Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8de97a6d-7491-38ca-b827-41798f6aae3a.roa
File:                     8de97a6d-7491-38ca-b827-41798f6aae3a.roa (raw, json)
Hash identifier:          TfIRzd36oHnuyfMH8htgpv/KtB+5qHSK+B3uldKbews=
Subject key identifier:   9F:CA:68:1E:93:D0:40:31:1C:2B:6C:4A:76:F0:47:FF:4E:4D:F8:E0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285845963360A3EE3C70019ADDD900
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8de97a6d-7491-38ca-b827-41798f6aae3a.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     203
IP address blocks:        2607:f028:141::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:60:a3:ee:3c:70:01:9a:dd:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=a955af8b-6489-4b1d-ad48-c9b05eb804c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:e5:9e:f9:6c:62:ac:a2:0a:3c:eb:3a:d0:
                    6b:39:0e:54:02:4c:f6:e4:8a:74:22:22:ad:ed:ad:
                    82:71:ac:8a:89:ac:a3:c7:71:0e:0d:56:da:13:c5:
                    ef:58:34:0c:d5:60:0c:de:df:7a:1c:9f:99:15:aa:
                    ca:53:09:37:12:98:39:41:3c:1e:66:c2:0f:69:e1:
                    7d:d8:fd:43:68:c3:28:3b:da:da:b6:65:1d:af:25:
                    f1:dc:25:8a:c1:a3:54:f0:b7:f5:68:41:78:b5:3f:
                    9c:8d:93:34:e5:cd:fe:89:da:00:31:a1:18:4c:aa:
                    6f:c0:fd:2e:fc:fe:bf:3f:25:8a:14:a9:c6:25:64:
                    00:55:42:67:5c:e1:8b:51:49:d3:0a:aa:b8:f4:5b:
                    53:ee:da:3f:ad:01:e2:a7:76:b8:32:05:f7:34:02:
                    86:55:f0:39:90:04:65:f3:cb:ee:b0:b3:87:90:c6:
                    3f:03:05:01:ed:e6:88:85:f8:c8:71:92:a4:aa:bd:
                    d0:00:1c:db:c5:ab:a4:4d:36:1e:31:11:a9:c1:02:
                    a0:72:e6:76:53:4a:04:43:29:86:4c:76:8e:df:92:
                    96:98:ea:a3:c4:0d:b8:83:6c:cd:49:e1:bc:92:ac:
                    3a:37:77:8c:e8:dc:36:f2:58:69:d6:a2:76:4c:c8:
                    a1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CA:68:1E:93:D0:40:31:1C:2B:6C:4A:76:F0:47:FF:4E:4D:F8:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8de97a6d-7491-38ca-b827-41798f6aae3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:141::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:6c:0a:42:8d:49:b4:bb:17:e6:c1:6c:79:7c:04:56:d4:2d:
         22:ab:ff:56:3f:83:9e:79:31:be:04:ca:05:01:cd:14:ea:5a:
         f9:f4:e4:de:ca:b5:70:c8:d1:96:17:e5:40:0e:96:4c:73:1c:
         5e:f2:bd:7a:95:24:6b:6c:ed:a8:34:4b:3e:50:8d:84:73:4f:
         94:c3:51:f5:d6:9f:b2:4d:83:c7:62:53:27:e9:92:42:06:e0:
         8d:cb:c3:e2:8b:c0:41:76:a3:cc:92:41:05:48:d8:ed:67:51:
         88:7a:60:bf:d4:84:81:f3:7b:bb:2b:aa:08:4c:16:e8:04:a6:
         72:73:f0:28:9d:62:aa:60:81:20:2f:e9:d8:e4:fe:70:6a:be:
         75:3c:72:f2:5a:e7:ce:64:fb:68:cb:27:88:b4:52:93:8d:52:
         4a:51:8a:ba:ae:2e:57:ca:86:5a:0e:f5:b2:52:bf:71:bc:74:
         12:74:21:c6:bb:92:bc:a5:0d:84:e2:2b:3e:07:21:f3:a3:5d:
         13:b4:4e:d1:ec:b8:72:4f:bf:42:25:7f:0b:1f:6f:2f:d3:84:
         9d:34:5d:8a:ba:d4:b3:b2:f0:ce:46:10:49:5b:79:47:08:c4:
         07:92:13:dd:84:ee:58:4b:9a:80:7a:eb:37:b7:30:2c:70:ef:
         1a:e0:3f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:08:45 2024 by rpki-client on console-ams.rpki-client.org