Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e8e63834-8dcf-39e0-999b-b3d44ce61cff.roa
File:                     e8e63834-8dcf-39e0-999b-b3d44ce61cff.roa (raw, json)
Hash identifier:          xcSrFwSx+5xpu99f8oLJkQZGzFaUHKbpsHhOj7HXJ9c=
Subject key identifier:   2A:88:B1:E4:BF:08:84:F7:E5:E7:A0:56:D6:A8:AA:56:8A:45:F0:00
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858483455750A97F0D6B78EE95150
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e8e63834-8dcf-39e0-999b-b3d44ce61cff.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     202
IP address blocks:        2607:f028:41::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:75:0a:97:f0:d6:b7:8e:e9:51:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=fd7fa593-5571-4a44-8e2a-6309ea52b3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:d4:08:1f:64:67:39:dd:97:8f:09:77:9d:
                    3c:58:00:fb:1a:49:38:44:dc:ad:9f:cd:11:c6:f1:
                    ff:fa:ea:29:8c:3d:7b:3e:a0:2e:07:f5:52:59:9c:
                    08:b0:84:db:9c:2d:0f:14:cb:3a:1d:6b:f4:74:d5:
                    6d:fd:fd:ed:30:c7:e8:d5:40:26:8e:cf:98:a6:4d:
                    45:38:2d:10:cf:81:83:ef:c9:61:3c:2b:be:77:20:
                    0d:0e:c3:b2:d1:6c:21:86:27:cb:18:37:20:56:e3:
                    b0:db:1a:0a:74:72:de:14:3b:d3:f7:25:12:c6:10:
                    7a:8e:a9:de:cf:c7:17:5a:5e:ca:34:ef:fa:2f:9e:
                    d2:f6:b1:2e:4b:32:63:ff:20:84:09:c0:d8:c6:49:
                    45:fb:50:26:d6:a7:44:2c:a1:a8:be:60:4f:b4:95:
                    81:85:ce:3a:5f:57:eb:20:e7:d6:91:b5:28:68:d3:
                    c0:07:40:62:58:0b:c2:06:e6:c0:d3:8e:93:88:f3:
                    54:11:15:1f:8f:29:35:a7:38:d6:e4:88:a1:60:34:
                    f3:63:51:b4:9a:78:45:af:fc:48:12:ee:2c:37:ff:
                    52:64:8a:39:03:34:cd:07:e3:e9:17:52:8e:f2:9f:
                    24:a2:cf:58:6f:9f:7a:89:6a:58:cb:32:50:9f:5c:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:88:B1:E4:BF:08:84:F7:E5:E7:A0:56:D6:A8:AA:56:8A:45:F0:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e8e63834-8dcf-39e0-999b-b3d44ce61cff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:11:c3:29:33:5b:22:e6:15:91:c8:3d:c3:09:c5:6f:1c:69:
         f5:de:52:1f:46:11:c1:88:20:6a:d6:0b:42:8d:ec:6e:30:2e:
         39:30:24:af:4b:90:ff:e4:1c:46:bb:67:d4:19:87:03:30:65:
         86:a0:35:78:bc:4d:4b:1a:39:8c:b6:c9:0c:fe:e3:c4:98:f0:
         b7:5c:14:43:2f:56:fb:04:64:9a:d6:1d:13:f4:2f:4e:3c:de:
         18:fb:9f:bb:83:d8:8a:95:23:cb:08:a2:b7:77:5e:cc:55:ab:
         f1:5f:e4:d4:1e:30:6d:d8:9a:b6:4e:5c:69:80:14:76:4f:e4:
         e9:a5:3c:c6:ad:b2:e6:81:ce:0f:c0:f5:f1:3a:88:8a:4a:3f:
         60:7f:69:d5:0b:5c:69:ce:e0:6f:6a:62:ee:e9:d1:59:be:cd:
         a3:f4:8f:c0:9e:18:e0:3c:5d:04:d5:24:2b:da:b2:88:54:db:
         b0:ae:48:7c:c6:72:80:f9:cc:1a:b5:86:e0:7a:54:39:d6:34:
         7c:0a:6a:77:7b:83:5c:ff:23:0f:5f:3a:75:21:d8:0a:dd:b0:
         3a:35:3d:c1:16:44:1f:28:99:63:d1:49:28:c5:a9:5c:ba:ce:
         eb:a1:57:d4:d4:3e:ee:0c:11:e6:00:a9:60:2b:2c:77:ae:da:
         e9:ea:7c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:35 2025 by rpki-client