Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/efd6d8b9-b339-3c39-bddd-173792a42feb.roa
File:                     efd6d8b9-b339-3c39-bddd-173792a42feb.roa (raw, json)
Hash identifier:          hjZ7XtmXntCeQVjYG6Kn7tGZOkITj04zx7mGWorZr1k=
Subject key identifier:   2C:5B:F6:3E:40:A5:EA:14:C7:AF:86:49:EB:AA:41:C7:24:DB:65:A4
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285845963367B3CD9E48EC467175A0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/efd6d8b9-b339-3c39-bddd-173792a42feb.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     3360
IP address blocks:        2607:f028:102::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:67:b3:cd:9e:48:ec:46:71:75:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=3d98bbde-9c49-48ac-9376-3d7c5283add4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ae:4e:ba:33:44:17:8f:24:1e:de:db:d5:49:
                    d4:53:3f:77:16:17:9f:b0:21:ff:00:fe:1d:a9:6c:
                    12:36:cf:fc:e5:e0:d1:d0:81:26:6b:21:f1:0e:11:
                    e2:db:5f:4b:39:e2:32:1b:f3:da:6f:49:bc:b2:31:
                    0c:81:dd:db:24:77:07:98:ac:e6:a5:d6:5a:51:18:
                    81:96:4b:b2:b1:b0:31:4a:47:16:5a:ec:b5:21:f4:
                    99:2d:cc:d4:d7:dd:23:af:2e:6a:92:7b:78:46:be:
                    a7:9d:78:da:4c:64:0f:f9:37:4f:a1:4d:44:ff:b8:
                    f2:70:88:59:93:4e:cd:8e:cc:b3:a0:32:3e:12:f6:
                    72:1d:40:74:36:fd:04:04:b7:b4:46:29:78:36:45:
                    ed:10:ab:2a:c0:4d:b4:99:d6:42:3f:9d:1a:45:e3:
                    14:1e:de:d4:d3:eb:81:d8:83:d8:bf:3c:63:ec:f5:
                    44:88:74:80:7b:09:25:19:65:5b:e3:96:55:65:dd:
                    eb:c0:ec:07:bd:b8:44:cf:f0:ef:48:3d:00:09:56:
                    62:5c:18:9e:05:12:32:5b:d7:20:65:5b:70:1a:65:
                    9c:bb:98:29:da:3f:d0:0d:4a:ec:9c:35:64:ea:0c:
                    16:d3:aa:fa:c6:0b:64:3e:53:04:b5:89:2a:1d:8d:
                    38:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5B:F6:3E:40:A5:EA:14:C7:AF:86:49:EB:AA:41:C7:24:DB:65:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/efd6d8b9-b339-3c39-bddd-173792a42feb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d0:ec:bc:37:46:0a:28:4c:bc:b8:eb:a7:3f:b2:21:da:6f:
         c6:35:1b:ef:8c:f8:71:c4:23:48:2e:c0:dc:0f:5d:2c:e6:1b:
         8d:08:3b:84:c7:3f:36:01:bb:4f:0a:27:1a:ab:bd:e3:70:47:
         94:b7:01:e0:dc:6a:84:f8:54:63:df:b5:52:66:8a:4a:b3:76:
         a8:a4:48:ff:5e:1d:fd:3b:b8:af:c8:ca:d0:41:ee:a7:e7:b7:
         d9:19:7f:b2:70:50:a2:e9:3e:72:be:84:71:fa:07:a6:83:85:
         a7:2a:c3:a5:05:36:6e:a8:42:e4:1f:7b:3c:b2:fb:02:53:01:
         77:48:5b:e9:48:91:1b:9f:32:9f:b4:06:c8:17:65:31:a6:bf:
         93:73:dc:c7:19:39:d5:8c:da:27:2c:3b:97:74:2a:51:0f:42:
         8b:9a:10:81:0e:ff:48:42:3e:c2:ee:0a:d8:ba:b1:55:8d:ff:
         48:b7:2a:8a:81:b4:9f:4f:6a:12:ae:12:5c:6c:c7:b7:3a:7e:
         3d:bf:48:f0:03:8b:a8:7f:0e:a6:f1:c8:2b:b5:1c:18:0b:88:
         10:b6:8b:d9:84:32:79:13:4f:60:7a:55:a7:05:2b:68:c2:b0:
         a6:a8:d3:9b:7d:89:5c:b6:ab:f3:67:3a:53:f7:d6:85:ad:06:
         4f:db:75:1f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWWM2ezzZ5I7EZxdaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MDQxODEzMDAzM1oXDTI0MDcxNzEzMDAzM1owLzEtMCsGA1UEAxMk
M2Q5OGJiZGUtOWM0OS00OGFjLTkzNzYtM2Q3YzUyODNhZGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6K5OujNEF48kHt7b1UnUUz93FhefsCH/AP4d
qWwSNs/85eDR0IEmayHxDhHi219LOeIyG/Pab0m8sjEMgd3bJHcHmKzmpdZaURiB
lkuysbAxSkcWWuy1IfSZLczU190jry5qknt4Rr6nnXjaTGQP+TdPoU1E/7jycIhZ
k07NjsyzoDI+EvZyHUB0Nv0EBLe0Ril4NkXtEKsqwE20mdZCP50aReMUHt7U0+uB
2IPYvzxj7PVEiHSAewklGWVb45ZVZd3rwOwHvbhEz/DvSD0ACVZiXBieBRIyW9cg
ZVtwGmWcu5gp2j/QDUrsnDVk6gwW06r6xgtkPlMEtYkqHY04KwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCxb9j5ApeoUx6+GSeuqQcck22WkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZWZkNmQ4YjktYjMzOS0z
YzM5LWJkZGQtMTczNzkyYTQyZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD3Q7Lw3RgooTLy466c/siHab8Y1G++M+HHEI0guwNwPXSzmG40I
O4THPzYBu08KJxqrveNwR5S3AeDcaoT4VGPftVJmikqzdqikSP9eHf07uK/IytBB
7qfnt9kZf7JwUKLpPnK+hHH6B6aDhacqw6UFNm6oQuQfezyy+wJTAXdIW+lIkRuf
Mp+0BsgXZTGmv5Nz3McZOdWM2icsO5d0KlEPQouaEIEO/0hCPsLuCti6sVWN/0i3
KoqBtJ9PahKuElxsx7c6fj2/SPADi6h/DqbxyCu1HBgLiBC2i9mEMnkTT2B6VacF
K2jCsKao05t9iVy2q/NnOlP31oWtBk/bdR8=
-----END CERTIFICATE-----
Generated at Tue May 21 02:54:25 2024 by rpki-client on console-fra.rpki-client.org