Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ca9f5cb-6cc0-309d-ab60-3f50a8dfb322.roa
File:                     1ca9f5cb-6cc0-309d-ab60-3f50a8dfb322.roa (raw, json)
Hash identifier:          z2AIiMLued8vSDaWDbNy2eHK6wkjX1NWpV5cfgUdSKg=
Subject key identifier:   47:47:23:AF:EC:CC:62:C9:DE:3A:BE:60:65:86:BD:48:60:FF:32:BF
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584596336237CE5D96A3D8BB8A80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ca9f5cb-6cc0-309d-ab60-3f50a8dfb322.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     202
IP address blocks:        2607:f028:71::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:62:37:ce:5d:96:a3:d8:bb:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=5fb307fc-9156-4c11-8573-1a4f5cd1a541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:18:b6:2c:45:bd:24:fc:b1:9b:b7:8f:ce:50:
                    8e:20:e4:d3:d7:84:14:f1:7d:c2:8f:07:81:c2:e3:
                    0d:63:ad:73:07:a0:d8:6a:be:d6:49:b7:da:8c:12:
                    46:1b:2e:44:2f:9b:5a:88:cd:66:b1:c2:ed:88:55:
                    f7:c2:da:82:be:48:0e:98:2e:af:e0:17:e1:97:6d:
                    df:47:16:6f:2a:56:ab:cd:43:86:a8:48:07:b2:51:
                    bf:ba:34:6a:21:be:a9:dc:a6:18:de:cc:da:b7:3a:
                    23:e9:8a:97:7a:19:2d:30:e1:37:14:50:57:20:73:
                    21:99:49:56:a5:2d:40:c7:87:7e:b9:59:e5:78:bd:
                    d8:4f:7e:5c:9f:df:51:8a:4d:dc:0a:a1:e8:28:e5:
                    44:8a:44:51:99:bb:27:53:76:bd:37:b2:33:12:8e:
                    3b:a3:73:82:90:35:ac:da:61:28:02:cb:a5:5c:a8:
                    b6:88:a9:a3:8f:12:c0:98:16:93:d8:d8:b1:de:88:
                    d9:f3:d0:9c:5a:0a:5c:5a:15:a6:d4:27:54:f2:6e:
                    cf:66:2a:a9:f8:25:d4:60:f2:89:be:d2:49:e9:38:
                    3a:25:5a:d0:6b:be:df:35:a8:e1:9f:1e:e6:d1:d5:
                    88:24:a6:b8:00:86:71:15:a6:ce:39:96:be:f7:28:
                    26:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:47:23:AF:EC:CC:62:C9:DE:3A:BE:60:65:86:BD:48:60:FF:32:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ca9f5cb-6cc0-309d-ab60-3f50a8dfb322.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:71::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ff:46:ef:3e:6f:5b:44:23:8d:8d:84:e6:53:88:82:0d:17:
         e7:aa:f9:11:f0:c9:79:24:ee:bb:6d:2d:af:f6:10:1a:45:85:
         c0:3b:06:8a:99:56:66:dd:da:ad:3d:82:7a:7a:65:1b:2f:96:
         39:52:61:3f:77:37:50:d7:57:91:88:94:19:61:1a:67:fa:e9:
         cd:b8:da:13:4a:4c:b2:9e:19:71:65:2e:53:7a:1f:ff:42:c6:
         28:f1:22:14:7b:0d:f4:0d:b2:28:8f:ec:92:68:cc:14:0d:25:
         c2:e8:7d:d1:43:7f:11:e7:99:51:17:21:ad:1a:12:5e:1d:ba:
         c3:e0:61:ec:b4:a1:c1:3e:ab:bb:59:8d:d3:5d:af:b2:42:06:
         46:dd:09:f4:ec:d0:b7:a8:16:f7:e7:80:35:99:4c:84:75:95:
         c6:02:74:32:c7:cc:59:83:e4:a1:91:80:75:48:f1:b9:d4:25:
         ee:fa:5d:8c:f2:bf:c7:f5:70:8d:0f:10:ff:11:7a:13:f0:dd:
         dd:63:fb:4a:42:c5:cd:67:c2:20:19:85:2d:ca:45:6f:b3:98:
         30:d3:af:da:8a:c3:9e:77:dc:13:d0:ba:9b:ba:9c:62:57:68:
         23:52:6f:b2:94:46:43:81:f0:ec:a8:71:11:fe:62:d1:e4:0b:
         38:14:80:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 03:42:02 2024 by rpki-client on console-ams.rpki-client.org