Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3b967ae1-415f-350e-b46f-a04016242407.roa
File:                     3b967ae1-415f-350e-b46f-a04016242407.roa (raw, json)
Hash identifier:          k4IXrDfIvmisJ812Qkx9qaliXaejjE6IL4lYe5cLxEc=
Subject key identifier:   DF:F3:65:7A:AC:8B:79:41:3F:A0:C1:52:EB:A4:88:69:CD:8A:90:2B
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584754E0DBD55BACD6460B295400
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3b967ae1-415f-350e-b46f-a04016242407.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     202
IP address blocks:        2607:f028:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:db:d5:5b:ac:d6:46:0b:29:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=15812f6e-1bc1-46bb-9226-9acd999dd6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:ae:27:48:ad:59:4c:31:2c:cf:86:18:3c:
                    4d:37:7f:90:70:02:a4:05:b8:a6:ec:9d:85:fb:dd:
                    f2:63:fa:48:61:ff:cf:aa:0d:ab:f0:f8:3a:93:c3:
                    62:6c:0b:b5:48:55:e8:2e:8a:66:da:66:2b:54:7a:
                    9f:da:9c:19:67:6f:61:fd:a2:d2:0e:9b:52:12:60:
                    93:99:3a:45:14:ea:f5:54:b1:40:af:cc:e9:73:9b:
                    38:e4:9f:9d:7e:82:32:66:76:2e:af:d1:61:ed:9f:
                    76:43:93:b7:d6:07:89:5e:8a:4c:a5:7e:64:40:14:
                    c2:ac:f4:36:93:f2:dd:7f:76:a9:18:83:3d:0d:46:
                    38:91:91:d5:fa:c2:ae:10:f7:f1:82:61:29:6c:09:
                    82:26:1c:54:5c:bf:d5:3f:c2:2e:d1:27:c5:7a:9d:
                    0e:7e:8c:8e:0c:c2:98:9f:8c:5f:14:ee:dc:86:8b:
                    7b:eb:0c:22:7a:73:fe:d9:57:6d:1b:54:1f:f2:4c:
                    8b:ce:99:6c:e7:b9:23:70:18:00:69:7b:80:f6:ed:
                    db:c5:1b:89:7f:81:ae:6b:d7:74:ae:c2:84:eb:d5:
                    de:d1:d8:7d:49:59:98:ee:b4:aa:aa:91:a9:38:5b:
                    fa:d9:b8:94:f6:65:f1:68:1f:d8:0b:6d:da:a2:3c:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F3:65:7A:AC:8B:79:41:3F:A0:C1:52:EB:A4:88:69:CD:8A:90:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3b967ae1-415f-350e-b46f-a04016242407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a6:5d:05:87:f1:24:8b:59:5a:4c:bb:33:45:6b:52:01:70:
         03:94:68:9a:55:8d:9a:4b:ba:46:c2:15:32:61:b4:38:7d:b3:
         42:80:19:7d:27:f1:c8:2f:5a:69:a1:82:f9:41:16:3e:f7:a2:
         16:17:8c:b6:6e:7e:47:2c:e8:97:c3:7f:60:07:a5:b7:bf:13:
         39:53:8c:87:94:82:10:f0:cb:09:b0:66:61:63:29:7d:a5:23:
         7e:f1:7e:85:53:40:ce:8a:c4:34:3b:3d:44:af:f4:2c:3f:fe:
         f2:10:f6:d7:1d:54:92:9b:85:9f:1e:bd:af:93:bc:6b:f6:10:
         c6:60:a9:a0:e4:e3:c0:0b:2f:8f:2a:ed:93:4c:4b:54:6d:8b:
         86:42:35:6f:36:37:a3:6d:76:d7:00:41:95:03:9a:95:33:4a:
         4a:75:fb:d0:a8:48:e7:97:a0:f9:95:43:e5:3a:fe:4d:e8:22:
         ea:01:2e:9f:91:48:95:2e:b5:9e:c3:ae:33:c9:44:4a:81:3b:
         c6:fd:ad:76:f8:d5:74:a6:ad:10:77:5e:d2:29:45:f1:da:b0:
         71:99:be:9f:e3:9a:7d:79:ff:f5:52:28:63:2f:11:2f:4b:46:
         2f:f8:80:c9:1a:24:69:8c:da:5f:72:75:28:6f:ce:44:1e:83:
         21:70:46:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:34 2024 by rpki-client on console-ams.rpki-client.org