Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4b4bb5c8-23bb-31d3-8078-288edb4b4378.roa
File:                     4b4bb5c8-23bb-31d3-8078-288edb4b4378.roa (raw, json)
Hash identifier:          7qcRp+cM9dAKQ8VzDbo5UwOwTiTcZPC1uFu+qLEeTM8=
Subject key identifier:   40:98:BB:2F:0C:D5:B8:E4:EF:8D:9D:EF:C7:EB:44:BC:7C:13:E7:D3
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285845963363DE1862FF4AE77E7100
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4b4bb5c8-23bb-31d3-8078-288edb4b4378.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     202
IP address blocks:        2607:f028:121::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:63:de:18:62:ff:4a:e7:7e:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=59231125-baa4-4e40-ae1b-eef75730dd60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f3:53:0b:a5:67:18:91:94:c6:ff:9b:db:0f:
                    1e:bb:7b:97:1f:9d:61:5c:0a:a9:24:90:19:d4:68:
                    ab:ca:ad:83:1e:f1:2d:19:51:50:74:42:60:18:1e:
                    9b:45:a9:04:56:ef:e5:c2:60:a4:98:84:f7:51:e3:
                    33:25:1f:34:57:e3:87:6d:ba:bb:fc:00:d8:a3:9e:
                    72:93:73:c0:56:bb:e9:a6:87:b7:e0:25:5e:63:dc:
                    9a:ae:3a:ac:e5:69:20:20:01:50:88:3c:3e:dc:b6:
                    e0:89:9e:19:59:31:15:dd:26:7f:f9:94:c5:46:63:
                    32:43:80:ef:a9:e7:5f:c5:87:42:43:c2:e4:6b:27:
                    36:33:e4:c6:22:5b:0a:11:2f:7b:06:39:b0:20:77:
                    a0:d9:ad:f6:72:8b:03:f4:a2:1d:cc:74:25:d1:44:
                    96:87:c5:aa:f8:8a:22:a1:86:c3:57:2d:b6:d5:52:
                    50:04:99:61:e7:1f:2a:d2:00:90:c6:19:ba:65:4a:
                    ea:24:d0:78:dc:ce:cb:7b:87:76:9b:cd:ce:cf:7f:
                    56:8d:58:45:c0:c0:64:e2:22:14:7d:f0:a2:92:09:
                    d7:a2:c7:a2:86:44:6b:83:6a:36:d3:28:c4:48:c4:
                    85:f1:32:15:08:b7:39:06:de:24:d5:16:e1:0c:d2:
                    38:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:98:BB:2F:0C:D5:B8:E4:EF:8D:9D:EF:C7:EB:44:BC:7C:13:E7:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4b4bb5c8-23bb-31d3-8078-288edb4b4378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a2:df:69:32:19:f8:26:21:93:21:41:be:f9:4e:1f:80:70:
         ba:4f:37:1b:8b:4d:37:1b:25:c1:6c:44:df:85:12:e3:93:0a:
         c5:f9:78:da:60:0b:b7:6b:6e:7d:75:fb:db:48:bf:9a:af:35:
         ba:9a:37:aa:93:f9:a3:e6:5a:5c:34:f1:e9:55:fe:89:01:c8:
         3e:15:bf:6e:98:c5:d5:fb:5e:4a:b5:41:dc:06:0b:73:78:bc:
         b2:1c:8a:9b:69:92:e6:90:f7:2a:fb:eb:9e:63:d0:cb:d3:be:
         8b:f7:b3:62:0e:12:4c:8a:58:41:8a:40:8c:8f:7f:d0:04:ea:
         e4:9b:f2:74:6b:b1:3b:1b:c5:3f:a3:cc:0c:b2:ee:64:11:07:
         ca:f3:f2:09:62:f5:b2:26:5d:db:d0:a3:15:74:3d:04:6e:91:
         c9:23:e3:57:e8:ab:75:96:04:3c:78:da:82:4e:fa:a9:81:e0:
         ae:ca:fc:24:b7:cf:a7:4a:5e:b2:58:a1:83:6e:a9:d4:fc:bb:
         55:88:46:e6:d8:b4:b1:e4:d8:74:a9:dd:80:4f:15:83:03:6d:
         f4:00:5c:e8:8e:2b:35:01:5f:0d:5c:31:25:a4:bf:ed:10:21:
         aa:f3:3c:03:57:eb:4e:82:b8:fa:48:e7:d4:48:25:f3:38:03:
         88:8f:f1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 02:55:44 2024 by rpki-client on console-fra.rpki-client.org