Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c0bc989e-b019-3d48-9557-d551ec93af39.roa
File:                     c0bc989e-b019-3d48-9557-d551ec93af39.roa (raw, json)
Hash identifier:          n82smW+Pcm+QlqieYmyTazFEYrv/ni6kCAMiTZu1w5w=
Subject key identifier:   13:8D:98:DA:91:EE:7D:D6:E6:46:16:32:90:C6:40:F0:FF:7F:54:EE
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584913AC3090DC994B58FF91BC00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c0bc989e-b019-3d48-9557-d551ec93af39.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     3360
IP address blocks:        2607:f028:81::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:30:90:dc:99:4b:58:ff:91:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=5f850a59-cf08-457a-85d1-899c43493835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d6:07:71:0c:b1:3f:90:57:1c:2c:3b:41:ef:
                    39:2b:db:38:f7:a2:09:b7:f1:ac:b9:85:a0:f0:ce:
                    ee:6e:96:95:f6:a6:4c:3a:93:40:c6:9e:ea:85:39:
                    78:26:e1:be:b1:26:8f:07:18:52:3c:52:5d:c8:34:
                    2a:89:a0:2e:04:67:80:04:fa:e9:ac:f6:83:cf:fb:
                    f9:30:e6:54:2e:f0:de:bc:33:b9:b7:b6:15:bc:dc:
                    16:0b:2a:f4:01:a4:8d:63:a3:c5:89:cb:67:c2:3e:
                    32:36:18:e7:79:ca:0f:86:51:7f:94:52:12:d0:dd:
                    82:e6:f8:7a:8a:d7:1a:2e:ca:fe:28:df:3f:ff:d5:
                    72:87:31:9c:bd:75:5e:12:28:a9:7d:c0:51:1a:35:
                    77:31:b2:10:9f:bb:e4:5a:94:57:24:06:b4:66:93:
                    e6:8a:02:f4:e1:bc:10:2f:4f:56:94:c6:e6:cd:17:
                    57:24:04:98:2c:06:8c:5d:63:20:f1:bf:b2:b5:9f:
                    7a:4e:15:fc:7c:72:49:87:06:9d:8f:68:64:39:b3:
                    5a:a8:af:db:dd:86:44:a1:3b:ec:25:53:54:d5:67:
                    12:4a:c6:ac:b9:68:0b:d6:6e:8d:40:b0:81:52:ef:
                    ae:29:ea:94:37:b6:54:f9:93:f4:4d:5a:b6:63:b3:
                    6d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8D:98:DA:91:EE:7D:D6:E6:46:16:32:90:C6:40:F0:FF:7F:54:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c0bc989e-b019-3d48-9557-d551ec93af39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:81::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:dc:46:09:f9:2f:ae:7b:33:2e:50:09:fc:45:eb:d7:d1:2d:
         94:5f:1b:e1:8a:7d:46:f6:f9:87:a0:d7:6a:7a:6f:c9:50:46:
         0e:48:c3:5a:ec:84:f0:6d:3c:c9:86:47:77:f6:b6:6d:bc:5f:
         7e:5d:23:96:cd:f1:85:9f:a4:cd:14:12:0d:9f:6e:f4:39:f5:
         43:08:74:0a:d6:2c:d0:75:5b:b1:fd:59:71:72:17:f0:df:4c:
         76:0c:f9:f9:9f:5a:bf:21:da:dc:4b:31:39:e6:38:8a:8e:9d:
         b8:d3:7c:f5:73:e7:74:79:88:c5:53:a4:92:b8:59:33:93:61:
         52:62:f9:55:93:1a:84:b6:8f:d7:ac:e1:cb:7a:7d:5c:af:a1:
         0c:6f:ef:08:09:f5:e1:59:a0:a1:db:90:e0:81:33:e7:0e:6b:
         7b:ec:91:bb:3c:27:50:4a:c4:9e:ef:49:50:0f:b0:7a:71:46:
         58:25:09:e7:02:56:74:ef:bd:29:5e:e0:49:9a:5c:d9:30:9e:
         3f:3e:8a:95:fd:fb:43:a3:ad:40:83:56:20:26:6a:04:62:13:
         33:4b:97:70:2a:a7:02:fd:94:16:f5:ec:b6:c4:db:33:9d:03:
         2f:c7:50:26:33:00:be:09:42:7e:2b:a0:19:30:79:74:ae:53:
         76:f1:94:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:14:07 2025 by rpki-client