Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0bf0af7-8d09-3de7-95a4-111482f052a7.roa
File:                     a0bf0af7-8d09-3de7-95a4-111482f052a7.roa (raw, json)
Hash identifier:          xQXu2KXpekQiHTmPqpRmJojamrD5CLS17pcLFqZwoOk=
Subject key identifier:   4F:61:1E:38:47:A2:08:D9:44:9F:6E:7F:8A:2D:24:3E:61:CC:35:E8
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285845963367EA969DB6C0FF9F1F80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0bf0af7-8d09-3de7-95a4-111482f052a7.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     3360
IP address blocks:        2607:f028:110::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:67:ea:96:9d:b6:c0:ff:9f:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=7cee8fc9-6e5f-4d7a-9aeb-b8dfc34c1185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2a:5a:ca:4f:03:e8:a1:52:4a:59:cf:80:c6:
                    35:64:53:45:bf:30:b6:76:11:36:3b:cc:08:c9:f6:
                    e4:2c:5d:09:f3:b4:bc:e9:a4:a2:14:e1:5e:d0:f2:
                    45:d3:14:65:4e:43:d7:0b:49:5b:f9:46:53:6e:ff:
                    6c:56:83:57:7b:4b:e6:89:97:09:30:70:bb:a9:b8:
                    3b:c3:6a:b9:48:c8:24:d6:30:b3:35:f6:90:1c:dd:
                    a8:fc:3b:95:eb:7e:3a:e6:19:4c:f4:f0:a0:9a:9e:
                    9c:9d:b1:1c:2b:e8:97:15:c9:94:19:2b:30:92:f9:
                    12:be:fb:ac:29:64:2d:af:b9:87:73:7b:23:53:39:
                    2c:09:f0:be:46:3f:0a:7d:23:a8:33:6e:76:7a:44:
                    a1:b5:d5:f7:9a:f7:ee:55:91:a0:da:d6:90:6e:75:
                    5d:60:7d:e3:ca:8d:e9:46:66:2a:e9:fa:57:3e:77:
                    50:ea:13:04:6b:31:c3:2b:b8:51:75:73:2c:57:30:
                    9e:4d:e0:4e:12:fa:04:82:88:6c:d1:74:0e:47:94:
                    67:54:d1:61:a0:5b:51:4c:02:5d:58:d3:25:cf:d9:
                    5c:bf:26:2b:81:79:e1:5b:77:89:d6:e1:e7:6d:47:
                    ec:f4:2d:ca:d3:7f:0d:26:a8:ae:40:24:47:15:a0:
                    98:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:61:1E:38:47:A2:08:D9:44:9F:6E:7F:8A:2D:24:3E:61:CC:35:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0bf0af7-8d09-3de7-95a4-111482f052a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:110::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:8b:07:af:3f:90:04:e0:2e:9e:1e:39:18:84:30:48:38:4e:
         99:5f:1c:74:06:02:bd:49:6b:b6:3c:27:99:06:6b:7e:b9:f1:
         67:65:8c:29:3d:86:10:a7:f8:10:b8:53:79:85:cb:dc:70:f0:
         3b:4e:1b:0f:c6:b6:94:a4:ac:5f:f4:eb:23:f1:60:10:f9:ba:
         60:de:6a:21:b8:1a:2a:77:48:a2:2b:24:99:05:ed:59:af:f3:
         c9:19:98:b3:c0:10:e7:9c:5c:86:83:be:4d:55:4d:fa:7c:88:
         e0:6b:d3:3e:7b:31:71:76:8b:2e:98:96:f8:73:f3:57:0c:b2:
         be:b0:42:59:1a:84:88:16:40:41:14:0b:4a:23:97:ba:0a:5b:
         89:3c:4b:7d:16:3a:8f:7e:ad:71:b9:b6:15:f4:55:47:91:1a:
         16:fb:ed:c3:b7:fb:ac:51:1e:9e:8b:bd:3c:c6:9e:7b:3f:c2:
         2d:72:84:b6:15:10:75:a6:7e:ea:42:e0:29:18:5c:73:2b:d9:
         d4:64:85:01:e6:55:1d:28:5f:16:68:8a:8b:63:36:ca:4a:d3:
         7b:6a:dd:0d:35:73:c1:f9:d9:0c:dc:fd:1c:f4:63:5b:f6:d6:
         75:a3:a9:41:78:5d:46:1a:91:ba:6a:57:19:e2:3c:96:7d:bf:
         d0:21:09:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:30 2024 by rpki-client on console-ams.rpki-client.org