Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19a2deb9-8a3a-3397-a792-c72e3727e14a.roa
File:                     19a2deb9-8a3a-3397-a792-c72e3727e14a.roa (raw, json)
Hash identifier:          UV7Xzv+sPzmDio4+sjc+/4ZhkfqXE2si6MIkXw8TljM=
Subject key identifier:   D3:03:4B:31:C3:61:44:34:59:3B:E0:12:9A:7F:04:65:AC:96:01:5C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC30DA120826379F9FB5C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19a2deb9-8a3a-3397-a792-c72e3727e14a.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     203
IP address blocks:        2607:f028:82::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:30:da:12:08:26:37:9f:9f:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=cfa90337-ed0c-43a5-9c3c-0728edbc6c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:02:43:71:44:0c:29:38:88:0b:34:00:f5:b6:
                    04:92:99:c0:7c:4a:45:dd:99:4b:f6:13:b5:59:2e:
                    ff:b5:ce:6a:5f:e7:26:41:6b:97:02:5f:67:9d:52:
                    3a:bb:4a:de:c5:9e:37:89:80:e4:a9:7f:78:49:a9:
                    1a:75:bc:5b:28:ff:db:75:44:26:04:2a:ee:37:2f:
                    20:34:2a:2f:5d:42:ce:a1:bd:1c:8c:80:90:51:78:
                    36:a1:00:24:7c:e3:f1:b4:0b:1c:66:b1:48:d9:66:
                    82:e9:5f:ed:da:c5:62:af:c4:74:c5:b2:6e:cc:ee:
                    d9:c3:80:e3:70:3b:be:25:8a:71:69:0c:44:bd:82:
                    63:7e:04:3e:3a:b8:09:a8:da:96:bb:af:70:4a:fe:
                    d3:df:c7:c0:49:2f:af:b2:b2:e3:3f:9e:b5:d6:26:
                    3a:60:a6:04:82:99:dc:62:42:0e:83:21:e0:8c:2a:
                    f0:91:33:87:09:42:12:e9:33:0d:08:6f:37:c7:47:
                    fc:1b:5e:f4:be:01:15:79:10:68:4b:5d:44:23:ec:
                    c4:8c:fc:dd:cd:28:28:69:d0:16:9d:21:3e:01:ec:
                    c9:8c:45:65:21:e9:eb:80:d8:3a:a3:12:ca:6b:0f:
                    9c:3d:e8:02:34:f3:a4:79:dd:fc:d8:a6:1a:f9:67:
                    ac:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:03:4B:31:C3:61:44:34:59:3B:E0:12:9A:7F:04:65:AC:96:01:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19a2deb9-8a3a-3397-a792-c72e3727e14a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:82::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:6c:3b:9c:c4:e1:63:14:d7:a1:3f:1a:33:8f:1e:a8:29:6c:
         69:45:45:29:cc:93:eb:bb:3b:dd:c2:0a:80:99:b4:97:66:cb:
         6d:0f:1b:2e:5c:be:04:af:18:ac:f8:25:f4:00:e6:eb:cf:40:
         68:05:6b:96:28:d5:d0:97:b3:e1:33:69:28:8d:00:80:3e:6f:
         ec:61:ab:2b:c2:66:44:c7:2a:09:49:da:a7:8f:14:e0:8e:86:
         f6:8c:86:62:72:e6:a1:9b:df:9f:a9:3f:4a:45:6e:1f:b8:9f:
         8e:1b:93:8a:3e:17:62:90:eb:77:8d:6a:a9:80:29:1e:7f:83:
         9a:5f:54:56:cd:ad:60:06:a5:e8:f5:59:7e:e9:94:06:8b:b1:
         9a:b8:ad:d4:e3:58:06:d5:d4:29:a5:ef:a1:2f:14:59:d2:46:
         5e:ae:45:e1:32:91:9c:69:c8:0b:d3:b4:6b:1c:cb:eb:0d:c7:
         90:c4:d5:7a:dc:c3:9c:c2:c7:d9:74:71:61:39:4b:61:a8:b6:
         43:c7:3e:55:0f:00:02:b9:4e:50:4a:d5:ac:37:b4:61:23:1e:
         1b:10:68:a8:97:f8:98:d4:8f:4c:3a:c3:a0:9e:70:32:15:cf:
         8b:b6:db:db:a0:8d:21:1e:ce:ae:8f:92:22:6b:1b:49:73:7e:
         5c:87:f0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:07:05 2025 by rpki-client