Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/26aa32f5-5c63-35c4-abf7-e22ee859d775.roa
File:                     26aa32f5-5c63-35c4-abf7-e22ee859d775.roa (raw, json)
Hash identifier:          uwfe0byD7hvaAUM4hy94ao1YTnDSzvF4Z+uc3ku5jQM=
Subject key identifier:   24:9E:C7:FA:3E:AD:D3:2E:3F:1A:CE:8C:F5:91:81:0A:4F:E6:E8:1A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC307424888B4DA9542780
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/26aa32f5-5c63-35c4-abf7-e22ee859d775.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     203
IP address blocks:        2607:f028:81::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:30:74:24:88:8b:4d:a9:54:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=19d0ccfe-250d-4d7e-9caa-682a9af8e285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:9b:72:b0:af:66:b5:18:16:76:87:d5:1e:
                    c5:ed:1a:de:95:fb:ec:a2:2b:10:ff:06:72:87:4e:
                    24:be:6f:05:aa:a8:ce:2f:c2:63:88:6a:7d:08:55:
                    57:fd:67:0e:c7:2f:86:37:cd:11:02:bf:df:6b:e3:
                    2e:fa:e4:8c:5c:81:6a:f9:21:54:c9:6f:f0:88:cb:
                    86:e7:2c:2f:6e:ae:25:9f:6b:a3:8a:03:bc:90:70:
                    13:6f:e7:a4:e1:d6:78:40:88:b6:3f:57:85:60:d2:
                    77:dd:38:ce:fa:35:5d:28:4f:b3:33:58:a1:ac:98:
                    60:9c:f0:fd:8f:40:7b:0f:28:e9:f7:82:d0:2f:b1:
                    47:a0:81:e3:6e:60:7a:ba:1d:1f:b3:43:c0:e1:8b:
                    7d:06:e5:c5:a3:8a:69:41:68:ec:48:24:19:0e:6e:
                    de:a7:3a:4a:08:af:24:ae:f6:cb:fc:d1:41:12:48:
                    8d:ec:76:04:70:1a:a7:49:31:31:ae:a3:96:2c:aa:
                    fc:72:b5:dc:57:1f:58:7e:65:07:c5:2a:3e:a7:a6:
                    1e:45:38:20:cb:a8:dd:51:61:af:55:75:c7:80:71:
                    81:82:e1:33:2a:e3:b4:58:12:c4:61:ba:c5:60:48:
                    b9:a1:15:56:7d:72:d2:2a:f4:07:24:77:1a:23:fc:
                    bc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9E:C7:FA:3E:AD:D3:2E:3F:1A:CE:8C:F5:91:81:0A:4F:E6:E8:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/26aa32f5-5c63-35c4-abf7-e22ee859d775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:81::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:00:93:59:46:d8:c0:91:58:6c:0b:c8:55:38:dd:1c:16:07:
         7a:93:e2:04:26:fa:2d:d3:9f:ed:28:85:64:57:36:99:1a:9a:
         1a:31:ea:59:d0:f6:81:1a:ec:1d:fe:73:52:25:b5:dd:d0:7d:
         12:2f:b1:c0:0b:97:61:78:96:2d:03:5b:63:a8:1e:45:f1:f7:
         47:f4:c8:b5:30:a7:99:06:2b:10:de:9b:e6:22:e8:6a:08:3d:
         b5:70:4e:f4:04:69:c5:83:ff:67:59:62:f5:ad:a9:c5:f6:ef:
         dc:d9:c2:68:ad:d9:71:03:9b:51:a7:9b:ba:5e:31:95:19:ef:
         83:dd:b3:05:b4:13:ca:42:e3:31:38:8b:64:f5:51:5b:0d:09:
         d2:e1:e2:bf:10:d2:78:4b:b9:c6:b6:aa:4e:f0:7f:27:dd:e2:
         7b:5f:d2:aa:15:61:66:38:ff:65:f2:74:9d:f2:85:1f:5c:9b:
         bc:65:2a:80:73:e5:e4:da:e5:32:fb:35:2b:ca:00:fb:bf:14:
         dc:9b:93:24:44:f4:c6:ef:70:46:5d:03:d7:f4:11:60:57:d2:
         2d:b4:54:cf:e3:e8:ef:83:fe:0d:b3:a7:41:d2:c8:9c:66:a7:
         a5:8f:02:07:d1:df:f4:eb:22:cf:ec:19:34:26:16:b3:9b:77:
         e6:b6:6e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:28:56 2025 by rpki-client