Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/84d8f983-17e2-3014-a332-aa6690152cad.roa
File:                     84d8f983-17e2-3014-a332-aa6690152cad.roa (raw, json)
Hash identifier:          69PyBeQJgevSxo/s+M5bmSKsCdiDcK1vC4/rHfKvugU=
Subject key identifier:   72:31:A0:61:C4:8C:1C:E7:7F:BF:08:92:11:D7:6C:B0:2C:CD:D8:59
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC2C4014B7BD0C66751140
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/84d8f983-17e2-3014-a332-aa6690152cad.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     203
IP address blocks:        2607:f028:31::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:2c:40:14:b7:bd:0c:66:75:11:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=a4ef0227-ff55-48b0-8b72-99990e57e0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:78:33:86:57:a0:86:53:a1:ae:d7:1f:c8:7f:
                    7b:16:4f:57:fe:a2:a2:bd:48:f8:e0:48:2c:ad:71:
                    da:4b:5c:75:f4:27:e3:ac:71:c8:4e:4a:59:5c:a8:
                    f4:89:54:a1:c5:ca:64:46:4c:89:70:a2:f8:c1:6a:
                    c4:8f:5b:6c:f6:33:ff:58:f1:17:f3:ad:eb:50:6d:
                    94:46:6d:ac:46:12:b9:19:40:59:04:1f:0b:83:ea:
                    50:6c:ba:96:a5:ba:80:b2:ab:7f:74:1f:ad:62:b8:
                    ca:7b:34:a5:84:2f:ac:13:ee:ac:82:c7:31:33:5a:
                    38:95:2f:57:35:95:e6:be:8e:4e:82:7e:9f:50:4c:
                    42:ee:7a:e4:b2:d1:43:06:84:bf:c9:51:d7:af:ab:
                    26:64:d0:5e:48:67:66:3b:d6:13:b9:bb:fd:50:7c:
                    fe:a6:8f:81:a6:68:e3:64:32:de:bf:59:1b:bd:b9:
                    ef:f5:62:9e:a6:79:e0:88:9b:8e:58:19:c2:62:5a:
                    35:02:eb:81:2f:9e:1a:cc:67:d6:d5:be:92:98:0a:
                    08:8f:9f:f1:18:61:55:80:ab:04:97:30:6e:02:34:
                    58:4e:d9:a4:2d:f8:29:a7:1b:c3:a6:5f:f9:16:c9:
                    98:bd:00:b3:7d:12:39:da:9f:23:ec:05:8a:92:2c:
                    c6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:31:A0:61:C4:8C:1C:E7:7F:BF:08:92:11:D7:6C:B0:2C:CD:D8:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/84d8f983-17e2-3014-a332-aa6690152cad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:31::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:2a:20:76:c0:e7:f1:10:3f:4c:d1:48:c2:ea:fc:50:f0:9c:
         13:07:77:ef:28:3d:85:da:f9:b9:8d:60:65:a3:b9:03:b6:f6:
         cd:79:bb:6b:0a:6f:f8:de:c8:3a:09:a2:da:32:fc:d0:3b:b4:
         61:3a:59:2f:d1:5f:cc:fe:09:8f:67:c5:ab:bd:87:70:64:d1:
         db:76:b0:46:67:4a:96:9e:fa:56:25:e5:2d:94:db:97:df:31:
         7c:06:be:de:d6:4e:6b:95:ef:92:e2:ef:b2:52:8c:52:4b:de:
         6e:cc:17:91:1a:ab:b0:7a:77:d8:30:a1:b6:84:21:63:c5:5a:
         a3:87:2f:b8:5c:f3:48:8f:02:6f:f3:a7:66:05:b4:7c:6b:b7:
         54:97:23:86:9a:c6:a5:b2:d7:8c:62:12:3d:01:d4:fb:f8:77:
         41:5f:39:42:e6:c3:40:ce:fd:3d:b9:e7:71:6c:56:6e:60:b5:
         19:54:8b:ad:12:31:5e:66:03:3e:ad:16:31:77:51:be:1a:05:
         2f:cf:ef:4b:a9:01:34:87:94:df:91:4f:63:04:b7:11:9b:e1:
         82:f1:dd:5e:a4:33:cf:a0:77:c3:db:df:28:47:d8:37:d5:7a:
         ff:eb:86:25:5d:03:9a:29:fd:a3:3c:db:e3:77:97:e5:89:02:
         bd:a9:6a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:39 2025 by rpki-client