Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b34b4cc7-14c7-3b1f-bf89-ef9f60211037.roa
File:                     b34b4cc7-14c7-3b1f-bf89-ef9f60211037.roa (raw, json)
Hash identifier:          lJxVfjeWccGUsrubmfiNqyj5dc52vxub22zM6O8dsUg=
Subject key identifier:   77:47:AF:C1:52:EA:1F:9A:16:35:FD:21:BC:70:BD:3F:E7:FE:16:C9
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584754E0E0D88244F3223ECC0D00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b34b4cc7-14c7-3b1f-bf89-ef9f60211037.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     3360
IP address blocks:        2607:f028:122::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:e0:d8:82:44:f3:22:3e:cc:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=fc9f33ca-4363-4213-9c70-30f480c253e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:05:52:14:3f:c2:cc:43:a2:a9:e2:93:34:83:
                    76:ea:f3:1a:e6:f9:55:fd:c2:4a:7e:b0:36:52:fc:
                    19:0a:15:2d:09:60:a6:ec:fc:e9:96:5f:3c:7e:fd:
                    44:8b:6e:3d:0d:d0:4d:37:40:1a:0f:e2:07:8b:cd:
                    e2:5f:1c:3a:b4:16:f8:bf:33:d0:61:ea:55:33:07:
                    d4:ed:3d:63:1a:1e:93:0e:a1:1f:3c:a9:12:16:98:
                    f2:99:7c:ae:e0:e5:15:1a:da:5a:95:75:9a:21:a7:
                    ee:e6:6d:bd:11:1f:b8:12:b1:ea:de:aa:71:9e:41:
                    f2:b7:5b:6e:cb:cf:62:16:eb:1b:25:28:b3:52:0c:
                    28:d7:0b:1f:cf:65:4b:75:36:0e:74:49:d0:ce:09:
                    8c:22:49:a4:63:44:0e:0f:8f:5d:70:62:57:55:e9:
                    26:23:14:cc:b5:53:ee:61:d6:3f:d1:96:48:55:05:
                    ad:ed:cc:4b:dd:60:5b:9e:86:fb:ba:a5:4d:c8:84:
                    5c:7f:d0:8a:b7:9a:a2:c8:2e:4b:f2:15:dc:33:51:
                    a7:75:0c:b0:4f:a4:39:66:c8:16:65:85:d3:cf:bd:
                    0d:4b:b9:98:11:30:44:41:2b:e5:f3:32:34:57:98:
                    ae:f7:5b:28:a8:76:8d:bd:12:27:a5:7c:f4:f5:e7:
                    aa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:47:AF:C1:52:EA:1F:9A:16:35:FD:21:BC:70:BD:3F:E7:FE:16:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b34b4cc7-14c7-3b1f-bf89-ef9f60211037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:5e:11:e8:71:d1:74:1d:98:b9:01:e3:7c:bb:f5:df:a8:e8:
         ff:75:db:44:91:d7:dd:fb:74:bc:22:4c:e2:96:15:ba:b7:76:
         60:a5:01:86:34:11:ed:96:ae:83:aa:1e:95:90:d4:56:a2:9c:
         b8:8f:1c:97:35:e9:42:35:b8:64:57:d5:e2:f9:ec:b0:42:1a:
         ae:8c:d9:c9:0b:0e:a9:03:85:da:33:1e:f8:77:d3:b0:30:e9:
         6c:0f:9b:43:b9:40:a2:20:a6:4e:c6:31:0d:d0:43:7f:fc:d1:
         85:64:0b:aa:be:1d:4c:b9:ff:68:06:d9:70:fa:05:d4:50:5b:
         0c:26:54:7d:66:72:04:d3:70:f8:f7:b6:64:b7:2d:2d:0d:aa:
         cd:df:66:b6:e8:05:9a:09:5d:49:49:a3:cd:b8:61:d2:03:7b:
         f9:21:c2:26:85:36:c2:3a:fb:fa:41:22:71:87:ea:69:66:aa:
         cc:31:68:51:ff:7f:55:2c:44:b7:83:66:f3:81:64:8e:bb:d4:
         c6:2d:10:ac:90:c4:af:e9:cc:51:9a:f9:d7:77:18:f5:5b:a6:
         bf:86:f9:78:86:63:61:f3:6f:bd:e6:35:c3:30:78:0d:94:1f:
         29:37:44:a2:54:55:55:c5:9d:17:57:ac:6d:b7:00:39:18:6c:
         eb:d0:74:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:36 2024 by rpki-client on console-ams.rpki-client.org