Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9c302c88-b997-38ac-a2de-72ea4684629a.roa
File:                     9c302c88-b997-38ac-a2de-72ea4684629a.roa (raw, json)
Hash identifier:          NqrW8k7RXIdDj9x3YtWjleKByuapUwIXN7bxAiwILMw=
Subject key identifier:   34:BD:8B:5A:99:A6:28:C2:2B:2A:CE:DF:76:6A:1D:9A:C2:37:0E:07
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584550682A340DE96074D54442C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9c302c88-b997-38ac-a2de-72ea4684629a.roa
Signing time:             Sun 24 Mar 2024 13:00:33 +0000
ROA not before:           Sun 24 Mar 2024 13:00:33 +0000
ROA not after:            Sat 22 Jun 2024 13:00:33 +0000
asID:                     3360
IP address blocks:        2607:f028:41::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:50:68:2a:34:0d:e9:60:74:d5:44:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar 24 13:00:33 2024 GMT
            Not After : Jun 22 13:00:33 2024 GMT
        Subject: CN=479b46b8-356d-4946-aac1-38535b058bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e8:9a:d5:0b:27:60:85:34:df:73:27:41:a4:
                    b1:14:c5:d9:87:95:1f:7e:3e:b6:0f:0c:4c:de:1c:
                    9f:50:20:d4:ff:4a:63:89:2b:7a:ea:88:ef:f0:82:
                    16:b6:65:a7:7b:9e:43:b7:29:76:e8:5c:95:f3:41:
                    22:37:80:97:40:64:34:cc:3d:fe:24:6e:64:0f:c7:
                    ff:e5:98:24:41:6e:da:36:45:d8:b6:44:d8:16:a4:
                    b4:46:a2:3e:d2:4b:4c:af:74:42:b5:a3:c1:7a:5a:
                    98:fd:20:24:ef:4c:8f:6e:45:bb:49:3e:67:1e:a3:
                    99:68:d9:ee:3f:18:3b:39:8a:6b:55:48:62:fa:c4:
                    b9:04:6d:55:69:59:80:41:40:d4:fe:cf:74:02:8c:
                    b3:ce:d2:c1:4e:d4:13:bd:67:9b:2f:44:92:04:f3:
                    d9:d4:ea:c1:97:ba:08:01:80:63:a2:49:d6:96:14:
                    3b:07:80:81:1b:15:cc:d4:27:82:41:f1:a3:bd:3e:
                    15:59:a1:d4:30:b0:28:55:c5:d7:fa:ce:f0:3c:1f:
                    c3:d2:24:23:ce:d4:05:78:81:14:a3:1d:8c:4d:1b:
                    f1:8f:b3:3e:62:e8:d6:0b:1f:d7:ae:d9:38:a3:fb:
                    f4:08:fa:0c:bf:97:00:00:48:fc:64:76:df:89:42:
                    ff:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BD:8B:5A:99:A6:28:C2:2B:2A:CE:DF:76:6A:1D:9A:C2:37:0E:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9c302c88-b997-38ac-a2de-72ea4684629a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e1:e3:eb:3e:9a:76:e7:86:da:91:02:6c:4f:b9:a4:50:2e:
         0c:b7:8d:b5:f4:08:38:8a:59:6f:59:7e:b1:17:79:eb:b2:2e:
         3b:08:ab:1b:0c:43:d9:7d:f2:28:02:d2:fa:73:a6:fd:43:c3:
         3c:9a:0b:ad:ea:85:ca:f6:37:24:c0:7d:3f:85:e5:2b:b0:83:
         ad:b6:30:51:f3:f2:4d:80:de:58:c6:70:4b:e3:08:de:89:ed:
         73:f2:46:74:16:bc:df:88:25:82:4f:83:2f:45:71:58:0e:51:
         0f:f0:cf:47:be:8d:b6:71:aa:03:c9:49:ef:00:f1:6b:bd:a0:
         34:68:11:0b:49:89:46:12:09:dd:87:81:e0:d5:9a:6a:93:39:
         65:6b:c1:f9:cf:c5:ba:48:e7:2a:30:c7:cd:16:80:40:6c:5d:
         a9:5b:cd:aa:71:cd:24:64:9d:81:a1:e7:6f:c1:7f:bb:22:6c:
         e5:53:9e:24:75:a5:9b:32:e7:1c:ec:36:cd:79:ce:e7:8d:b4:
         b4:43:61:4f:fb:09:a3:de:c8:b3:d6:a5:54:4e:d0:06:f9:30:
         02:19:5b:6c:19:05:20:d8:a0:cf:7b:16:01:0d:0e:67:1d:0f:
         4b:02:49:5e:97:32:b7:5c:29:10:8d:7c:0b:6d:db:55:51:cf:
         3c:b0:b0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:08:45 2024 by rpki-client on console-ams.rpki-client.org