Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b7e20f29-d5d5-32f8-8f5b-772e851d0307.roa
File:                     b7e20f29-d5d5-32f8-8f5b-772e851d0307.roa (raw, json)
Hash identifier:          O2jCZBnsWFoCqXjX6bL9M1pRC39xHJfGsaPhTL1+v14=
Subject key identifier:   50:45:38:6E:CF:32:C2:F5:E6:42:F0:65:16:DD:C4:01:D2:BE:7B:C4
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453317E7492C5EA2C431750000
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b7e20f29-d5d5-32f8-8f5b-772e851d0307.roa
Signing time:             Thu 14 Mar 2024 01:00:25 +0000
ROA not before:           Thu 14 Mar 2024 01:00:25 +0000
ROA not after:            Wed 12 Jun 2024 01:00:25 +0000
asID:                     7861
IP address blocks:        2001:56b:f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:17:e7:49:2c:5e:a2:c4:31:75:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 14 01:00:25 2024 GMT
            Not After : Jun 12 01:00:25 2024 GMT
        Subject: CN=1fd6e860-d4aa-42f6-aa41-99e2e0295b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fe:f2:fb:86:3e:65:d0:fd:1b:2a:26:02:3e:
                    c4:d4:17:0c:88:2f:a2:a8:c9:83:47:e1:38:52:5f:
                    da:08:5a:f1:52:07:a7:eb:2b:77:56:be:ec:1b:ff:
                    d7:ae:2c:49:a9:5d:20:15:d9:b8:ef:38:de:44:1c:
                    5f:33:e8:f2:17:54:91:61:27:e5:01:6b:74:91:32:
                    b9:c5:60:12:d8:48:fc:03:95:3c:ff:5d:61:c7:26:
                    a2:c3:f1:3e:36:7b:7b:6a:88:09:a4:d5:6c:67:fe:
                    74:07:53:e1:b0:e9:4e:28:e6:92:8f:ca:47:5c:27:
                    21:2f:9d:9d:2e:1b:34:f4:e6:0e:9b:06:7d:9f:c1:
                    75:d6:06:72:4b:70:6c:40:b5:59:7f:9b:25:13:23:
                    af:13:43:59:be:4c:eb:da:bb:94:21:06:e1:be:6e:
                    46:23:0b:85:d7:0b:41:31:e1:62:b0:c2:b3:52:74:
                    43:f0:3c:00:b0:b1:44:af:8d:c6:22:60:39:4a:ff:
                    58:54:27:2d:46:13:d2:d9:37:be:d0:3a:94:bc:02:
                    e9:23:da:c9:8e:1e:d8:ba:dc:10:5e:18:f4:89:0f:
                    90:eb:b7:09:e8:cb:ca:73:d5:11:75:be:ac:b6:7e:
                    af:6a:29:99:1c:15:97:77:95:b9:f3:ed:02:1d:7c:
                    6d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:45:38:6E:CF:32:C2:F5:E6:42:F0:65:16:DD:C4:01:D2:BE:7B:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b7e20f29-d5d5-32f8-8f5b-772e851d0307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:64:78:11:5f:5c:33:73:6e:97:c6:9a:76:85:a2:5e:3b:58:
         8f:fb:18:70:ec:b7:17:92:61:a4:3c:8f:0f:19:81:83:75:1f:
         d6:aa:38:0f:65:fd:73:45:7a:29:8b:61:d9:65:26:32:4e:0d:
         92:ec:08:a9:83:03:01:32:4b:1d:24:b6:95:94:a0:30:b7:56:
         6a:21:c8:84:aa:67:68:90:f6:76:c9:05:be:04:41:30:3c:00:
         9c:a1:2c:14:87:c9:b3:02:48:5f:ab:29:a1:5f:a0:fc:b9:a6:
         23:b4:ad:12:ce:5d:76:93:86:1a:ed:c8:6b:c3:c7:e5:22:59:
         aa:55:04:8a:89:fe:ac:ed:af:d3:c8:00:f0:58:32:a2:87:64:
         b3:ca:8f:18:62:e1:65:9f:52:16:8c:fb:f8:db:18:d6:66:95:
         dd:f6:b1:b2:b5:0b:49:56:ca:e6:5f:bc:41:61:48:14:5a:a0:
         cf:4c:58:0c:d4:44:53:3a:59:9e:ad:35:95:4d:48:7a:bc:62:
         c1:85:de:49:e6:09:bc:bc:1f:fd:c8:2b:6c:29:89:27:16:fc:
         15:92:bf:ca:b3:c1:f0:a2:46:f7:d5:f4:9e:5e:7f:a8:a7:3f:
         db:f5:d4:7f:e6:cc:06:76:59:b9:43:aa:b9:54:77:33:d6:68:
         40:eb:ea:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:55:04 2024 by rpki-client on console-fra.rpki-client.org