Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7cd6391-9294-35a6-a7bd-59edd639bbcb.roa
File:                     a7cd6391-9294-35a6-a7bd-59edd639bbcb.roa (raw, json)
Hash identifier:          D1K2yxvBHqX4DQnZsDpaGMFj9FDe2QC9j75SnUBNSwA=
Subject key identifier:   DB:EE:A3:62:AE:4E:A1:14:42:FB:10:12:01:2B:52:49:3F:7F:3C:88
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858459633631D9ABF6851B897F730
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7cd6391-9294-35a6-a7bd-59edd639bbcb.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     3360
IP address blocks:        2607:f028:132::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:63:1d:9a:bf:68:51:b8:97:f7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=fcd32e7f-79d3-462d-89eb-700c3ebb0521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e1:5b:8d:21:36:1c:a6:db:f0:f2:51:55:3d:
                    ff:8d:8c:d6:9c:bc:14:5a:59:01:f1:97:3c:7e:d7:
                    65:4e:ba:b4:de:7e:5b:ea:06:9a:ae:08:16:19:e8:
                    21:d4:e6:24:14:9c:be:73:24:5e:6f:e9:49:7a:af:
                    2b:cb:0f:73:d0:b8:52:cf:65:4f:85:9a:df:86:98:
                    bb:75:05:e1:5b:13:0b:3f:5f:e9:fe:b9:20:2b:c9:
                    85:83:92:a4:2e:3b:05:81:04:ea:e0:27:dc:35:c8:
                    84:a5:a0:09:a8:32:99:ed:58:af:b5:ae:9d:27:17:
                    ee:10:2a:d0:99:cd:e1:40:19:b3:ab:b1:dd:48:8a:
                    52:0e:ad:26:d9:9c:63:7d:05:a6:f4:f7:af:60:de:
                    35:3d:21:65:f3:88:df:96:b6:dc:84:29:30:67:ea:
                    c2:19:9b:ce:77:83:59:04:db:7a:b9:cc:3c:03:91:
                    79:65:b1:05:42:1c:ef:a9:5c:bd:62:dc:db:9f:10:
                    8c:a1:3f:87:4e:0a:9f:1b:48:d7:57:a0:0f:62:85:
                    dc:12:bb:af:8e:3d:aa:28:b7:28:ae:8c:1a:7d:58:
                    31:c3:25:01:75:a5:35:86:07:c7:b6:89:3e:fd:eb:
                    6d:bd:07:ae:40:1b:94:64:6d:6d:06:87:04:1f:ef:
                    a0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EE:A3:62:AE:4E:A1:14:42:FB:10:12:01:2B:52:49:3F:7F:3C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a7cd6391-9294-35a6-a7bd-59edd639bbcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:132::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:52:5c:56:6b:9f:f7:a2:97:07:0d:a2:cb:25:ce:bb:b9:e3:
         91:e2:42:7f:a5:d0:78:76:6e:af:fe:a2:28:05:de:d7:98:7b:
         98:1d:44:20:55:9e:1f:77:9e:76:2c:c3:4c:70:50:29:34:78:
         a2:44:0d:c0:b9:05:a4:72:d7:cb:78:9f:dc:22:57:54:95:e7:
         74:0b:3b:54:ff:ca:5a:16:4f:6f:d6:3d:3d:de:77:84:78:a8:
         11:6b:3b:c1:d5:1b:29:3e:c2:03:06:27:ae:73:ed:48:73:07:
         b3:96:1d:ad:33:46:5a:f7:0d:ec:dd:0d:9a:ad:fd:57:44:e7:
         11:26:7e:e0:29:82:62:4f:e0:df:4e:92:8d:c8:a7:02:e4:45:
         67:80:11:2a:31:67:e5:fb:64:84:75:2a:40:18:96:a5:1f:ec:
         df:af:3b:85:66:37:b2:3e:ec:70:7e:05:b9:87:91:10:1a:7e:
         01:54:fe:34:2b:0e:ba:3f:08:0e:96:41:0c:ca:a3:42:29:63:
         5e:95:d9:a5:26:5e:e4:62:53:46:f0:53:da:1c:60:cd:08:9c:
         06:80:a2:a5:29:a1:d9:a0:0b:1e:96:c3:04:44:0e:43:1a:9c:
         f7:df:df:fe:e5:2a:af:8f:ab:2f:e2:50:41:8a:6e:18:7f:56:
         d0:07:9e:7a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWWM2Mdmr9oUbiX9zAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MDQxODEzMDAzM1oXDTI0MDcxNzEzMDAzM1owLzEtMCsGA1UEAxMk
ZmNkMzJlN2YtNzlkMy00NjJkLTg5ZWItNzAwYzNlYmIwNTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+FbjSE2HKbb8PJRVT3/jYzWnLwUWlkB8Zc8
ftdlTrq03n5b6gaarggWGegh1OYkFJy+cyReb+lJeq8ryw9z0LhSz2VPhZrfhpi7
dQXhWxMLP1/p/rkgK8mFg5KkLjsFgQTq4CfcNciEpaAJqDKZ7Vivta6dJxfuECrQ
mc3hQBmzq7HdSIpSDq0m2ZxjfQWm9PevYN41PSFl84jflrbchCkwZ+rCGZvOd4NZ
BNt6ucw8A5F5ZbEFQhzvqVy9YtzbnxCMoT+HTgqfG0jXV6APYoXcEruvjj2qKLco
rowafVgxwyUBdaU1hgfHtok+/ettvQeuQBuUZG1tBocEH++gwwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNvuo2KuTqEUQvsQEgErUkk/fzyIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTdjZDYzOTEtOTI5NC0z
NWE2LWE3YmQtNTllZGQ2MzliYmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEy
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAExSXFZrn/eilwcNosslzru545HiQn+l0Hh2bq/+oigF3teYe5gd
RCBVnh93nnYsw0xwUCk0eKJEDcC5BaRy18t4n9wiV1SV53QLO1T/yloWT2/WPT3e
d4R4qBFrO8HVGyk+wgMGJ65z7UhzB7OWHa0zRlr3DezdDZqt/VdE5xEmfuApgmJP
4N9Oko3IpwLkRWeAESoxZ+X7ZIR1KkAYlqUf7N+vO4VmN7I+7HB+BbmHkRAafgFU
/jQrDro/CA6WQQzKo0IpY16V2aUmXuRiU0bwU9ocYM0InAaAoqUpodmgCx6WwwRE
DkManPff3/7lKq+Pqy/iUEGKbhh/VtAHnno=
-----END CERTIFICATE-----
Generated at Sat May 18 21:32:42 2024 by rpki-client on console-ams.rpki-client.org