Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a865eac1-d558-3c88-a0ac-5e857a578efb.roa
File:                     a865eac1-d558-3c88-a0ac-5e857a578efb.roa (raw, json)
Hash identifier:          3+QB+OFKoGNTKX/UWgdV0j/2Azv1SFdS2fB4/YuCJBY=
Subject key identifier:   D9:24:CF:88:8F:3C:14:EF:4B:A7:E3:2B:8B:AD:7F:80:02:77:F8:10
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285845347D4B42FA873C6297221100
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a865eac1-d558-3c88-a0ac-5e857a578efb.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     852
IP address blocks:        2001:56b:a000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:4b:42:fa:87:3c:62:97:22:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=31af2fc5-2081-4397-a017-c8c5ca6f1121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:07:a1:94:7c:c3:32:90:db:80:01:36:0b:a9:
                    ee:f9:e3:6e:9f:14:9e:4e:c5:90:50:1d:96:09:03:
                    84:d8:8d:20:08:a4:e1:d5:b9:fb:86:80:d4:d5:fa:
                    5f:8e:01:26:6d:7b:18:5b:5f:2f:9a:3c:e8:55:df:
                    5f:bd:f6:af:94:9d:f6:e9:68:48:80:c1:a7:24:2c:
                    11:57:bc:95:e0:60:e4:09:52:03:b8:74:45:54:8e:
                    fb:ad:ad:46:34:95:b5:87:a1:77:7c:65:cc:2c:9a:
                    3b:90:78:64:ad:8c:1d:75:89:36:39:40:74:c6:8f:
                    1c:f9:c5:05:96:34:2a:af:dd:79:98:56:d2:39:9a:
                    7a:4d:e6:f2:da:4f:ac:dc:53:5d:d8:11:54:d4:fb:
                    34:f2:e0:4e:e5:ca:a7:61:cf:56:d9:f7:e2:a1:3e:
                    ad:42:6a:b4:cb:91:64:05:90:7b:9d:e7:da:8b:e5:
                    7e:87:0a:51:dd:8d:80:18:b9:7a:0e:ab:13:cb:19:
                    bd:95:13:c9:ad:eb:9a:27:6d:44:d7:9e:01:95:53:
                    34:de:db:99:3f:06:5f:51:50:97:59:a5:83:bf:bf:
                    ee:58:7a:d9:46:e2:1f:79:6d:91:6e:26:8b:5a:71:
                    2b:72:4d:10:d5:75:cb:37:ae:46:0d:cd:b5:6c:d8:
                    2a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:24:CF:88:8F:3C:14:EF:4B:A7:E3:2B:8B:AD:7F:80:02:77:F8:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a865eac1-d558-3c88-a0ac-5e857a578efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:a000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:9b:b7:ed:3b:69:2b:be:84:73:21:f2:ff:54:a6:85:99:e2:
         b3:11:54:2b:58:ba:4d:75:22:ad:92:63:67:ab:80:f8:f4:23:
         b6:14:83:69:9c:ca:e7:75:8f:76:fc:a5:03:e6:95:65:45:91:
         5a:66:d2:d2:3f:96:b1:cb:0c:e4:49:b5:e7:51:b5:9d:40:c4:
         9d:fe:b8:e3:c9:0e:41:d5:ca:f2:01:c9:07:ba:a4:06:3f:a8:
         cb:84:11:cb:6d:4e:e0:4c:9d:28:04:b5:a8:51:3a:7d:b7:3e:
         36:3a:11:19:72:32:b4:1c:2c:6a:6b:18:25:0d:15:5b:58:10:
         2e:76:6a:e4:87:3a:2c:4f:c0:66:32:a2:d0:48:4c:21:da:59:
         31:42:6d:78:58:61:ae:47:20:c3:62:87:c0:80:d8:06:c9:f9:
         48:71:17:c5:c4:72:dd:86:41:6a:d9:5f:55:df:f1:6a:53:94:
         de:5e:60:63:26:04:6e:3f:ea:1c:e5:76:af:78:01:00:d4:2f:
         8e:dc:df:6f:32:b6:b8:50:f5:66:cb:db:5b:20:52:56:8e:95:
         26:6f:af:48:7e:06:bf:d0:c2:20:a8:90:d9:54:ce:74:1a:35:
         33:a8:b2:4f:07:16:68:87:1f:89:4d:0c:55:5f:cf:fa:4f:41:
         13:e2:a3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:41:17 2024 by rpki-client on console-fra.rpki-client.org