Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/207c8a94-e8cd-3236-a3df-59a05570c4ee.roa
File:                     207c8a94-e8cd-3236-a3df-59a05570c4ee.roa (raw, json)
Hash identifier:          p8rS7ROFtT5UBtpQGbStp/rKA0obS13Xj6vVCKWvHGE=
Subject key identifier:   08:EF:C2:6B:4D:EB:D2:7A:33:E8:4F:88:AA:FC:D5:FA:30:44:5F:95
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453317E732F0175F20F07D9100
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/207c8a94-e8cd-3236-a3df-59a05570c4ee.roa
Signing time:             Thu 14 Mar 2024 01:00:25 +0000
ROA not before:           Thu 14 Mar 2024 01:00:25 +0000
ROA not after:            Wed 12 Jun 2024 01:00:25 +0000
asID:                     7861
IP address blocks:        2001:56a:f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:17:e7:32:f0:17:5f:20:f0:7d:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 14 01:00:25 2024 GMT
            Not After : Jun 12 01:00:25 2024 GMT
        Subject: CN=c0176284-14b2-41b6-bcfe-81819baff7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:4b:91:c3:bf:7c:60:66:ce:15:72:93:9d:
                    27:b6:63:2d:55:c1:73:df:17:4e:bd:e6:15:ee:6b:
                    76:ad:62:e5:5c:ea:e9:de:22:8e:6a:0e:8e:19:4d:
                    d1:c7:fa:5a:68:70:bb:e4:c9:b4:76:3a:82:91:3e:
                    b6:0c:b2:e3:e5:99:f6:65:81:ea:9f:a6:e7:c2:10:
                    27:ed:fe:67:7e:71:50:2b:81:02:a3:35:40:46:8c:
                    5e:46:43:99:c5:cc:11:1e:b8:54:54:e8:c3:94:2f:
                    6c:b5:3e:0d:2e:2e:bc:7e:6b:1a:a1:cf:b1:78:c5:
                    98:09:f9:b6:55:72:9d:93:e8:6d:b7:f5:41:ee:26:
                    89:91:04:53:04:15:6f:5a:eb:a9:8a:5a:14:0b:0b:
                    8a:f0:cc:94:a7:87:01:7b:87:27:cc:ee:27:22:d9:
                    58:14:b3:55:a3:47:63:72:27:64:b7:65:17:e3:ac:
                    a4:ed:4d:de:6d:c7:ff:41:fa:a2:51:3d:a6:32:f2:
                    70:9f:e3:b2:17:7b:cc:af:03:b2:b3:2b:49:08:09:
                    34:44:ee:10:db:5d:85:38:66:ca:fe:19:35:7e:b2:
                    7c:8f:3a:b9:cb:cd:bd:9e:c7:01:7c:02:d3:eb:1a:
                    a0:c3:c9:e6:de:1d:ca:15:c3:e6:a1:7d:db:2c:d0:
                    b5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EF:C2:6B:4D:EB:D2:7A:33:E8:4F:88:AA:FC:D5:FA:30:44:5F:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/207c8a94-e8cd-3236-a3df-59a05570c4ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a:f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:d1:80:c7:8f:18:e2:57:e8:87:4b:50:6d:ac:aa:1b:db:60:
         1a:e4:30:3f:de:b8:1d:f4:04:b7:b3:95:59:22:26:72:8b:26:
         f5:27:de:c2:c0:d4:1e:0c:96:67:52:1e:3e:d7:14:b8:72:82:
         05:c4:23:ff:13:d1:59:9e:85:de:f1:8e:85:e4:49:ea:88:47:
         40:92:68:77:61:25:f8:11:0e:61:f8:53:10:12:44:e7:78:c3:
         d1:1e:fb:33:7c:d4:6e:97:84:fb:c8:95:a8:f0:f3:fa:b1:65:
         69:36:df:21:dc:00:9a:d8:8d:61:8a:83:c9:71:ec:2c:e3:b2:
         db:0d:7c:d9:3f:71:6d:31:9f:a1:d7:89:96:5f:a2:0c:1a:69:
         cb:d4:9e:70:f3:a1:ea:55:77:07:fd:6e:b6:9f:72:0a:82:9b:
         c4:e2:88:8e:e8:87:85:41:ef:29:39:1c:f0:d5:d3:8d:94:57:
         62:5e:a3:42:23:c3:68:d3:50:71:f9:93:54:8c:e6:0f:91:92:
         53:e2:5c:ef:e5:22:29:0b:52:dd:a6:38:5c:19:2a:f7:a1:fd:
         b7:4e:a4:b9:ae:0f:56:52:a0:e7:bb:87:9a:6a:92:17:94:d2:
         53:27:a2:6e:90:a0:e0:9e:69:44:d2:4a:22:7f:04:b6:17:17:
         d1:75:6c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 14:50:30 2024 by rpki-client on console-fra.rpki-client.org