Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0c21a656-0983-3548-b7c8-79c99b9440b0.roa
File:                     0c21a656-0983-3548-b7c8-79c99b9440b0.roa (raw, json)
Hash identifier:          tFjKhnPYfmImIMvbQH4NCs1f7i5D7zhnk85hoKiVXQw=
Subject key identifier:   50:27:3A:A7:2A:81:9C:9D:68:43:0F:B8:FA:7B:97:B2:78:3C:60:00
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285845963366EE7FA216CDF18D2980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0c21a656-0983-3548-b7c8-79c99b9440b0.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     3356
IP address blocks:        2607:f028:91::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:66:ee:7f:a2:16:cd:f1:8d:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=1411ce5f-c49c-44a1-87ea-f24cfd1c5e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1e:f2:dd:fa:ec:6e:d6:8a:45:d3:1f:f0:30:
                    56:5b:96:5c:20:28:37:70:b5:6c:7a:40:a6:2f:2c:
                    b5:36:9a:0e:e7:28:e6:4c:9e:a7:31:48:e3:31:f2:
                    ae:51:8e:af:dc:1a:f8:44:91:65:e4:19:31:d2:2d:
                    35:f4:40:59:b3:77:c7:a4:67:c2:91:66:b5:9b:f7:
                    4f:83:e3:65:35:96:11:d8:ad:28:d5:a4:2e:8e:26:
                    bc:7a:89:9b:bc:00:5d:84:57:19:8e:21:f2:d6:ed:
                    8c:f3:d4:6d:47:3c:e9:4e:02:36:04:be:1f:56:f6:
                    4f:d5:3c:3a:4b:5c:0e:e4:4f:07:9c:32:67:63:e0:
                    b5:e6:ba:72:8d:8f:56:33:49:45:45:4f:15:29:c6:
                    5b:3e:10:95:fa:82:6d:9e:bd:04:48:22:16:80:2b:
                    21:74:82:f9:5f:22:ca:96:ed:0b:35:9d:0c:70:18:
                    85:5d:70:d6:75:a7:3d:50:30:b5:fc:44:97:a5:b5:
                    3b:86:47:5e:51:39:96:f8:cc:db:4b:a1:d2:c6:a4:
                    2b:5b:d3:5a:e0:8d:b5:3f:fe:6e:b8:ae:94:fd:3a:
                    88:ef:18:5c:94:ba:83:ca:8c:bd:7a:dd:ef:f7:7c:
                    aa:bf:12:fe:d5:bf:c7:9e:03:b1:12:34:a4:cf:3a:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:27:3A:A7:2A:81:9C:9D:68:43:0F:B8:FA:7B:97:B2:78:3C:60:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0c21a656-0983-3548-b7c8-79c99b9440b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:91::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a6:bc:50:31:c8:a9:2c:35:09:76:ab:38:90:11:cb:53:c9:
         53:5e:1a:4a:67:dd:96:56:93:01:64:44:27:64:88:4f:ea:13:
         21:33:82:51:59:94:fc:22:12:81:18:be:2e:29:f0:f7:4f:cf:
         1b:c9:5c:66:86:d1:be:2a:bc:30:52:8a:b9:78:97:b3:85:db:
         43:07:a8:a3:a6:33:c8:b2:81:50:e1:ab:fc:52:d5:98:c2:54:
         6c:31:fb:6c:5d:cd:10:08:80:49:70:4c:c6:56:d6:34:9d:0b:
         ff:43:10:2f:e5:bd:76:2d:11:55:dc:91:97:d8:38:3f:75:6d:
         c5:87:2a:92:a8:e7:66:4b:79:53:45:b8:1f:74:af:06:df:63:
         f1:c3:54:7e:b8:40:04:60:69:78:76:f7:f4:2e:55:65:d2:67:
         58:e9:a5:d4:d0:3f:fc:7d:ba:ab:8e:4c:38:77:dc:ec:dd:42:
         f8:c3:b2:54:52:75:66:83:bb:14:27:1e:92:4a:6e:ea:3d:8a:
         0a:c8:aa:54:36:f1:2d:c1:6f:21:7a:49:6a:a6:d8:2c:cc:c9:
         9c:7f:14:b8:25:99:34:91:0d:c7:0f:f8:c5:a5:d9:50:4d:8c:
         4f:89:35:81:2c:54:4f:47:8f:fa:57:6b:ab:00:12:c7:8f:e7:
         f3:6d:27:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:41 2024 by rpki-client on console-fra.rpki-client.org