Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ade5e37e-104a-38c9-bcee-dd38963a60ce.roa
File:                     ade5e37e-104a-38c9-bcee-dd38963a60ce.roa (raw, json)
Hash identifier:          4WBCYVD1uf4jbcTV12Yfln1Ya0zVGYhrDEYXYhvnK5Q=
Subject key identifier:   DF:BD:28:7A:20:D8:0B:34:F5:7C:89:F8:5E:60:FA:E2:DB:6A:CE:A4
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584596335FFBDCA9328ABA8D3EC0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ade5e37e-104a-38c9-bcee-dd38963a60ce.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     3356
IP address blocks:        2607:f028:41::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:5f:fb:dc:a9:32:8a:ba:8d:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=006669a8-17ff-4466-b5fd-7b370edac1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:66:c1:8c:38:ee:73:7f:9e:2e:41:2e:b2:43:
                    33:6f:2b:c1:98:2a:9b:f2:80:fd:ee:8d:d7:39:74:
                    cb:f2:c4:1b:51:d0:5b:6c:76:99:a4:34:a9:fa:57:
                    52:59:f9:c5:ea:1e:a2:b7:01:ed:99:03:63:8d:0c:
                    81:80:08:5b:24:fc:4a:1c:ee:ff:61:f4:6c:ea:cb:
                    0e:18:9b:2b:fe:6e:7c:9b:01:5b:74:ac:77:7b:97:
                    3e:b2:06:04:e3:0e:98:10:43:5e:ba:5e:f4:fa:ca:
                    be:84:70:be:da:8e:81:e4:7d:4b:02:1a:25:09:c4:
                    a7:ee:c1:83:d4:ab:75:53:a9:61:cf:8a:3a:21:09:
                    f6:89:00:01:23:83:3d:59:e1:77:b6:37:23:a6:1c:
                    c1:7c:1f:06:ac:c1:8d:5f:43:38:5a:89:58:ac:18:
                    00:7c:55:32:e1:7c:8a:84:a5:02:8f:a1:5e:2b:c2:
                    47:80:98:e5:1b:0d:87:7b:9d:89:50:4f:38:91:af:
                    87:eb:9a:30:fc:62:50:00:3d:8e:86:1f:b6:13:26:
                    26:6a:30:a2:83:35:d2:3b:71:0b:f5:b9:70:4f:4a:
                    51:bd:c8:42:18:49:08:9a:0b:ab:78:fb:e3:0d:67:
                    69:94:e1:46:df:bb:4f:c8:93:38:10:ca:cd:6d:57:
                    b3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BD:28:7A:20:D8:0B:34:F5:7C:89:F8:5E:60:FA:E2:DB:6A:CE:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ade5e37e-104a-38c9-bcee-dd38963a60ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:9d:62:bd:0d:57:25:f1:61:79:bb:c7:e4:61:bf:2f:0a:a1:
         c8:a7:08:53:5a:fd:ba:9f:3e:10:26:6d:dc:31:63:06:47:18:
         8e:d8:01:ca:51:4b:b7:cd:8b:ad:d3:01:de:91:0b:01:00:a4:
         aa:46:be:a5:e6:93:25:6f:bb:40:b0:4c:1f:3c:9f:bf:06:c2:
         fb:2e:dd:c7:c2:70:b3:eb:01:dc:a5:59:be:0d:57:61:cf:9a:
         eb:22:ae:9e:3e:75:bc:d5:24:ca:a4:cb:2c:8d:f8:b3:b5:23:
         c6:1c:d1:86:0f:10:d9:5a:9d:a5:ec:4c:64:3d:bf:e1:d2:e9:
         1c:98:67:44:f6:d7:6b:bd:01:a9:a5:70:fb:6a:cd:a3:d5:d4:
         99:25:8e:74:d2:77:10:43:46:ca:50:c5:e6:40:8f:90:c0:58:
         8d:f2:e0:c8:9e:89:46:5e:41:e4:c9:13:60:b3:c6:b5:15:55:
         cb:2d:f2:da:81:12:16:20:38:ed:a0:12:57:92:ab:b4:7a:0d:
         ce:72:38:d3:5c:72:83:f9:fa:2a:b5:9d:e4:fb:4e:29:53:30:
         b5:6a:f1:77:fe:d6:c2:14:c7:ce:a5:c6:79:5b:74:c2:56:b0:
         0f:96:5b:02:2d:04:25:47:a2:6b:19:bf:41:c6:63:e7:4e:ff:
         c4:89:06:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:10:56 2024 by rpki-client on console-fra.rpki-client.org