Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/262b90be-e00f-3891-8e5e-f4a4a09218dc.roa
File:                     262b90be-e00f-3891-8e5e-f4a4a09218dc.roa (raw, json)
Hash identifier:          sPvZeSp3/JkB0kNNATmVbxllNWL5w+xMNthkXl3mkeA=
Subject key identifier:   D3:F3:B3:17:7E:6F:86:93:83:97:D3:66:CD:1E:9A:D6:71:DE:42:96
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584754E0DC7A2351B6A0539EA240
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/262b90be-e00f-3891-8e5e-f4a4a09218dc.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     3356
IP address blocks:        2607:f028:32::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:dc:7a:23:51:b6:a0:53:9e:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=46b49f58-e212-4ee3-802e-94b993af962e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:06:48:38:cb:cb:f3:8e:11:0e:5e:0b:19:1b:
                    3f:bb:74:f2:cd:8c:ab:9c:b3:f8:bc:aa:d0:1e:a9:
                    8c:64:b5:cb:3d:87:e5:ba:88:cb:06:a4:82:ed:c0:
                    01:28:eb:93:3b:66:fd:c7:08:49:92:42:4b:f0:50:
                    0d:03:58:c8:a1:b2:50:7c:93:16:cc:a3:b5:07:72:
                    0e:cb:b5:13:e5:61:ed:e9:7e:0a:0c:fa:ca:e1:73:
                    6d:16:24:bb:43:07:0e:0f:a9:84:6e:6d:4f:a0:d2:
                    a7:6c:c4:d5:cf:e0:3a:d0:af:d8:a5:6b:16:98:57:
                    98:af:a2:cf:26:a0:66:6d:ea:9f:e0:74:ca:97:e1:
                    5d:53:83:e9:af:a2:a3:35:48:7f:0e:0e:95:78:57:
                    2e:47:95:32:cc:7c:19:68:c2:01:46:09:b6:81:e5:
                    fc:d1:29:2b:5f:5a:b5:57:20:45:9e:0b:b9:af:58:
                    58:70:59:97:b7:61:07:24:7e:30:6c:b8:d1:72:06:
                    44:a7:c1:43:16:63:7d:37:d8:1c:a6:07:c9:11:30:
                    30:05:d6:78:e5:e4:85:58:09:e7:f5:59:9a:44:df:
                    d2:2f:67:79:9f:93:3c:1d:08:23:ba:ea:49:81:8f:
                    8c:55:8f:f1:89:bd:ad:12:15:00:d7:d6:0c:44:ac:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F3:B3:17:7E:6F:86:93:83:97:D3:66:CD:1E:9A:D6:71:DE:42:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/262b90be-e00f-3891-8e5e-f4a4a09218dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:32::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:64:a7:6d:9b:17:7d:2e:ef:c2:31:48:0a:10:86:44:82:c4:
         cf:b2:00:52:58:4d:c9:eb:bf:71:07:3e:e4:b8:7e:d6:1a:31:
         21:98:73:6b:86:f6:87:c9:71:5a:ad:3a:c5:cb:d8:e8:97:d8:
         34:d0:1e:1b:01:fc:a5:c7:dc:5f:0d:60:f5:a7:f9:0c:9c:9d:
         d8:0a:bb:f7:3c:6a:02:e4:c3:67:06:6f:40:87:47:48:00:a4:
         a0:7d:3b:ab:49:99:5c:a4:42:6e:45:5b:e0:14:7e:7b:ad:ed:
         2e:a8:f8:d8:44:d4:3c:5d:65:22:5d:2a:10:20:d8:71:e1:f7:
         38:03:86:f4:91:d9:7f:7f:a7:5d:4e:de:9c:d8:2f:14:71:7a:
         d8:a9:bd:74:a2:90:32:3a:a1:be:69:e4:e7:67:fe:65:58:ae:
         3b:b7:95:71:3f:45:c3:29:22:46:c8:dd:56:f6:a8:b2:31:b5:
         35:a2:df:a8:9d:65:e1:aa:a8:95:c6:d6:87:0a:01:9b:dd:a9:
         5e:81:20:ee:eb:76:86:77:d0:84:70:10:b1:1b:08:81:c9:b6:
         4a:e0:46:4e:66:84:53:48:bc:98:7c:d2:2e:8a:d4:62:5d:9d:
         f4:42:5c:42:2e:bc:9d:06:90:b7:83:8e:55:68:f2:8c:ee:86:
         9c:eb:7b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:38 2024 by rpki-client on console-fra.rpki-client.org