Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/efd6d8b9-b339-3c39-bddd-173792a42feb.roa
File:                     efd6d8b9-b339-3c39-bddd-173792a42feb.roa (raw, json)
Hash identifier:          TS3EF8kuKmQWCX6AEqaMrQ8LAPUdHxFrZRgdqIO9VWg=
Subject key identifier:   6E:68:7B:EF:C2:4D:1C:81:C5:E1:BA:B2:D4:C9:AC:17:21:2F:87:6F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584754E0E6B3621130C561037088
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/efd6d8b9-b339-3c39-bddd-173792a42feb.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     3360
IP address blocks:        2607:f028:102::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:e6:b3:62:11:30:c5:61:03:70:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=166bee5d-8594-4a6c-b5ac-49d4c720c57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:70:6d:10:1e:a4:52:19:54:35:f6:05:8c:2c:
                    48:b4:9e:90:dc:1f:1f:4c:1a:07:7f:d7:d7:31:5c:
                    62:f9:6a:cd:c9:30:d8:e5:00:c4:a8:cf:94:34:8e:
                    19:59:cd:1d:e0:b0:e2:a9:ac:16:7c:e1:ab:89:db:
                    19:cd:a6:51:a7:5d:e6:46:45:18:50:98:d8:91:2a:
                    34:ed:45:9c:03:ce:76:7f:a4:c3:30:44:01:4a:19:
                    56:58:7f:24:22:31:c3:7f:ac:78:e2:fe:38:d2:55:
                    64:9d:67:5a:43:cf:a8:23:ee:4a:29:43:9b:17:46:
                    8c:5a:fc:b5:68:55:eb:c1:07:e8:7b:ab:c3:c8:35:
                    e3:24:09:9e:74:12:18:74:de:13:6e:b7:b5:86:ed:
                    f0:97:9c:f4:ee:d9:cf:e9:25:80:59:49:28:ad:18:
                    7a:1f:3e:d1:0f:9c:0c:1c:7d:b4:07:43:5f:00:d7:
                    30:72:cc:16:a0:08:38:c7:bf:72:be:c9:5c:12:5d:
                    19:ad:75:64:f8:28:5d:70:5b:0a:45:63:43:9a:71:
                    96:07:7b:2d:ab:c1:5e:d3:65:1b:03:06:4e:31:a3:
                    42:71:a5:f8:80:f5:f7:29:0d:c3:23:53:a5:94:3c:
                    8d:ad:73:39:06:4d:9e:d6:2b:b8:62:76:bf:d4:cb:
                    4f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:68:7B:EF:C2:4D:1C:81:C5:E1:BA:B2:D4:C9:AC:17:21:2F:87:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/efd6d8b9-b339-3c39-bddd-173792a42feb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f028:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:72:e7:c9:9d:b8:a6:0a:fd:fe:12:52:50:d9:a4:5e:2a:a7:
         63:6d:ef:31:42:8f:0b:cc:32:f3:e6:e7:52:71:66:3a:f3:e3:
         b7:1a:6e:73:39:dd:93:88:96:eb:ae:a7:ea:d3:4d:bb:7b:de:
         9d:43:64:6d:a5:cd:12:cb:e2:7b:83:5d:c4:10:24:53:09:a3:
         dd:ed:7b:d2:6d:e7:55:d7:f8:0a:f5:f6:7b:17:52:3a:c4:ec:
         f5:70:9c:df:89:3c:95:c7:3c:67:f2:a2:47:57:d3:23:d3:ab:
         f3:b0:89:2d:95:21:26:df:99:75:89:14:88:45:50:1a:9f:1f:
         1e:df:79:f5:1f:32:27:65:74:2f:70:75:5b:e4:43:f4:44:ba:
         3b:8c:05:3a:8e:c9:b3:70:c0:8d:b9:98:27:6a:58:1e:da:d0:
         d2:e6:25:07:55:1d:8b:85:25:f3:fd:4a:c9:67:f3:9d:66:f6:
         0e:f8:c9:96:f5:c4:40:63:28:e4:14:c8:69:df:fe:88:d4:d1:
         a3:7f:41:29:b8:d3:0b:8f:26:cd:27:c0:6c:66:04:cc:b8:11:
         ae:3a:57:c1:02:fb:00:ab:7a:ee:13:cd:92:7d:02:c9:bc:07:
         c8:6e:8c:07:50:06:93:25:0d:43:e7:9c:05:bc:da:36:2e:a6:
         b0:f8:94:01
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEdU4OazYhEwxWEDcIgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
MTY2YmVlNWQtODU5NC00YTZjLWI1YWMtNDlkNGM3MjBjNTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3BtEB6kUhlUNfYFjCxItJ6Q3B8fTBoHf9fX
MVxi+WrNyTDY5QDEqM+UNI4ZWc0d4LDiqawWfOGridsZzaZRp13mRkUYUJjYkSo0
7UWcA852f6TDMEQBShlWWH8kIjHDf6x44v440lVknWdaQ8+oI+5KKUObF0aMWvy1
aFXrwQfoe6vDyDXjJAmedBIYdN4Tbre1hu3wl5z07tnP6SWAWUkorRh6Hz7RD5wM
HH20B0NfANcwcswWoAg4x79yvslcEl0ZrXVk+ChdcFsKRWNDmnGWB3stq8Fe02Ub
AwZOMaNCcaX4gPX3KQ3DI1OllDyNrXM5Bk2e1iu4Yna/1MtPKwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFG5oe+/CTRyBxeG6stTJrBchL4dvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZWZkNmQ4YjktYjMzOS0z
YzM5LWJkZGQtMTczNzkyYTQyZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADZy58mduKYK/f4SUlDZpF4qp2Nt7zFCjwvMMvPm51JxZjrz47ca
bnM53ZOIluuup+rTTbt73p1DZG2lzRLL4nuDXcQQJFMJo93te9Jt51XX+Ar19nsX
UjrE7PVwnN+JPJXHPGfyokdX0yPTq/OwiS2VISbfmXWJFIhFUBqfHx7fefUfMidl
dC9wdVvkQ/REujuMBTqOybNwwI25mCdqWB7a0NLmJQdVHYuFJfP9Ssln851m9g74
yZb1xEBjKOQUyGnf/ojU0aN/QSm40wuPJs0nwGxmBMy4Ea46V8EC+wCreu4TzZJ9
Asm8B8hujAdQBpMlDUPnnAW82jYuprD4lAE=
-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:42 2024 by rpki-client on console-fra.rpki-client.org