Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e06039e-f189-3fc0-bbd8-9a9650543373.roa
File:                     3e06039e-f189-3fc0-bbd8-9a9650543373.roa (raw, json)
Hash identifier:          luCXHhfFnqlCTCzP2tBBPyCpI72h+Kt+si9m3gd6kXw=
Subject key identifier:   C5:31:E6:75:3A:88:5B:84:CD:84:82:D7:83:B0:97:7A:E7:8B:E9:0A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC2F0E5F328CE705253080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e06039e-f189-3fc0-bbd8-9a9650543373.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     3356
IP address blocks:        2607:f028:62::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:2f:0e:5f:32:8c:e7:05:25:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=cce77f8d-a735-42e6-9679-9092ef4403f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:79:ff:a9:71:96:5c:f1:fb:ed:42:ff:c8:
                    3d:05:e5:5f:6f:0b:3b:5b:4e:17:1c:d0:d9:c5:67:
                    a5:2f:c8:da:67:45:9d:0c:f0:07:5e:f5:84:3c:b2:
                    65:d7:3a:63:b1:af:d7:13:40:84:ee:9f:97:f1:dc:
                    f9:36:e0:20:30:d3:ca:de:c9:b9:ec:32:04:ed:a8:
                    89:ae:86:c8:7b:6f:21:e3:88:12:61:98:66:0f:71:
                    d3:17:74:8c:0a:16:14:a7:e3:40:9b:e2:dc:eb:19:
                    1a:c0:0b:ef:a1:22:68:b2:94:e5:e5:06:da:cf:96:
                    dd:a9:07:59:0c:c9:75:7d:fc:55:5f:e5:53:bf:18:
                    97:c1:f9:87:21:78:59:d7:9c:01:22:b4:4f:f9:37:
                    4f:c9:96:19:89:a2:7c:28:f6:7e:7d:c2:91:91:21:
                    1f:9a:22:6d:86:0b:e2:70:16:dd:83:cb:ed:e6:ab:
                    a6:35:de:be:ac:68:5d:98:50:83:16:98:fe:c7:f2:
                    ba:ee:d1:7d:48:b1:19:b9:41:39:bb:db:1c:46:59:
                    e3:83:e9:a0:b9:59:9d:f5:17:32:41:79:8c:80:94:
                    60:d8:04:88:2c:e5:ee:e9:47:08:78:f8:3c:cb:10:
                    cb:19:19:ea:23:73:5f:37:0c:8a:7a:0a:f3:70:e4:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:31:E6:75:3A:88:5B:84:CD:84:82:D7:83:B0:97:7A:E7:8B:E9:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e06039e-f189-3fc0-bbd8-9a9650543373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:62::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a9:64:00:f2:7b:bf:84:d5:81:98:05:81:56:42:9e:e7:ad:
         a0:28:2e:73:99:e3:e2:3e:3e:0f:5a:66:ec:86:2c:eb:45:39:
         21:c8:49:e5:aa:df:27:14:ac:06:38:85:a7:aa:11:3b:94:61:
         0b:6e:41:43:fa:a9:5c:30:44:5a:46:30:27:e0:c7:04:f5:8c:
         ff:dc:ea:dd:c9:a5:29:00:71:2d:98:33:70:b2:ff:0f:61:c8:
         a6:cb:62:31:65:e5:0c:dd:48:88:6c:c7:2e:21:40:d2:9e:fb:
         aa:ab:8f:fc:16:ef:73:6b:52:3c:13:1c:98:67:da:06:ee:f9:
         e3:e9:73:b7:47:11:10:00:1f:af:42:ef:33:44:35:ec:0c:51:
         b2:f9:f3:48:5e:5d:35:ed:1c:2c:d7:12:0b:bf:31:be:75:cd:
         a4:f9:29:81:e8:68:e4:19:7d:a6:9c:f7:97:98:a5:f7:59:cf:
         eb:87:7b:62:4d:4b:9f:04:b8:cb:d7:62:27:4b:d2:08:0f:3e:
         01:f3:92:b7:a3:39:d0:74:72:ea:c3:2e:cf:72:80:4a:20:5f:
         4a:b3:02:0e:19:3b:db:11:64:32:51:93:38:69:b2:8e:be:64:
         a7:19:75:87:47:78:69:e2:d7:7a:4e:5a:a7:d6:5d:68:b2:9a:
         30:98:fa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:12:37 2025 by rpki-client