Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/babe936d-1796-3a70-96b4-b4c58df1c7aa.roa
File:                     babe936d-1796-3a70-96b4-b4c58df1c7aa.roa (raw, json)
Hash identifier:          7J4FstXOBUcI0vphYm+VHM01c6cecO/rZsPLQ1qgMxg=
Subject key identifier:   46:F0:CC:1F:FE:58:2E:DC:A0:FA:D5:8D:42:26:47:49:63:39:83:56
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584754E0DD6795860DC0B66272C0
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/babe936d-1796-3a70-96b4-b4c58df1c7aa.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     202
IP address blocks:        2607:f028:142::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:dd:67:95:86:0d:c0:b6:62:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=342a9c15-91f9-4f47-bbb0-f5b91a2b66e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:b9:38:f8:b3:85:30:28:67:dd:49:73:49:
                    b6:27:e4:22:3f:2a:15:ce:f3:e0:ce:bb:cf:83:9f:
                    d2:ea:05:46:8d:70:64:45:5a:38:20:56:6d:72:ea:
                    68:48:0d:f5:72:30:ae:dc:56:06:8b:fb:4f:88:e3:
                    53:86:ec:23:6d:57:18:76:1a:45:5d:6d:ad:fb:f8:
                    64:d7:94:f4:27:e9:4d:35:aa:5c:aa:de:da:af:53:
                    33:1c:fc:80:26:73:c0:98:d0:62:14:4d:d0:2e:bb:
                    5b:f4:0c:af:86:21:33:c3:a9:ce:5c:20:4f:5f:80:
                    d7:18:29:f9:00:8f:63:7a:74:71:96:12:47:d5:ce:
                    32:87:13:49:33:9a:8e:ab:6b:ee:c3:5b:c5:54:fd:
                    4b:2d:bc:1a:69:bf:5a:c4:9d:5e:10:0c:54:20:e7:
                    4b:90:64:80:b0:5c:1a:5b:0e:2e:62:94:d9:aa:b0:
                    fb:d0:3b:68:72:b8:86:24:7e:c5:4c:6e:6c:27:0f:
                    63:a3:85:65:db:ca:1b:ee:ae:34:9b:16:9f:31:76:
                    b5:82:19:da:ad:4a:b3:0d:2d:c1:c7:f5:0b:9c:c7:
                    0a:a0:eb:92:bb:7a:a8:01:12:e3:12:58:1c:9c:76:
                    b0:67:75:a4:bd:fa:6f:0c:3f:52:4d:75:e2:73:d7:
                    f2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F0:CC:1F:FE:58:2E:DC:A0:FA:D5:8D:42:26:47:49:63:39:83:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/babe936d-1796-3a70-96b4-b4c58df1c7aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:142::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:1d:0c:97:fb:e7:0d:61:1e:f5:8d:0c:90:29:92:b8:a2:4c:
         94:78:f1:1b:e4:04:33:22:f8:11:e5:cf:a1:1e:9f:55:12:ec:
         f0:b1:56:ac:04:65:a8:eb:2f:0d:ab:7b:37:57:db:33:d0:f4:
         c9:bd:61:3e:b2:01:5b:5e:f1:d1:51:b2:7b:d1:52:14:2a:e5:
         b0:e1:3a:c1:05:fa:be:1a:31:f1:b9:7a:22:85:a8:5c:e2:98:
         40:04:09:87:92:6a:71:8d:84:a9:ce:26:2f:f3:de:45:53:a8:
         6c:d0:9a:59:d3:0a:6a:25:d6:d1:85:05:f0:00:db:f6:c0:e1:
         d9:ed:be:2a:1e:e2:bf:21:9a:f6:27:bb:88:08:aa:40:aa:46:
         26:98:45:0b:3e:9f:c3:89:a9:16:5d:50:3b:ab:9e:75:ec:6e:
         ac:45:2e:89:be:0e:d2:ae:70:fe:25:61:7b:f2:29:98:e8:19:
         9a:fb:21:ed:70:36:97:72:bb:c9:69:79:05:1c:45:48:08:2b:
         86:34:6d:c9:9e:6f:ef:fc:6d:92:de:8d:95:ec:81:d0:98:9f:
         14:49:a2:5f:52:31:3c:8b:9e:58:f4:97:63:40:d5:e2:54:e4:
         17:f9:97:19:b1:0b:04:6c:6a:89:54:23:ab:36:77:a3:a2:86:
         aa:d9:cd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:45 2024 by rpki-client on console-fra.rpki-client.org