Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ced2b717-ace9-39d2-910f-3ba492cffd61.roa
File:                     ced2b717-ace9-39d2-910f-3ba492cffd61.roa (raw, json)
Hash identifier:          FfZ3JOc6pcbzYKQz5nNp+cw9N81TgRMFaHxGrsv5aYc=
Subject key identifier:   7C:81:91:40:99:31:E1:33:ED:57:99:AF:47:EF:9F:24:E9:01:15:D0
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285846758A28B25C69113809B9CF80
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ced2b717-ace9-39d2-910f-3ba492cffd61.roa
Signing time:             Sun 07 Jul 2024 13:00:33 +0000
ROA not before:           Sun 07 Jul 2024 13:00:33 +0000
ROA not after:            Sat 05 Oct 2024 13:00:33 +0000
asID:                     3356
IP address blocks:        2607:f028:92::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Sep 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:75:8a:28:b2:5c:69:11:38:09:b9:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jul  7 13:00:33 2024 GMT
            Not After : Oct  5 13:00:33 2024 GMT
        Subject: CN=9f19b29e-be6c-44cf-b029-668e1d80a02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:42:46:16:0d:06:81:ef:10:0f:89:76:0d:
                    29:ec:60:b0:2a:1c:b4:bc:c8:71:44:f5:6a:b4:ee:
                    94:ca:5c:11:a6:d2:8e:aa:30:bc:d3:f7:40:b1:5d:
                    46:da:8c:62:5b:97:7e:f0:f9:23:f6:f9:a1:bd:34:
                    c8:00:12:7d:4b:45:60:71:f5:97:85:3c:1c:a1:88:
                    a0:01:6c:bc:92:6d:cc:34:92:15:76:04:7b:b0:c9:
                    a1:ff:28:52:ae:4b:8f:3a:e7:6a:c7:e8:aa:66:8d:
                    b6:de:31:69:a2:96:23:78:90:ee:d8:94:be:2d:ad:
                    64:15:71:74:07:9d:df:73:34:54:8d:7e:07:b7:f5:
                    1a:07:09:58:55:3f:96:0f:11:11:63:65:60:f3:28:
                    08:a5:f9:ec:5b:e2:23:91:a4:02:b4:5b:6d:f8:c0:
                    99:7a:af:4b:18:f5:6b:7b:10:37:54:4a:1b:a4:3d:
                    af:e0:d6:16:07:a1:63:80:15:fa:b7:99:cb:c6:76:
                    c7:08:b9:1b:bb:96:f3:4d:bb:ff:48:cf:b5:ad:a4:
                    59:a3:e3:86:7f:80:ae:9e:bb:a5:2f:bd:47:fb:8b:
                    06:14:96:92:6e:a8:da:97:de:6f:7c:e7:ff:58:c5:
                    40:e1:c2:3b:fc:ab:cd:c5:dc:7c:ba:f9:ab:20:35:
                    ba:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:81:91:40:99:31:E1:33:ED:57:99:AF:47:EF:9F:24:E9:01:15:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ced2b717-ace9-39d2-910f-3ba492cffd61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:92::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:20:d3:a5:f1:61:ae:e6:db:e5:3c:31:30:d1:46:d5:77:50:
         d5:fa:4e:66:47:b3:09:8a:ef:65:d1:21:e5:02:f0:ad:fa:43:
         75:64:f6:59:0f:b9:94:58:02:e7:b2:1a:b9:3d:83:c0:34:21:
         81:fc:95:7a:fe:bd:74:d3:99:c3:e1:65:c3:4b:d2:47:33:b6:
         c7:6a:81:98:78:dd:87:27:a7:a8:ee:b3:7d:a2:47:e4:af:55:
         b5:dd:95:01:9f:d4:51:36:6e:dd:44:31:12:f9:e5:be:56:98:
         4a:02:2a:29:65:d1:d2:b3:b9:33:d1:96:c8:73:c3:ee:db:f8:
         29:dd:24:1f:9c:5a:a8:1c:ef:da:8f:01:3d:54:39:d6:0c:ab:
         6c:34:2b:c1:a8:df:5c:30:13:c7:f3:02:6c:23:f6:04:94:4e:
         cc:f5:bd:d0:d8:d6:91:8b:0e:18:0c:7e:15:f4:61:ae:89:b2:
         de:39:a3:40:80:86:bc:e3:80:a7:70:79:cc:fe:4c:07:6a:4a:
         81:33:94:9f:c2:48:3e:1c:78:b2:4e:ca:c3:83:f6:41:3b:86:
         e8:64:65:98:64:a6:66:70:b6:bf:b5:cb:64:4a:50:30:43:0a:
         54:b7:2b:ee:c6:45:31:7b:23:9e:21:46:13:a3:61:45:79:b9:
         12:de:42:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 21:50:58 2024 by rpki-client on console-fra.rpki-client.org