Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/27184fec-de10-3652-9ecd-993a77f31267.roa
File:                     27184fec-de10-3652-9ecd-993a77f31267.roa (raw, json)
Hash identifier:          yi6LpS62956lJVKiZh/ALPXPxdewfY0Xh+4PaYAWfjo=
Subject key identifier:   F0:90:D3:00:3E:9E:D4:D0:4B:17:B5:E6:E6:B5:2A:2F:7C:29:A6:B9
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC2CDA941D202CEA4C81C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/27184fec-de10-3652-9ecd-993a77f31267.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     3356
IP address blocks:        2607:f028:42::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:2c:da:94:1d:20:2c:ea:4c:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=4ae20423-c2ff-40d9-8372-79487d997069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:99:aa:56:34:93:34:32:a5:65:ae:46:21:9e:
                    73:4f:66:a0:d6:76:a6:da:b7:18:1b:f6:7f:37:67:
                    03:bd:fd:a5:64:3f:4f:a5:19:9a:f2:24:a9:55:3e:
                    b7:f5:b0:49:1b:33:b2:7d:7e:af:5b:b1:2f:d1:f5:
                    a2:91:47:55:33:d1:fd:0d:6a:b9:4f:79:a3:51:98:
                    86:04:b3:2e:bd:01:73:3d:80:be:c6:cd:e9:d3:48:
                    4b:cc:d8:c9:2f:77:4c:ec:55:47:13:42:67:49:05:
                    56:28:48:b7:70:5f:41:c5:cb:3e:4f:84:92:b8:b4:
                    cb:ec:af:98:cd:d0:80:b6:3f:b0:04:60:1e:7e:75:
                    dd:76:7b:88:a3:99:f7:b2:a3:9f:d7:ae:6a:68:f3:
                    dd:6d:8e:b7:d4:15:52:ff:b0:60:22:dd:a1:ca:34:
                    77:e6:fb:d1:ff:69:47:f2:f9:d6:e4:bb:f9:40:9f:
                    f8:94:be:50:15:41:12:7f:f7:35:57:7a:9c:92:4e:
                    bf:59:87:17:12:ef:9d:5d:93:ef:97:fb:ad:29:b9:
                    80:2f:ac:74:91:d6:91:d6:58:38:43:ec:e4:80:57:
                    35:2e:6e:a2:25:17:53:a0:53:64:cf:7b:a5:84:e4:
                    b4:ee:a0:39:5d:aa:d9:02:93:93:9f:a1:83:6f:5d:
                    61:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:90:D3:00:3E:9E:D4:D0:4B:17:B5:E6:E6:B5:2A:2F:7C:29:A6:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/27184fec-de10-3652-9ecd-993a77f31267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:42::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:9c:8a:59:ba:ee:4a:66:37:bc:7b:bd:fd:b9:1a:4b:eb:04:
         6f:06:eb:5f:42:f4:08:94:94:43:ca:29:9d:56:1e:80:26:0a:
         09:68:16:7c:4a:30:cb:e5:29:20:ab:9d:cf:98:72:38:fe:46:
         e0:bf:7b:ed:ba:1b:97:f2:74:9e:3e:e2:0e:a5:35:4f:98:3c:
         73:23:73:22:9a:60:24:8d:9e:1b:0a:a5:a2:5c:6a:be:7b:a3:
         78:ec:23:38:72:4f:ec:ea:36:a7:0a:93:b1:23:29:ef:7d:a6:
         82:cc:8a:a2:17:72:a1:79:b6:00:91:cb:50:45:a9:d8:44:de:
         da:29:19:d5:ce:25:59:2b:9d:61:e9:46:38:06:4c:19:79:2c:
         8a:15:9d:f5:01:53:4e:80:80:0d:f1:c4:e9:d5:0f:11:5e:fa:
         4f:99:92:13:fe:7a:ad:7e:e7:cc:8f:6a:7f:01:d4:dc:d5:56:
         b3:eb:cd:12:88:9f:c5:7f:a0:2e:0e:25:2e:c9:ea:ed:b2:4b:
         e3:f3:ae:41:da:b0:44:98:19:bf:86:64:09:24:0d:b4:82:9a:
         bc:27:ab:d1:ee:6d:59:10:b1:a4:cb:83:a1:54:a0:55:89:da:
         1f:94:6f:c9:eb:43:c5:f1:10:dd:f8:32:aa:5a:6d:bb:7f:99:
         80:b8:fe:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:33:47 2025 by rpki-client