Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dae0bc0-8f4a-37aa-a952-b72d295e26f0.roa
File:                     2dae0bc0-8f4a-37aa-a952-b72d295e26f0.roa (raw, json)
Hash identifier:          RwWpTshM3xKDMNc88jh/tAjkth1Lk19GIe38lexISfQ=
Subject key identifier:   9D:51:46:1C:6C:3F:18:72:29:C2:8F:24:56:57:E1:D1:FF:29:7B:11
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584754E0DBA406F4C2CA29598600
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dae0bc0-8f4a-37aa-a952-b72d295e26f0.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     3356
IP address blocks:        2607:f028:12::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:db:a4:06:f4:c2:ca:29:59:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=d5edcf1a-bcb3-4ca2-a77d-7ee37551ff9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:1e:b0:d8:de:de:be:e1:e9:d1:df:de:47:
                    8a:54:3b:9f:95:7f:3c:d5:af:7d:4a:5b:a1:f7:ff:
                    fb:b5:15:db:c0:ce:3c:db:c2:56:2e:e0:09:56:d2:
                    ed:63:09:fe:1e:15:97:1a:43:e2:47:19:a8:fa:77:
                    f0:c7:d1:8f:de:5a:4f:8f:54:81:63:dc:d3:49:e5:
                    c3:45:33:c1:a4:36:b0:af:71:fd:57:16:1d:c5:2f:
                    a8:06:7d:ef:5d:05:f1:55:f6:46:0e:05:28:f0:76:
                    5b:fd:58:fe:0a:47:10:63:b8:e7:b9:a6:b5:a9:8c:
                    dd:5f:0f:5d:92:ee:b2:3b:66:bd:b6:eb:cf:fe:14:
                    43:9a:ba:68:a6:10:84:c0:44:0e:d3:06:a2:02:87:
                    eb:51:61:10:f5:01:f9:63:01:ad:82:69:5a:8d:38:
                    bc:9e:48:1d:57:00:95:e4:f1:93:e6:a9:f4:c8:ca:
                    f5:09:24:ee:09:b1:9e:e8:ce:f3:96:9f:95:6b:18:
                    08:c7:f9:0c:9a:af:21:05:69:4e:54:03:5e:70:4e:
                    8f:03:a0:91:76:6c:0b:b7:87:f4:bb:9d:ba:39:9c:
                    e2:c6:33:fa:5f:ed:d9:ce:9a:fc:87:35:12:0a:7a:
                    de:60:4d:f1:fd:57:6b:20:98:9b:14:7e:4b:a0:b4:
                    07:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:51:46:1C:6C:3F:18:72:29:C2:8F:24:56:57:E1:D1:FF:29:7B:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dae0bc0-8f4a-37aa-a952-b72d295e26f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f3:ad:e6:86:c3:03:57:2b:10:50:e3:35:67:99:fc:26:8f:
         3d:fa:71:52:9a:9c:59:d9:fb:62:0a:67:88:4f:bf:07:42:76:
         5c:4b:01:0c:7e:9c:47:fc:4f:c4:0e:6e:af:29:4b:8b:54:b6:
         50:30:c5:0c:af:41:d4:4d:90:41:bc:86:f6:f5:4b:92:1f:e3:
         5f:58:28:16:e6:30:ad:a7:fd:64:ee:0d:1e:b0:bc:24:b0:38:
         bf:d0:9a:c3:37:a7:d0:be:94:d0:3d:20:87:c2:db:8c:ef:5d:
         30:bf:96:9a:25:78:d7:6b:08:fb:07:78:e7:9b:83:e9:c2:8d:
         b4:57:f6:60:03:f5:1f:c7:62:ff:1f:42:11:64:05:69:43:10:
         5b:85:c8:42:15:0f:2c:3d:19:9f:44:16:63:1b:7b:0a:fc:48:
         d8:67:43:6c:a9:e9:6e:0f:f1:63:61:29:94:f7:c7:07:12:28:
         b7:a8:ed:e4:b2:be:3d:ca:da:19:cd:5a:d2:5b:cf:fe:74:67:
         fd:c8:52:5e:d0:45:c1:a4:54:3d:c5:3b:3a:e3:21:14:0d:c1:
         48:06:09:c6:5d:ee:96:5d:18:f7:3d:45:b2:81:93:86:94:8d:
         97:1f:6a:2a:ca:b7:9c:3d:9a:a5:c0:58:56:c2:af:f2:53:23:
         41:98:f8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:42 2024 by rpki-client on console-fra.rpki-client.org