Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19a2deb9-8a3a-3397-a792-c72e3727e14a.roa
File:                     19a2deb9-8a3a-3397-a792-c72e3727e14a.roa (raw, json)
Hash identifier:          fGsFhnFJm+K7rVemKAUvfGw3c8USBpdnan6gzNbotDI=
Subject key identifier:   C5:0F:54:3B:AD:74:FF:0F:63:A6:2E:64:37:AF:AB:11:2D:BD:8D:04
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584834557967E7E073DBF1EC8100
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19a2deb9-8a3a-3397-a792-c72e3727e14a.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     203
IP address blocks:        2607:f028:82::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:79:67:e7:e0:73:db:f1:ec:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=f43d3d90-4eb2-4b65-90f6-c582e9089394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0f:08:83:c8:57:24:4c:3f:2f:c3:30:1b:a6:
                    e1:a7:0c:88:19:92:40:20:ea:08:a8:02:e0:13:e4:
                    a1:94:19:34:c0:6c:5e:6e:1a:0d:10:d5:43:05:96:
                    47:03:c4:52:4f:f2:ad:82:b8:e8:31:cd:5b:4f:f8:
                    de:ec:fe:ba:aa:cb:ad:fb:fe:90:84:c7:f6:81:7a:
                    9d:04:dd:b8:d8:06:a9:63:21:b1:3f:36:47:35:ef:
                    52:5c:2f:98:c7:c9:1b:c2:ca:39:6a:6c:3d:72:7b:
                    77:73:c5:fe:fd:51:a5:ba:11:f3:c8:50:8e:e7:cd:
                    b1:df:3e:ee:b6:64:d6:8e:59:de:d9:80:ff:f0:47:
                    b6:11:57:11:4a:f8:fe:95:8d:f6:8b:36:26:43:5f:
                    d7:b6:77:e5:f0:83:15:8c:61:c3:e1:80:ca:f9:73:
                    b0:fe:47:60:ec:d5:65:fe:6b:be:84:75:ae:8c:01:
                    5b:b1:59:15:69:48:61:e5:a0:f1:c6:13:bd:91:33:
                    5d:53:4b:fc:47:a5:6e:fd:fa:4c:80:25:82:c9:3e:
                    db:07:9d:6b:20:35:08:76:f2:07:36:70:29:b3:2a:
                    40:3c:0e:90:3c:6a:29:cf:71:09:6c:53:c9:de:2f:
                    ec:33:91:d9:79:6d:e0:a9:26:cd:97:9a:56:8f:81:
                    a5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0F:54:3B:AD:74:FF:0F:63:A6:2E:64:37:AF:AB:11:2D:BD:8D:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19a2deb9-8a3a-3397-a792-c72e3727e14a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:82::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:a5:ef:20:08:f2:80:52:84:4c:28:ca:4c:8a:dc:b4:83:f6:
         a4:fa:61:94:06:ee:8e:3b:2a:37:e8:72:54:3d:a0:6d:a8:e0:
         1c:34:24:94:c3:c5:b8:15:01:cc:dd:16:a2:87:47:37:a8:7f:
         92:e3:1a:12:95:b3:45:02:32:34:79:b8:28:ae:8e:8a:f2:21:
         3c:e2:ce:fd:07:0d:7c:b1:57:a2:65:60:26:87:32:6e:3b:05:
         96:99:62:09:60:7b:c9:2f:6f:fd:08:10:fe:16:29:90:d3:f1:
         09:47:3e:b0:34:2b:25:e9:b8:03:e4:cf:ea:fa:f5:3c:bf:d6:
         83:34:3f:bb:fa:b1:0e:cb:48:d0:fe:6c:a7:66:1f:fa:4c:dd:
         2a:37:ac:ff:02:b1:30:6c:52:04:ad:29:06:81:46:a4:cd:a4:
         14:ae:88:78:c2:52:03:7f:d1:fe:eb:b6:f8:92:e6:ea:23:e9:
         d2:0b:3e:08:7e:f3:52:4c:81:51:5c:8d:86:1a:47:be:50:30:
         60:fd:e0:73:40:32:65:4b:8f:19:60:c3:d3:03:47:48:5e:af:
         29:26:00:90:e9:bf:95:5d:3d:bf:87:d9:2b:f2:5a:f9:77:fe:
         60:db:f2:25:3a:20:a7:fa:e1:cc:16:2a:f6:97:c1:62:3b:63:
         9c:05:a0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:11 2025 by rpki-client