Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f733c5f2-bc12-3156-9ed8-901b469329d3.roa
File:                     f733c5f2-bc12-3156-9ed8-901b469329d3.roa (raw, json)
Hash identifier:          KkeWRrJFcfHL9NcSEx/GqYo209u8wBX31r6fQjphSig=
Subject key identifier:   67:88:29:91:D5:25:C0:D0:7D:54:1F:00:32:42:A9:51:F2:4F:AE:8D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285845963362BDA79F2FF4D36023A8
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f733c5f2-bc12-3156-9ed8-901b469329d3.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     203
IP address blocks:        2607:f028:131::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:62:bd:a7:9f:2f:f4:d3:60:23:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=3e4c2afd-974c-4f04-b933-7e293af2a864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6b:73:bd:eb:ee:b8:d2:8f:27:b6:d2:4d:94:
                    54:b3:13:ec:91:f4:e2:3b:f6:b1:29:cf:f3:88:1e:
                    bf:01:aa:e0:a0:cf:8a:c9:24:fd:ca:2f:f0:c3:a2:
                    6c:b0:dd:40:c3:1a:25:35:ba:df:8c:db:c2:6c:12:
                    13:6a:59:22:42:e0:59:97:c1:47:df:ea:34:d3:2d:
                    82:f2:87:d3:4f:30:78:7f:9c:4c:d5:28:43:2f:2a:
                    94:b8:67:fb:a9:87:a9:78:7f:87:a8:2f:df:6e:f3:
                    25:dd:c6:e4:a5:5f:9f:cb:26:e6:3e:17:c0:3d:8d:
                    30:42:85:be:fc:55:24:2b:d4:6a:2d:77:36:95:08:
                    a0:d0:4c:45:5d:e8:ca:e7:ac:06:6f:e7:3a:5c:4c:
                    84:7e:8b:93:71:45:de:0d:94:e0:59:2e:a4:13:0e:
                    5a:3b:15:f9:d1:2e:02:4f:f1:29:64:62:7c:ec:6e:
                    6e:bd:11:07:6a:6b:1f:2c:3b:33:cb:df:3e:5a:dc:
                    9e:9f:7a:3d:eb:8c:f7:df:b8:65:87:9f:56:6c:d6:
                    68:06:3c:f6:22:1c:5c:e6:31:63:76:23:af:dd:94:
                    55:5a:9e:a7:d7:99:06:f4:d4:53:8e:81:af:d8:a5:
                    31:58:dd:6d:e1:8f:db:89:be:d7:44:49:b1:8a:f0:
                    fe:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:88:29:91:D5:25:C0:D0:7D:54:1F:00:32:42:A9:51:F2:4F:AE:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f733c5f2-bc12-3156-9ed8-901b469329d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:131::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d3:53:93:a4:bb:f3:ac:a0:c3:42:48:9e:80:5e:b6:b7:cf:
         45:f2:c1:cd:55:81:33:bb:ad:e6:cd:ee:0a:15:8e:c7:ad:0f:
         e8:19:c4:21:58:54:9a:d7:58:cb:53:e3:20:dd:7b:75:f4:49:
         ca:e2:5d:77:17:ad:30:dc:69:73:c0:c1:0a:dd:83:93:da:1c:
         ec:a2:b9:7e:8e:c3:d8:87:61:c1:0f:e3:65:f8:35:1b:3e:9a:
         0f:12:82:8c:d2:08:87:18:1d:3d:15:95:09:fd:31:db:f0:95:
         54:1d:f4:dd:39:8f:95:48:08:bd:9b:ec:51:c5:e0:47:87:a9:
         47:9c:bd:8d:6a:f0:bd:2f:68:8d:05:91:9b:01:2d:11:2c:2a:
         86:08:a6:f2:bb:3d:01:39:53:73:ad:84:bf:a4:57:d6:d1:92:
         af:97:e0:3d:13:d7:5d:1f:18:25:d9:06:ba:a0:fb:a0:57:31:
         31:b2:b7:cc:ae:b4:b4:00:a5:c0:6e:43:4a:38:44:aa:a1:b5:
         f0:ec:f9:ed:5c:01:cd:e2:d8:44:59:ee:f0:fb:d9:45:74:5b:
         8d:f4:7a:ea:e8:44:b1:4b:64:09:af:6a:d7:bc:f2:57:bd:6f:
         97:61:b9:25:3a:56:d6:11:1d:6a:7c:e2:7b:9f:e0:a0:51:78:
         91:4c:a0:f6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWWM2K9p58v9NNgI6gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MDQxODEzMDAzM1oXDTI0MDcxNzEzMDAzM1owLzEtMCsGA1UEAxMk
M2U0YzJhZmQtOTc0Yy00ZjA0LWI5MzMtN2UyOTNhZjJhODY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWtzvevuuNKPJ7bSTZRUsxPskfTiO/axKc/z
iB6/AargoM+KyST9yi/ww6JssN1AwxolNbrfjNvCbBITalkiQuBZl8FH3+o00y2C
8ofTTzB4f5xM1ShDLyqUuGf7qYepeH+HqC/fbvMl3cbkpV+fyybmPhfAPY0wQoW+
/FUkK9RqLXc2lQig0ExFXejK56wGb+c6XEyEfouTcUXeDZTgWS6kEw5aOxX50S4C
T/EpZGJ87G5uvREHamsfLDszy98+Wtyen3o964z337hlh59WbNZoBjz2Ihxc5jFj
diOv3ZRVWp6n15kG9NRTjoGv2KUxWN1t4Y/bib7XREmxivD+NwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGeIKZHVJcDQfVQfADJCqVHyT66NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjczM2M1ZjItYmMxMi0z
MTU2LTllZDgtOTAxYjQ2OTMyOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEx
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGHTU5Oku/OsoMNCSJ6AXra3z0Xywc1VgTO7rebN7goVjsetD+gZ
xCFYVJrXWMtT4yDde3X0ScriXXcXrTDcaXPAwQrdg5PaHOyiuX6Ow9iHYcEP42X4
NRs+mg8SgozSCIcYHT0VlQn9MdvwlVQd9N05j5VICL2b7FHF4EeHqUecvY1q8L0v
aI0FkZsBLREsKoYIpvK7PQE5U3OthL+kV9bRkq+X4D0T110fGCXZBrqg+6BXMTGy
t8yutLQApcBuQ0o4RKqhtfDs+e1cAc3i2ERZ7vD72UV0W430euroRLFLZAmvate8
8le9b5dhuSU6VtYRHWp84nuf4KBReJFMoPY=
-----END CERTIFICATE-----
Generated at Sat May 18 01:57:30 2024 by rpki-client on console-ams.rpki-client.org