Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/56240ec4-7644-3038-9f40-ae4e37b25036.roa
File:                     56240ec4-7644-3038-9f40-ae4e37b25036.roa (raw, json)
Hash identifier:          IHmNtMeOnl1KL49VmRfvtSUeOIMTvX5Tq8+Y7GILwjU=
Subject key identifier:   48:2B:F8:18:96:4F:50:E5:4D:D0:B1:FA:04:15:EB:9E:80:99:C6:14
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285845347D46DF2B56343C276956A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/56240ec4-7644-3038-9f40-ae4e37b25036.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     852
IP address blocks:        2001:56a:6f70::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:46:df:2b:56:34:3c:27:69:56:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=4ca640e3-fab9-4fd2-8f15-75b2a1f73234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f8:b0:f8:d1:f5:8c:72:c4:11:8a:60:c2:00:
                    18:ab:81:26:7a:95:1d:cf:1c:d2:f8:a1:73:48:3e:
                    c9:19:b3:1c:df:08:5e:b9:a0:12:90:3c:b4:e6:2b:
                    dd:ec:d6:81:4b:4d:64:30:95:03:6f:8a:b0:66:50:
                    b4:0e:5d:46:5d:fc:ab:42:a3:4d:73:2d:58:e9:1f:
                    89:72:63:10:68:14:9b:18:d0:a7:6b:23:a0:84:92:
                    7e:0d:df:f8:bb:63:e2:ba:a0:f7:e5:3a:91:9d:1a:
                    39:7e:5c:1b:2a:0d:c0:bf:8a:a6:2a:3e:91:60:5a:
                    90:d9:dd:2e:d3:de:2f:d2:96:10:c8:88:99:c4:d0:
                    1e:3f:34:7d:6d:13:53:56:3d:af:d3:6c:f8:69:e0:
                    10:b8:a2:d1:40:c9:9d:a8:cb:ee:ab:4f:6b:2f:08:
                    6e:65:dd:ed:55:ef:29:46:4d:89:a9:32:39:cf:3b:
                    ad:14:23:a0:c8:87:1f:cd:41:f9:87:5d:e4:ef:e7:
                    8b:6d:27:fb:b3:9b:ab:44:a4:11:9d:f6:7f:32:21:
                    0c:a4:91:b6:e2:02:69:c7:d4:49:30:14:e0:dd:bf:
                    60:35:d6:e2:ca:cc:82:73:b6:c1:bf:cd:0b:70:2c:
                    9f:84:15:b8:8e:d3:85:66:15:04:f3:00:23:2b:e7:
                    41:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2B:F8:18:96:4F:50:E5:4D:D0:B1:FA:04:15:EB:9E:80:99:C6:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/56240ec4-7644-3038-9f40-ae4e37b25036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a:6f70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:14:90:1d:d9:d6:ea:78:92:ac:07:3c:cd:d5:fe:20:6e:21:
         c7:31:e4:a2:99:b5:e2:f3:02:0b:e7:06:80:26:2f:db:2e:e8:
         03:7e:c5:9b:eb:9b:8d:b1:87:2d:44:3f:53:ef:ac:c0:7b:b9:
         12:48:fc:00:64:be:26:33:56:75:5c:ac:e2:97:89:02:b6:96:
         96:e9:0f:4d:24:82:4e:b7:4d:47:70:0d:08:8a:b1:5c:2b:a8:
         48:06:51:12:cb:fd:c8:d6:e8:e8:28:1a:01:90:59:5c:19:f6:
         2c:62:15:dc:5a:7a:5c:77:19:aa:ba:99:07:18:7d:74:1e:8a:
         62:c7:01:f3:59:51:05:67:83:35:6c:c6:b8:5d:39:87:a4:2b:
         49:5d:e4:65:b7:c1:1b:bd:77:0f:87:02:ce:3b:17:19:b4:c8:
         24:e8:af:e8:39:5c:c3:55:04:d9:9a:83:37:01:0d:25:6a:3c:
         65:1b:10:16:50:a3:c2:e9:89:ae:9a:19:1e:b0:60:82:70:89:
         ae:d2:87:ec:4f:86:fc:5e:5b:ad:67:85:81:9c:d4:f8:da:78:
         79:38:83:3e:b5:20:87:c3:8a:42:99:9e:af:27:3e:22:f3:9a:
         70:25:30:d2:24:91:b9:dc:ed:fe:35:3a:c5:55:58:44:4c:40:
         ef:cb:51:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 06:56:41 2024 by rpki-client on console-fra.rpki-client.org