Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8e66b801-7d0f-33cf-b0d9-048078de50a9.roa
File:                     8e66b801-7d0f-33cf-b0d9-048078de50a9.roa (raw, json)
Hash identifier:          Sz3CmkwnfGmRA42Dq1DK7bds/7gvFkiOsAyNwXBty0A=
Subject key identifier:   A7:4C:70:F7:45:C5:07:4B:47:DF:71:1E:48:D3:1A:AA:7B:62:D7:49
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858459633621966155924B5CAE530
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8e66b801-7d0f-33cf-b0d9-048078de50a9.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     3356
IP address blocks:        2607:f028:71::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:62:19:66:15:59:24:b5:ca:e5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=8a210734-25a5-44db-bf67-c688daefb49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:09:aa:b5:78:47:77:d6:06:7e:8b:39:59:
                    f1:2d:78:30:7f:dc:80:d4:16:13:e4:d1:36:d7:3a:
                    8e:ed:65:c7:d5:4c:46:be:d3:7c:f4:97:0c:0f:f2:
                    16:e1:4f:82:26:70:29:a9:59:c6:66:4a:20:70:2d:
                    c2:a8:ab:b4:6d:68:97:bd:f6:8a:58:4a:45:9c:d5:
                    70:c1:08:20:ef:58:41:69:ca:0c:f4:79:29:19:78:
                    b9:57:37:6c:b7:d0:28:10:62:c4:68:3a:e7:09:ca:
                    5f:ea:33:bf:ff:12:09:49:4b:32:0f:57:eb:6d:f2:
                    87:1e:b2:e9:65:ed:da:2a:60:4b:90:95:38:f8:10:
                    82:3f:65:13:fb:d3:d2:32:98:18:47:aa:71:a3:88:
                    d1:66:e3:4a:cd:a8:02:50:fa:9d:0d:ec:70:68:2a:
                    0e:ba:c6:87:ee:b6:d8:0c:ec:77:a5:96:18:d5:54:
                    8f:b7:46:fb:ee:2b:eb:b1:8b:d9:ef:ff:01:da:61:
                    9d:6c:03:1c:6d:83:07:52:31:5e:ae:c3:bd:0a:64:
                    9b:b7:fc:58:dc:90:4c:76:13:ba:b8:58:57:5b:28:
                    55:69:7e:95:8f:6a:2b:60:86:ad:21:5f:18:14:2f:
                    9e:57:36:4d:34:9a:68:e5:a7:e4:77:66:d9:55:cf:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4C:70:F7:45:C5:07:4B:47:DF:71:1E:48:D3:1A:AA:7B:62:D7:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8e66b801-7d0f-33cf-b0d9-048078de50a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:71::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:8a:3a:ea:73:02:38:40:99:33:37:be:e9:67:6f:b6:13:85:
         33:c9:98:97:3a:5d:28:71:a5:c9:40:8e:c6:d2:8b:83:16:e5:
         25:db:cb:8b:89:51:46:36:da:52:11:3a:f9:13:57:3e:3e:f9:
         5f:d4:0b:a6:f5:6f:66:c3:25:0c:0a:dd:c1:74:11:af:b2:9b:
         15:34:9b:8c:79:3f:62:12:cf:d7:ec:23:5a:fd:a6:bd:f8:b6:
         01:9a:fa:1f:db:e3:69:64:aa:c4:22:0d:8b:52:0b:2d:8b:2c:
         01:e2:82:c6:fa:43:9d:a9:d1:59:59:00:32:7f:31:ce:b4:64:
         67:00:81:f5:6c:71:a1:98:f6:5e:63:9b:4a:95:0f:a3:23:b7:
         3e:5c:29:6c:1c:ce:51:47:d4:61:65:b0:d4:84:d6:da:88:72:
         59:db:72:fb:ac:e5:7e:7d:37:fa:cc:f0:fe:74:4c:83:3d:da:
         5f:1b:af:11:ba:37:cd:83:33:bd:9b:d8:3f:d9:67:26:61:d6:
         a2:f8:f0:f6:4b:17:50:c1:3e:43:e2:36:dc:34:39:7e:fb:d5:
         e7:08:25:e5:60:b0:3d:14:c9:9e:f1:0d:3f:e8:fd:9d:a2:a8:
         0b:2d:d6:35:67:1c:b9:2e:0f:9b:61:9a:c3:92:a7:fe:75:6a:
         69:28:51:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:59:52 2024 by rpki-client on console-ams.rpki-client.org