Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/349b3d5f-f6c1-3d8b-9d01-62a4402f9d65.roa
File:                     349b3d5f-f6c1-3d8b-9d01-62a4402f9d65.roa (raw, json)
Hash identifier:          QNOQFtrlLDTY6mDMBFwW3a8SPd2MKlsEfSOi0SOVsz4=
Subject key identifier:   96:D7:97:48:CF:2F:70:42:FD:F2:8A:A9:AE:FF:ED:3D:64:53:64:31
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584754E0DDB8E91E3F918DEBCA80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/349b3d5f-f6c1-3d8b-9d01-62a4402f9d65.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     203
IP address blocks:        2607:f028:51::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:dd:b8:e9:1e:3f:91:8d:eb:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=f97c2939-9cd1-4c4e-8eb3-bb8296bf8c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b8:0a:39:35:93:f2:e8:41:bd:a4:8c:aa:4f:
                    55:f3:da:49:7d:3f:40:db:27:b8:7e:51:14:0b:bc:
                    d1:e4:b6:77:9e:4c:e3:21:5b:64:c8:ec:b6:ee:e2:
                    9a:f9:25:96:ce:11:98:a2:fa:59:9c:91:b8:32:14:
                    d2:11:01:c2:91:88:6e:9b:17:c7:df:7b:6a:50:58:
                    78:94:73:6b:99:14:fd:c0:91:6d:61:25:78:98:92:
                    f8:05:4d:fa:55:fa:47:ee:57:ac:5d:31:0e:dd:ec:
                    8c:fe:a8:ad:1f:3b:5a:b6:73:54:d2:b4:7b:d7:81:
                    16:16:6c:b5:4f:39:5c:13:ef:b6:b2:b4:d2:9f:c1:
                    74:63:82:fe:1c:66:0e:d8:3a:80:9e:03:a7:9d:89:
                    10:24:19:24:af:50:0f:aa:18:5b:8a:76:73:98:9f:
                    4e:84:c3:0e:be:83:2d:6a:4b:48:e9:85:8c:57:ef:
                    a1:a8:d5:12:ae:67:c6:b9:d4:a2:a3:72:50:44:29:
                    52:88:46:2e:b4:56:9d:38:72:6f:5f:c8:78:26:f3:
                    38:55:9a:57:c8:81:9b:fe:6e:20:f1:3a:06:d2:ea:
                    d9:7b:5b:7c:d3:8d:e9:c8:b1:d6:67:47:f1:c9:0e:
                    db:cf:ee:62:92:c3:80:dd:ce:a2:71:ad:9c:25:dc:
                    ff:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D7:97:48:CF:2F:70:42:FD:F2:8A:A9:AE:FF:ED:3D:64:53:64:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/349b3d5f-f6c1-3d8b-9d01-62a4402f9d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:51::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b8:ff:3a:60:2b:a0:2f:a2:de:96:29:0d:83:cb:31:6a:0d:
         2b:1f:a6:a9:14:47:77:1f:9e:61:0c:2d:6a:99:a7:58:9b:d8:
         19:e2:3d:02:b0:18:99:5f:15:64:b6:67:c2:8a:9b:1a:9f:5c:
         dc:fb:03:65:0f:c6:00:ef:75:89:3f:d7:11:3f:50:1e:a6:3a:
         f2:40:aa:fb:0b:a3:71:d2:08:48:17:e8:83:aa:1b:80:bc:3a:
         90:a3:55:65:87:86:d3:f9:04:72:c9:d0:91:76:6d:99:b2:94:
         40:34:d7:7e:f1:1a:9c:bd:e4:15:64:91:2d:20:d1:55:0e:81:
         e7:92:7f:fa:d4:7c:b7:ae:c4:f0:e9:a0:04:e9:0a:7f:d4:fa:
         7b:df:bc:a6:eb:d4:92:53:71:77:e6:9a:b2:55:22:e1:c9:e9:
         a4:e7:67:98:11:d6:73:e8:41:63:1f:28:e7:c6:05:a2:1d:7a:
         17:5c:84:2e:fb:ca:bf:b1:80:9c:0e:4b:2d:de:a6:e1:33:54:
         e8:27:a7:a3:5a:68:05:76:81:e6:08:60:e9:e5:08:7c:52:da:
         7f:c6:44:ea:cb:a3:c0:89:10:a9:a2:b7:18:a3:c0:24:f9:1c:
         7a:ce:59:44:f7:7c:8a:11:be:27:ad:bf:5a:12:8f:75:cd:71:
         0b:7c:b0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:33 2024 by rpki-client on console-ams.rpki-client.org