Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a9d3549e-932d-3470-b4cd-e73d060dc016.roa
File:                     a9d3549e-932d-3470-b4cd-e73d060dc016.roa (raw, json)
Hash identifier:          ABRJRwQktGbgyH4hg4gPGLkfqixAP5Lc68ROzRXK5FY=
Subject key identifier:   9D:23:44:9C:85:23:55:B9:B8:34:2D:B9:C2:E9:19:6C:9D:83:85:AA
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285846758A1D863BF4B9BF39B91280
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a9d3549e-932d-3470-b4cd-e73d060dc016.roa
Signing time:             Sun 07 Jul 2024 13:00:33 +0000
ROA not before:           Sun 07 Jul 2024 13:00:33 +0000
ROA not after:            Sat 05 Oct 2024 13:00:33 +0000
asID:                     3356
IP address blocks:        2607:f028:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Sep 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:75:8a:1d:86:3b:f4:b9:bf:39:b9:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  7 13:00:33 2024 GMT
            Not After : Oct  5 13:00:33 2024 GMT
        Subject: CN=969c1ee2-992c-4351-934d-7e75f50d39de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c1:91:ca:35:97:03:ec:c9:4e:58:70:f0:db:
                    99:d1:1b:83:ae:06:c8:6d:f0:29:52:95:97:67:08:
                    b1:a0:89:df:0b:43:f2:cf:4a:8c:bc:d7:8f:4e:fb:
                    da:ca:f1:ad:e1:0c:e1:b1:a5:cd:68:3f:d5:ee:a7:
                    9f:61:02:24:4f:7e:69:91:fc:22:e6:3c:68:15:ce:
                    22:66:74:1d:19:c0:fd:7b:44:c9:c3:1c:45:b2:45:
                    c9:13:df:73:d5:73:89:6b:40:2e:df:97:fa:81:0e:
                    75:e2:fb:6a:a9:fa:24:ab:56:8a:8f:ef:72:db:fd:
                    52:a0:04:dc:d7:c0:f7:43:55:13:fa:bd:ee:bb:91:
                    5c:96:c7:9b:f2:c1:06:03:cb:01:86:29:4b:b6:8c:
                    6f:c7:d3:bf:ec:cd:eb:97:e2:e2:42:6b:ad:fe:99:
                    21:b8:11:0d:fc:2f:01:86:27:34:92:19:6b:2a:85:
                    76:c6:4f:ab:bc:10:26:2f:35:2b:c3:a2:36:eb:09:
                    05:38:f5:ce:d3:c7:c4:ea:d0:6e:b4:c5:83:16:c9:
                    6f:28:28:8a:f4:8d:2b:fd:da:a7:aa:96:92:b1:59:
                    e0:af:1e:1c:38:ad:bb:d6:43:76:25:96:9c:3a:c3:
                    ed:25:32:1c:c6:d4:ee:b0:96:fb:10:ce:c6:e5:8c:
                    99:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:23:44:9C:85:23:55:B9:B8:34:2D:B9:C2:E9:19:6C:9D:83:85:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a9d3549e-932d-3470-b4cd-e73d060dc016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:81:9b:f5:47:ec:6d:47:f5:fd:cf:56:0b:0a:22:9b:09:a6:
         3f:d2:35:12:3c:c0:0b:9d:f6:17:d5:b3:7b:ba:15:39:b4:df:
         24:df:2f:c3:72:04:17:44:9b:30:8c:b0:21:27:ee:ed:c2:3d:
         2c:be:96:68:eb:04:bc:ee:1b:29:dc:40:dd:f5:06:a7:5e:6a:
         a8:bf:cf:59:f4:36:13:ba:98:1b:1e:fc:67:15:5b:4b:46:96:
         2f:56:eb:62:38:27:e8:44:0f:09:a2:4b:18:47:67:46:0b:1a:
         77:c9:f7:c1:09:90:5f:80:f8:21:e8:5f:5b:1c:75:2a:77:6b:
         18:3f:b4:8c:bf:c7:9d:49:a3:91:6e:15:85:f1:81:5d:75:e9:
         00:f8:50:fd:d5:e4:17:5c:1e:6a:b8:58:58:ed:50:94:b1:ed:
         8e:4b:cd:38:f3:3a:8c:6f:96:1c:a5:7b:7a:b0:15:6f:6b:45:
         81:6a:8e:d2:ea:12:18:07:f6:4d:1f:ac:fd:e0:fb:9c:fb:d1:
         56:0d:b8:6a:b6:5b:bd:73:9c:85:b1:fd:7b:3b:f0:e6:22:d8:
         5b:a3:89:0f:06:7f:2c:b4:a7:bb:3c:00:c5:9e:68:b3:45:2f:
         b9:67:3b:7b:59:d5:62:d5:a1:30:a5:0e:38:2d:7d:12:45:ef:
         1c:37:cb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 21:50:58 2024 by rpki-client on console-fra.rpki-client.org