Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cecb1897-15f4-3893-bab4-ba93528cccd4.roa
File:                     cecb1897-15f4-3893-bab4-ba93528cccd4.roa (raw, json)
Hash identifier:          kL6xnMFXgTyn/aeg3odAMancLvkjUBOj0DOmXMXiZZc=
Subject key identifier:   84:5E:B1:8D:1F:1C:61:9F:6B:01:95:35:4E:BA:11:B0:86:3B:F0:CF
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858483F8029D9CDFD63FC23DB8900
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cecb1897-15f4-3893-bab4-ba93528cccd4.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     203
IP address blocks:        2607:f028:111::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:29:d9:cd:fd:63:fc:23:db:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=d07ef2de-aaae-413f-ac03-f1ee92f9cdc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d6:bf:30:9e:02:ed:e1:75:e0:2a:bd:52:9e:
                    be:c4:90:d1:03:35:a4:91:2a:e9:42:96:aa:1e:5f:
                    5e:55:30:a2:28:d6:87:64:8b:f4:36:fc:e8:12:b8:
                    c4:db:a7:4b:ac:9b:10:61:2f:89:15:62:74:81:09:
                    ac:5f:d7:12:4c:29:80:d4:74:42:b1:82:1e:13:fc:
                    41:f1:de:7e:dd:7c:9b:5d:a9:af:16:c2:df:18:fb:
                    53:3d:37:79:82:21:04:8c:96:f4:d0:8a:8f:7b:20:
                    a0:8b:41:5e:44:30:dc:dd:be:5b:c1:1d:b7:1f:d8:
                    8f:4b:2f:a8:b0:87:a1:be:ff:44:ee:35:ec:17:f2:
                    90:3a:e5:4a:c4:04:91:f7:2e:82:d6:a4:d1:cb:94:
                    ce:19:c2:2b:35:91:7a:35:2f:f2:d4:a9:82:b1:32:
                    2d:7e:f6:c4:5a:15:b9:ad:ae:08:07:2f:21:25:a5:
                    dc:0a:d5:c3:a8:6b:b6:0b:da:22:e0:86:29:44:b1:
                    e0:70:9f:39:5d:b6:dd:13:fd:20:32:f6:a4:7d:6b:
                    34:31:e3:29:22:13:a2:11:73:ee:9a:27:cd:ba:7e:
                    10:55:2a:78:12:5c:1e:ec:6a:de:26:7b:63:65:17:
                    88:5d:23:ad:63:24:14:64:96:6f:0d:ab:3a:d1:52:
                    a8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5E:B1:8D:1F:1C:61:9F:6B:01:95:35:4E:BA:11:B0:86:3B:F0:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cecb1897-15f4-3893-bab4-ba93528cccd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:99:90:75:ad:5e:1f:8f:07:91:e5:7b:3c:77:6e:72:18:8c:
         37:9f:29:fd:0f:34:ae:ab:cb:8d:53:c4:08:7d:94:ac:4d:08:
         4d:93:ee:32:7c:8c:cb:f0:af:4e:a9:44:04:be:e6:2a:01:5e:
         68:7b:ef:c3:cd:b6:bd:31:8c:7e:bb:80:12:bf:9f:fc:62:c3:
         8e:4f:e7:bc:37:46:de:de:f3:77:d7:62:d5:ee:33:53:b8:b3:
         36:b1:84:d6:c2:e4:07:56:89:a2:34:01:a9:65:a6:2b:16:26:
         a4:f9:02:8a:6a:b0:81:85:7d:f5:78:c5:07:23:fe:86:bd:cc:
         34:8b:9e:47:8b:38:7c:69:29:8c:5d:0b:9f:f8:8f:b0:c7:af:
         1f:db:9a:9d:2f:e2:a9:f1:27:02:30:fd:89:11:7f:14:65:92:
         3a:d4:f0:98:08:f7:66:42:1b:91:1c:f4:05:c2:f4:5b:fe:95:
         cf:f2:89:45:c0:e7:02:82:15:27:9f:3f:7a:9f:7f:48:ec:dc:
         c8:26:41:da:f7:ab:45:7f:55:81:ce:60:d3:49:f6:c8:d5:c0:
         95:ea:1e:67:e1:bb:a8:3c:61:7d:07:71:f5:e8:b8:50:a6:80:
         cc:4c:55:30:bf:d2:05:1d:a7:9e:80:d7:37:26:f3:07:15:8f:
         43:da:3f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:16 2025 by rpki-client