Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/15fcb401-3a12-3ff7-90ac-c91494b06f40.roa
File:                     15fcb401-3a12-3ff7-90ac-c91494b06f40.roa (raw, json)
Hash identifier:          EOd4jAHXqtULjH1aNREok4tM5HxhneukMmxNS8RTaWE=
Subject key identifier:   3A:7E:14:F1:59:15:66:F6:E4:10:35:FC:71:FA:58:72:77:B0:16:CC
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584596335E20F94E120ADE479CC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/15fcb401-3a12-3ff7-90ac-c91494b06f40.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     3356
IP address blocks:        2607:f028:22::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:5e:20:f9:4e:12:0a:de:47:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=7578823b-24e2-499b-906f-9e340450f0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:25:82:ed:0e:95:37:d3:60:b4:4c:4e:e0:
                    e6:10:de:4b:7d:ac:d4:fe:36:b9:4f:49:83:27:df:
                    cc:c5:4a:bb:4e:97:8d:54:27:e8:9f:2a:75:d4:27:
                    bc:43:8b:bb:6d:8e:53:eb:4f:2b:f1:2f:dc:45:84:
                    ea:32:d4:07:14:6d:6e:c9:06:b2:fb:7e:30:76:a8:
                    a7:f6:ec:80:52:7d:0e:35:19:f2:a6:55:8f:9b:1a:
                    2b:e4:bf:81:f7:1b:6c:31:ea:a2:78:af:fc:6d:9e:
                    ef:b7:17:19:49:ab:ea:92:0d:2f:bd:6e:52:8d:15:
                    17:99:fb:37:e8:5c:95:78:b8:cb:8e:cf:4d:a5:0a:
                    bf:6b:d0:d0:99:6e:43:02:5f:e3:62:52:7e:57:c3:
                    1b:5b:55:9a:91:34:9f:47:77:5b:0c:a2:71:9c:a9:
                    0d:45:76:f0:65:e2:81:bb:31:69:98:ca:21:22:cf:
                    75:c2:a2:e6:9e:01:d6:a3:74:81:b3:92:bb:43:98:
                    8f:e1:fa:6c:75:2b:51:84:d9:e9:f5:21:7a:ca:62:
                    d5:c9:ba:53:b8:76:1a:56:3b:58:8c:86:8a:28:3b:
                    bc:18:2f:47:29:7b:29:52:fc:1c:ad:09:ea:64:b1:
                    e8:73:ee:fe:8e:fd:92:29:37:55:52:5c:dc:8c:87:
                    cd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7E:14:F1:59:15:66:F6:E4:10:35:FC:71:FA:58:72:77:B0:16:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/15fcb401-3a12-3ff7-90ac-c91494b06f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:22::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:6d:42:2a:2e:2b:63:54:47:9f:11:4a:96:09:43:b7:2b:a8:
         91:14:80:b5:3f:3e:0a:90:4f:0c:57:4f:db:e2:e9:36:e6:79:
         ad:3a:bd:7b:3d:d6:82:ce:9a:10:9c:b3:22:11:fa:9e:19:db:
         e2:19:c1:59:0a:10:1d:b4:6c:8c:21:75:ba:17:64:83:04:51:
         a2:35:b1:7d:1a:56:92:d0:65:2d:21:47:7d:b7:d5:1d:4f:19:
         a7:a8:34:56:96:92:8d:2a:d3:f5:56:17:54:ea:bf:c4:2d:35:
         33:35:f2:dc:6d:11:3c:be:e2:3f:fd:14:40:05:95:08:19:f8:
         f2:32:55:a4:25:82:90:65:d3:65:47:69:7d:d7:82:ea:6f:32:
         83:68:71:0b:d7:a8:5b:2b:2b:fe:11:25:0b:f1:91:4c:c1:2e:
         53:b2:7c:8e:c1:69:74:91:48:51:50:72:6e:94:d9:06:16:2b:
         f9:4e:ab:29:a6:27:5a:8f:08:b8:3f:31:f1:9c:69:97:c2:40:
         5d:1b:df:7a:6c:14:56:e8:b8:63:84:ad:57:16:bc:9a:c0:5e:
         8c:0b:71:29:65:94:07:25:b6:05:09:7a:01:e4:63:68:75:b6:
         c5:bf:5c:89:9d:3b:74:df:c0:3c:8f:e0:eb:1a:7d:05:ad:23:
         11:e9:ed:3c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWWM14g+U4SCt5HnMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MDQxODEzMDAzM1oXDTI0MDcxNzEzMDAzM1owLzEtMCsGA1UEAxMk
NzU3ODgyM2ItMjRlMi00OTliLTkwNmYtOWUzNDA0NTBmMGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5slgu0OlTfTYLRMTuDmEN5LfazU/ja5T0mD
J9/MxUq7TpeNVCfonyp11Ce8Q4u7bY5T608r8S/cRYTqMtQHFG1uyQay+34wdqin
9uyAUn0ONRnyplWPmxor5L+B9xtsMeqieK/8bZ7vtxcZSavqkg0vvW5SjRUXmfs3
6FyVeLjLjs9NpQq/a9DQmW5DAl/jYlJ+V8MbW1WakTSfR3dbDKJxnKkNRXbwZeKB
uzFpmMohIs91wqLmngHWo3SBs5K7Q5iP4fpsdStRhNnp9SF6ymLVybpTuHYaVjtY
jIaKKDu8GC9HKXspUvwcrQnqZLHoc+7+jv2SKTdVUlzcjIfNLQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDp+FPFZFWb25BA1/HH6WHJ3sBbMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTVmY2I0MDEtM2ExMi0z
ZmY3LTkwYWMtYzkxNDk0YjA2ZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADVtQiouK2NUR58RSpYJQ7crqJEUgLU/PgqQTwxXT9vi6Tbmea06
vXs91oLOmhCcsyIR+p4Z2+IZwVkKEB20bIwhdboXZIMEUaI1sX0aVpLQZS0hR323
1R1PGaeoNFaWko0q0/VWF1Tqv8QtNTM18txtETy+4j/9FEAFlQgZ+PIyVaQlgpBl
02VHaX3XgupvMoNocQvXqFsrK/4RJQvxkUzBLlOyfI7BaXSRSFFQcm6U2QYWK/lO
qymmJ1qPCLg/MfGcaZfCQF0b33psFFbouGOErVcWvJrAXowLcSlllAcltgUJegHk
Y2h1tsW/XImdO3TfwDyP4OsafQWtIxHp7Tw=
-----END CERTIFICATE-----
Generated at Thu May 2 14:57:42 2024 by rpki-client on console-fra.rpki-client.org