Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f2faec7b-9039-38c0-819b-a74b57218cdf.roa
File:                     f2faec7b-9039-38c0-819b-a74b57218cdf.roa (raw, json)
Hash identifier:          KSr9BiwsXPdkSy4EJ/kQ3L7y3vI01txIEFemc7FSWrA=
Subject key identifier:   C7:85:D8:8D:8E:B7:C8:CB:75:06:2D:CA:D3:9C:6A:DC:C5:AE:1A:4F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858459633608EBF090E9D8B983270
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f2faec7b-9039-38c0-819b-a74b57218cdf.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     202
IP address blocks:        2607:f028:141::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:60:8e:bf:09:0e:9d:8b:98:32:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=11fb06d2-de6d-4183-ada3-03b2f95c772d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d5:b2:c8:d9:76:db:ab:9c:00:2c:3a:0f:e1:
                    46:07:eb:7b:76:5b:79:1c:91:27:27:0e:5e:5b:ec:
                    2c:08:21:18:e1:25:a2:f4:0f:01:7d:9f:7c:29:61:
                    c6:c4:da:5c:94:eb:d8:50:2e:ac:0d:b5:84:12:fb:
                    2e:61:ad:9a:37:60:fa:93:bd:01:13:16:06:6a:d3:
                    2d:3e:2d:9a:01:3d:75:f7:86:5c:06:33:7f:32:a5:
                    93:ca:8e:d0:9f:75:43:4a:ec:75:38:8a:8e:62:80:
                    9f:02:14:d3:ab:9f:ab:19:ed:d3:b3:9c:30:a5:b6:
                    ec:9f:f0:c8:1d:a8:a8:ea:67:79:2c:b8:7f:39:40:
                    60:09:8f:2d:99:4e:54:e9:75:8c:0a:c5:b5:39:91:
                    96:98:0a:16:79:49:d1:fc:97:4b:0b:7a:c1:fd:5a:
                    ef:09:ac:57:8a:b1:a4:68:ec:7a:18:d6:61:e6:20:
                    8b:5e:be:44:6d:cd:6e:eb:4b:ae:01:47:7a:c2:f9:
                    f0:8d:ac:32:36:c8:46:d5:f9:e9:7f:db:63:fe:f2:
                    c8:3c:35:0a:64:48:75:66:0a:47:ac:f2:4e:d1:15:
                    ac:a8:80:99:de:99:78:3d:d6:99:c3:73:ef:86:53:
                    bc:3b:03:e3:bf:78:94:0c:aa:f4:6e:80:05:58:f0:
                    a1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:85:D8:8D:8E:B7:C8:CB:75:06:2D:CA:D3:9C:6A:DC:C5:AE:1A:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f2faec7b-9039-38c0-819b-a74b57218cdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:141::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3c:00:11:a8:90:15:d0:ce:d7:62:c3:a1:28:09:ed:c2:6e:
         6e:13:b5:2a:72:26:77:37:9c:55:d2:9a:05:d6:94:10:85:3c:
         42:5f:25:4b:8d:ed:13:37:4f:d2:0f:b1:d2:f5:15:78:9d:59:
         bd:94:e5:61:39:46:8c:5f:ae:48:81:52:62:6e:52:e6:22:07:
         9c:0e:09:f7:ba:86:67:b1:e3:73:30:11:e2:54:45:66:ad:6f:
         a6:68:ae:f7:b1:b5:f5:c6:7d:57:9e:22:71:3a:a6:03:00:37:
         6b:4e:fb:05:ae:16:bd:7c:8e:ba:77:9b:05:72:eb:8e:30:15:
         92:f2:7c:44:92:54:7c:85:44:49:79:83:f0:49:3d:c3:a7:1c:
         cd:69:93:4f:48:36:a4:67:75:aa:75:24:a5:b9:a1:00:fc:6c:
         48:9e:54:2a:dd:ab:7e:ef:63:70:4d:6a:2f:f3:5b:cf:a4:1e:
         05:1f:6c:09:e8:92:ac:91:68:8c:0f:92:93:8a:da:da:f2:41:
         82:b4:a7:85:f7:b2:61:49:69:1c:b3:ae:c9:c9:2e:c2:06:d3:
         c6:59:1f:ef:11:cc:12:8c:ab:7d:b1:3c:6e:95:5c:d2:5b:4e:
         e4:ae:51:0f:2a:08:b9:8e:9d:c7:91:86:b7:e2:e0:fa:18:29:
         c1:43:aa:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:57:30 2024 by rpki-client on console-ams.rpki-client.org