Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b06820e1-fa20-3f02-8591-f608a88a8249.roa
File:                     b06820e1-fa20-3f02-8591-f608a88a8249.roa (raw, json)
Hash identifier:          YHS4I/XRjUQ7Ve3puwxtTpDhNV5OTxMHlsz8RPSPJxw=
Subject key identifier:   2E:0C:D6:77:A9:CF:06:B6:2E:8F:19:06:48:76:5A:44:16:86:CA:8C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285845963363CC3044A4FC182B1A00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b06820e1-fa20-3f02-8591-f608a88a8249.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     203
IP address blocks:        2607:f028:121::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:63:cc:30:44:a4:fc:18:2b:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=1e09e3f0-28f6-42bb-9bea-9f09af19dbea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:57:45:2a:76:b3:a9:8e:56:02:b8:bd:d4:95:
                    f1:91:2c:30:47:47:f5:82:f0:78:79:a7:27:5a:4a:
                    f7:cc:8a:b5:9c:7b:ec:2d:53:76:71:4b:97:35:e7:
                    61:57:81:05:78:c3:02:bc:0a:97:83:75:7b:19:ef:
                    1f:da:70:c5:09:8a:93:9b:fd:88:d2:c9:11:73:8b:
                    0b:6e:e9:21:76:1c:0d:26:8a:ae:aa:61:b2:3d:3a:
                    c7:37:d1:eb:e7:56:3a:87:72:83:22:a4:b1:dd:c4:
                    1f:b9:04:a6:d6:cc:fe:ea:bf:2a:d9:79:3b:08:8c:
                    0b:75:17:71:9e:1d:5a:71:58:bb:c7:59:ef:a1:5c:
                    ec:75:f0:23:1a:3b:77:4f:aa:0b:c1:9f:cc:2f:c3:
                    bb:e8:e1:43:a4:f7:ec:1a:a2:61:8d:8d:39:84:71:
                    51:5a:26:94:f4:79:11:74:24:aa:6d:c0:6d:d5:08:
                    da:53:61:af:e2:0e:ee:20:6e:4d:08:b6:1e:d5:a5:
                    43:76:f0:e6:e9:78:e7:35:ac:30:52:06:d2:fa:4e:
                    6e:1a:b4:bb:86:99:3f:70:c8:b5:c2:af:51:33:65:
                    7a:e0:6d:f5:db:ba:21:05:93:be:cf:0e:68:ed:f7:
                    76:95:12:be:ba:89:30:20:fc:a7:f3:6b:7f:c2:a0:
                    1f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0C:D6:77:A9:CF:06:B6:2E:8F:19:06:48:76:5A:44:16:86:CA:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b06820e1-fa20-3f02-8591-f608a88a8249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:93:a8:6b:19:db:25:2a:d8:3e:66:08:bf:1f:4b:b8:74:f3:
         ed:a3:73:51:4c:a2:2c:1d:d2:ae:f4:46:95:7a:20:f5:2c:90:
         76:bf:1c:98:43:38:df:13:75:12:04:7f:53:4d:60:29:da:8c:
         5e:5b:1a:9f:5c:fd:d1:9e:51:fa:a2:a8:ed:24:2d:bf:c3:19:
         9a:8e:fe:5d:0b:06:ae:44:b0:4a:e7:c4:27:0f:e2:5a:a8:c0:
         2d:ac:bb:7c:62:4c:89:48:a0:4e:de:75:af:d2:48:a6:3c:fe:
         0a:31:74:89:3b:22:14:bd:93:54:25:db:9c:f1:51:6b:05:14:
         8e:dc:cd:71:37:71:a1:07:bc:b8:b4:b6:65:1a:e1:09:29:5e:
         57:04:c8:34:91:e2:1a:07:5a:92:b6:e6:b5:23:73:b8:f0:06:
         6d:8e:9d:9d:43:f4:6f:a8:9c:79:35:34:c3:bf:8e:d2:37:3a:
         d0:99:38:54:6c:3a:1f:72:7f:04:14:c4:dc:0f:7e:a0:9d:8d:
         93:3c:e3:32:49:e8:7d:f3:99:30:14:a4:cd:8d:b9:bc:aa:e8:
         b8:57:1c:ed:fe:f7:9c:05:22:83:64:25:c5:58:9b:30:87:b1:
         c2:91:7a:97:90:b1:04:8d:b9:5e:27:ce:22:b0:75:85:b9:87:
         32:d2:36:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:08:45 2024 by rpki-client on console-ams.rpki-client.org