Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6087f229-ac36-33fb-8a5e-17ed0d3eada4.roa
File:                     6087f229-ac36-33fb-8a5e-17ed0d3eada4.roa (raw, json)
Hash identifier:          YOSf3Bbv1lNozzOB56ctImEutKY5cF5gqKIQURkWSgQ=
Subject key identifier:   06:9F:B1:A5:C5:61:77:55:C2:6A:90:B6:D9:B8:8C:26:EF:01:C7:6E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848345576F6D392C89255E3D980
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6087f229-ac36-33fb-8a5e-17ed0d3eada4.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     3356
IP address blocks:        2607:f028:61::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:76:f6:d3:92:c8:92:55:e3:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=5f7f4d37-61a9-4e57-b75f-966b74619a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:91:66:e5:e9:3c:7e:0d:09:6b:ae:93:45:0a:
                    c9:6e:53:9f:32:9a:06:8a:ff:4b:88:2a:53:b4:b6:
                    df:36:b6:ce:06:20:4f:d7:67:53:ec:d7:34:5d:1e:
                    29:25:36:a5:36:5f:c7:65:71:ca:c1:ae:32:e4:a3:
                    75:5d:1a:92:c2:7a:c9:b5:53:c5:3a:a5:57:32:8c:
                    0d:89:77:3c:73:ca:c3:b5:dd:82:8b:b1:fc:d8:41:
                    8f:ae:69:64:5a:a8:3e:96:38:72:46:7f:46:38:55:
                    7a:6a:4b:3f:4a:f0:9f:ae:16:a0:a2:9c:2f:12:c6:
                    c3:a1:61:81:2e:42:1a:3d:95:5b:db:e8:14:27:d4:
                    2f:89:5f:2a:2b:dd:34:c4:cf:04:56:2e:1b:eb:29:
                    01:0b:74:e6:cb:f4:4d:07:2f:94:42:d4:e2:ec:6e:
                    e5:ea:d5:4e:9c:82:e7:c4:e1:e7:13:20:87:43:d1:
                    c0:ce:2b:f3:48:3e:be:c7:be:1d:1e:08:ec:56:b2:
                    16:d4:3d:b0:02:3d:a3:fc:e1:ba:6e:f7:0d:c2:eb:
                    a2:44:8f:5f:35:eb:ee:89:0f:2e:07:7a:f3:47:77:
                    0a:f2:ba:e2:0f:49:d4:dd:0b:18:99:ae:b2:df:93:
                    da:1e:41:9f:3e:96:53:ac:35:42:f3:f8:79:62:7f:
                    f4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9F:B1:A5:C5:61:77:55:C2:6A:90:B6:D9:B8:8C:26:EF:01:C7:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6087f229-ac36-33fb-8a5e-17ed0d3eada4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:61::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:6e:19:77:2f:51:3f:d4:70:1d:47:47:11:0c:c5:a2:f2:01:
         f3:5e:2a:cf:87:d7:fb:f1:5e:21:c8:9c:a2:99:27:9f:e9:4a:
         2b:99:f9:4f:28:0b:15:99:1d:ff:e6:2d:d6:59:cf:13:6a:fe:
         40:24:4f:39:fc:99:5b:97:15:58:11:d7:1d:8c:b6:3a:fe:a2:
         6d:c1:2f:88:d4:b2:1f:b4:e4:85:d3:bc:12:d4:72:93:66:b0:
         4f:f3:94:0c:22:55:df:c7:5d:d9:b6:b1:51:d8:8d:88:e4:44:
         58:7e:d5:5a:fc:69:d1:1a:45:36:18:59:7d:ba:fc:77:d5:86:
         4e:b4:98:c7:9f:75:d9:cc:64:09:60:05:b2:03:5d:e1:1c:08:
         87:38:06:af:91:40:36:ad:28:21:3e:54:35:c1:1a:46:93:56:
         7e:29:93:91:16:99:f2:10:26:86:e9:89:db:18:f6:22:02:5e:
         47:a0:99:6e:f5:6c:9c:4e:d8:67:e0:cf:43:e1:48:63:e8:38:
         0b:9b:95:94:06:19:fd:1c:f8:88:95:8d:8e:db:82:e8:53:75:
         5e:28:5a:45:0e:60:50:0d:79:d9:b2:c8:78:98:b1:1c:c0:07:
         4b:31:31:c6:ce:e9:d7:ea:dd:cf:0b:88:e8:02:d7:c5:e8:12:
         51:ed:2e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:21 2025 by rpki-client