Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/272c25d0-5f3f-3854-a81c-9b1dd6d61d66.roa
File:                     272c25d0-5f3f-3854-a81c-9b1dd6d61d66.roa (raw, json)
Hash identifier:          6WiBj2124KvYsMHnmkBvbRfzUZZr7pBL+vMWQlHdizs=
Subject key identifier:   0D:BE:E1:0B:54:6C:EE:01:04:A5:E9:23:F3:C8:74:62:21:F3:16:C6
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285845963361D5ACF8722FEF849080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/272c25d0-5f3f-3854-a81c-9b1dd6d61d66.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     203
IP address blocks:        2607:f028:62::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:61:d5:ac:f8:72:2f:ef:84:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=8884d03e-0556-495f-a294-fe5423dcdc0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:92:65:07:cf:0c:5f:ff:c7:6d:1a:d7:aa:22:
                    24:66:d1:cc:12:41:1e:13:34:3a:fc:20:57:63:a2:
                    6f:31:13:2a:b7:d8:4a:1b:eb:74:35:96:11:30:f5:
                    8b:b0:e3:f9:f7:5b:68:ae:8d:3b:a3:13:95:2e:a0:
                    45:cf:89:57:59:81:5e:56:4d:65:b9:6c:98:1e:6c:
                    0f:b6:8f:fe:81:04:b9:ac:95:66:f7:0e:aa:da:25:
                    cb:98:b8:e4:ce:82:d3:83:0c:81:1a:59:d2:69:99:
                    f9:a0:6f:57:94:7b:f9:7c:4d:ac:81:74:b1:81:c7:
                    c7:e3:16:ee:48:3f:9b:b9:12:15:b2:0c:93:c1:7f:
                    31:d4:fa:be:b2:37:c8:8d:f0:c6:4e:a1:96:76:ef:
                    b5:a0:19:82:3e:c5:e6:e7:dd:1a:7a:ea:4b:3a:d1:
                    cd:9d:f3:c8:61:92:b6:dc:ac:2e:61:2f:47:d5:d9:
                    66:8d:ef:3e:26:bd:00:98:c8:55:d0:ac:15:8d:4a:
                    e1:38:c1:22:62:fa:4d:0a:e9:b4:43:ac:f4:9c:13:
                    e7:91:6f:48:e3:78:41:c6:7a:93:6d:e9:90:eb:9c:
                    8e:b7:95:c9:46:84:6b:7f:43:3d:da:4b:88:3d:1f:
                    60:9f:97:9c:b5:df:c3:1e:ae:6d:22:9d:7d:53:75:
                    e2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BE:E1:0B:54:6C:EE:01:04:A5:E9:23:F3:C8:74:62:21:F3:16:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/272c25d0-5f3f-3854-a81c-9b1dd6d61d66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:62::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:cd:16:19:42:41:63:d9:b2:07:69:9c:1b:5b:a9:39:ad:3c:
         dc:73:a6:6d:45:e5:43:37:9c:dc:22:49:11:87:ee:ea:9f:4c:
         29:94:a7:50:75:14:bb:45:27:aa:b6:91:51:90:73:84:90:aa:
         14:15:8b:e8:28:b0:57:5f:53:9b:44:71:03:25:78:62:60:10:
         a7:b0:a8:1b:e2:28:75:cd:17:54:8f:bd:96:77:90:4e:6a:e4:
         0a:48:13:35:d3:52:b1:17:d5:58:61:d0:21:af:72:2d:8d:33:
         5e:14:dd:ad:84:c6:70:aa:e6:da:34:c1:27:ff:e6:22:6c:29:
         d1:e2:99:34:35:c9:00:9c:10:f5:26:8f:38:22:35:40:67:b3:
         f3:7d:0e:5b:75:93:7c:8e:d0:26:0c:e1:f8:14:e1:1d:74:7e:
         3f:71:e2:65:3a:5e:ce:22:80:22:5e:fb:56:cb:61:d8:0b:6b:
         d7:40:82:8e:9b:8c:70:81:84:3e:e7:a0:a3:5e:93:64:14:d1:
         ba:eb:99:55:c7:25:96:c0:f8:eb:e5:7d:14:82:12:98:57:de:
         6d:ae:47:35:7f:ad:67:eb:e4:0a:b1:4a:dd:33:61:c3:02:34:
         03:01:21:31:cf:57:71:b9:15:3b:e0:54:e5:20:01:ae:d0:fd:
         3e:17:af:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:00:35 2024 by rpki-client on console-ams.rpki-client.org