Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7ad9b926-dfe6-3cf9-8fb2-badc16009c00.roa
File:                     7ad9b926-dfe6-3cf9-8fb2-badc16009c00.roa (raw, json)
Hash identifier:          /8fjF90Rck0Z6azEVDu5mWsMrwbmm+qz9lavdrR2swI=
Subject key identifier:   74:55:66:14:AA:24:4B:7D:63:47:90:0F:8C:A9:C7:CC:76:DD:53:62
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285845963366E180165693059E2A80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7ad9b926-dfe6-3cf9-8fb2-badc16009c00.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     3360
IP address blocks:        2607:f028:91::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:66:e1:80:16:56:93:05:9e:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=fb214fec-5a42-4b7a-86a0-5f0d885dfdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f1:a1:98:d9:81:2d:1e:eb:32:5f:46:11:7e:
                    de:1d:70:75:c1:53:1a:a4:01:f0:02:1a:41:91:85:
                    79:18:ad:45:04:e6:ef:d9:4c:40:31:99:2b:5b:48:
                    d6:fb:f2:b8:87:39:be:7b:04:c4:30:f6:be:ad:13:
                    00:c9:64:37:4c:f1:5e:47:49:04:2f:13:d3:11:bd:
                    63:d1:96:fe:69:97:76:10:b1:e6:ac:d9:3d:7d:6c:
                    e2:a9:92:50:cf:81:86:53:6f:fc:65:6e:13:c3:27:
                    66:05:df:8c:89:ee:8b:a6:7b:cc:21:aa:f0:d3:0e:
                    e9:20:e4:f9:e3:ff:a2:8a:c6:e0:55:4d:28:9b:f1:
                    d3:e7:80:31:26:da:18:fd:92:c3:3b:e3:c6:81:66:
                    7b:e0:d7:fe:49:12:29:eb:b4:55:fe:df:46:4d:1c:
                    73:d6:ea:cd:4f:2a:7e:c3:ef:e7:e8:83:e1:30:cd:
                    23:10:67:b8:ea:49:e5:5a:0c:1e:fc:c8:8f:9f:f4:
                    da:af:56:0c:95:1b:4c:72:90:cc:38:9a:3e:c1:84:
                    24:fc:a5:e2:b1:35:ca:19:29:ec:f0:32:98:67:d0:
                    db:2c:c0:5f:56:3d:5b:2b:6e:ae:a2:44:dd:41:08:
                    39:40:4a:5b:97:46:7c:d2:91:6d:9f:f9:42:c5:e5:
                    e6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:55:66:14:AA:24:4B:7D:63:47:90:0F:8C:A9:C7:CC:76:DD:53:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7ad9b926-dfe6-3cf9-8fb2-badc16009c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:91::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:73:ed:50:c2:e9:a0:8d:71:d7:82:ba:11:81:e3:4f:6c:a1:
         67:b5:1c:34:9e:c7:17:98:36:15:91:87:30:94:22:44:a8:51:
         44:7a:24:6f:24:70:13:23:2d:96:d9:f9:8f:5f:fa:80:95:0a:
         fa:68:aa:86:f3:5e:00:35:03:7b:ee:cb:af:bc:11:22:1f:82:
         00:b1:72:df:87:aa:12:35:17:d5:a3:0b:45:70:0e:bb:24:f0:
         be:f4:6a:9e:45:3a:fb:14:98:a9:89:2f:b3:bf:3e:3b:5d:41:
         5f:41:2c:33:8d:c1:3f:57:c1:88:bf:e9:c6:89:8d:50:df:f4:
         7e:28:d1:2c:d5:0d:96:ee:9b:d6:58:7b:75:91:a7:c3:f1:42:
         0c:ae:e5:ed:44:88:1d:af:4c:3c:5c:b6:e2:2c:94:8b:46:4f:
         fa:9a:ae:0b:c9:65:d6:5e:9b:cd:b6:0c:1b:3f:75:c5:3b:61:
         1b:bf:50:ae:21:d1:f7:5f:3b:e2:96:66:74:4e:4e:3a:ee:40:
         07:38:ef:79:69:e8:64:51:3a:69:cf:0f:6c:92:2b:e3:09:0c:
         90:ad:d7:2b:46:68:77:37:d6:d7:be:e1:bd:f0:6b:6c:ad:da:
         d4:de:fb:6c:69:5a:fe:e9:9d:2c:c6:45:92:e8:3a:a8:3b:4f:
         4f:29:e8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:43:22 2024 by rpki-client on console-fra.rpki-client.org