722582a2-641d-3e58-a1e8-81e9e14d2d86.roa (raw, json)
Hash identifier:          JlBCaLo55vzAfCPtNeMzVTOJZT6Uk4j/2Uf6NXQIGto=
Subject key identifier:   3D:78:17:6D:9A:F6:92:9A:09:B5:FE:3F:F7:E8:AA:04:D9:80:09:57
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584596336765BDB61630E59DB660
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/722582a2-641d-3e58-a1e8-81e9e14d2d86.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     3360
IP address blocks:        2607:f028:101::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:67:65:bd:b6:16:30:e5:9d:b6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=2836d57c-34ad-4dc8-b3c3-b08888996aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1d:68:d7:9e:3f:f0:e6:17:47:37:b7:42:dd:
                    33:8a:85:f3:fd:3b:60:12:20:bf:6b:26:3d:97:26:
                    90:77:85:c1:02:31:54:c2:a9:6c:49:47:e9:07:15:
                    c6:ca:43:16:90:e9:43:19:ac:01:50:2b:8b:5a:4d:
                    d4:47:b1:dd:0a:35:75:36:ea:5a:b0:bd:40:95:4d:
                    f7:46:23:16:96:59:cc:e1:a6:24:75:79:ed:c8:92:
                    f9:96:db:d9:dd:58:45:5d:02:34:bf:97:cd:77:b8:
                    6e:2c:fd:41:99:e5:de:66:4f:91:f7:54:df:c7:b2:
                    9e:57:54:1b:4d:5a:de:a3:5b:f7:94:23:15:2b:d6:
                    e7:15:af:0e:e1:f1:cb:40:c0:3b:c1:d6:1c:46:0e:
                    83:fd:d4:83:41:5a:54:e2:9c:ed:c9:19:8e:4a:af:
                    16:99:09:f6:15:24:ff:55:e9:95:6b:f9:04:1f:e1:
                    d2:22:f3:c4:1d:11:38:19:5d:87:d2:24:c4:3b:72:
                    69:b1:2d:8d:ad:68:53:67:91:9b:90:75:96:8b:c3:
                    28:65:2c:63:a1:20:f4:cf:0c:59:d7:3a:ef:66:72:
                    8b:96:54:b1:91:a8:66:3b:bf:ca:95:81:02:58:86:
                    14:14:87:03:f0:dd:97:81:3e:96:23:6f:ce:cf:4a:
                    b2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:78:17:6D:9A:F6:92:9A:09:B5:FE:3F:F7:E8:AA:04:D9:80:09:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/722582a2-641d-3e58-a1e8-81e9e14d2d86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:101::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c6:3d:96:cc:d2:4c:05:9a:1c:48:cb:80:09:43:6a:d4:b4:
         ce:c7:d7:cf:74:4f:04:71:eb:42:16:bf:10:dd:fa:f5:f3:20:
         cd:29:ef:a9:ea:23:ab:8b:00:24:c5:76:1a:e6:7d:03:62:b6:
         bd:5c:88:3a:db:9e:a2:78:55:7e:3e:04:ae:1c:82:de:21:25:
         83:0e:91:0d:22:50:ac:b5:bd:07:bd:79:6a:2e:e6:30:c1:82:
         a4:c1:15:fe:51:5e:24:ec:c2:fb:ba:c4:65:c8:90:8c:b4:06:
         85:89:5e:9c:a8:d5:a1:4f:f8:ef:3f:e1:df:88:5c:5a:1a:3c:
         ff:41:43:c0:e7:b5:e2:f4:a7:aa:ae:29:11:a1:d9:ec:5a:5b:
         34:fc:6c:4c:34:6b:96:24:7f:9a:5d:a2:01:ef:a3:ec:d7:0f:
         24:d5:35:87:ce:89:64:25:55:d7:fd:08:34:94:31:92:01:ae:
         df:14:5e:83:65:65:18:18:0f:a7:04:e8:b7:d6:b0:4d:64:56:
         73:5c:3f:ea:ab:7d:8b:0e:bc:04:c6:c9:19:97:df:d4:30:00:
         4f:5a:67:4b:47:4e:49:36:91:10:ac:fa:21:46:41:e5:b0:4c:
         63:0e:b9:b6:d2:ef:54:28:58:32:e0:b8:e3:90:f3:23:f4:51:
         d1:fa:5f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:22 2024 by rpki-client on console-fra.rpki-client.org