Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5be72693-e77e-3018-aaf9-9d1b330f1dd1.roa
File:                     5be72693-e77e-3018-aaf9-9d1b330f1dd1.roa (raw, json)
Hash identifier:          0FFw8KpNc0XpMNKUuBdHOcmSfVxlxskRvYHQIEZVnS4=
Subject key identifier:   E9:0F:80:C3:68:25:3E:25:FD:95:01:95:75:0E:6C:41:24:6E:C0:2B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285845347D4A746AF13D4E762D7B80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5be72693-e77e-3018-aaf9-9d1b330f1dd1.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     852
IP address blocks:        2001:56b:3ff0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:4a:74:6a:f1:3d:4e:76:2d:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=efd7a6a4-2b4c-402f-bfe5-39ed539affd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:4c:31:be:e7:c9:04:29:b0:66:04:8a:5a:
                    28:c7:03:fc:fd:33:c9:fd:89:3c:b2:d2:0e:70:03:
                    c9:c1:bb:c7:98:fb:94:66:c9:34:dc:b7:a0:93:e1:
                    2f:c4:47:11:27:b2:fe:a2:e0:e1:56:3d:83:f2:46:
                    5c:2f:07:11:97:74:81:4f:41:3b:a0:91:72:03:f0:
                    da:9c:0e:60:c3:6e:57:81:6d:a0:b8:88:bd:fc:44:
                    03:26:8d:37:ec:e2:ec:00:9f:cd:71:16:4c:35:6a:
                    e9:0b:c3:a0:bc:20:09:b2:e7:db:74:97:e4:fd:8f:
                    08:63:57:b4:6a:5d:d3:37:38:75:81:87:18:7c:f6:
                    c5:5d:89:6d:72:1a:f2:4a:de:e6:4e:99:f6:1c:b3:
                    ce:83:a0:1d:7b:3c:55:b0:0f:fb:30:cf:04:ba:23:
                    a2:06:92:84:db:6e:0b:0a:23:d5:80:3a:b8:49:b8:
                    a5:ea:0a:87:75:87:5f:90:00:f9:10:bd:a1:14:39:
                    34:11:fa:fb:ce:1e:3f:88:9f:cd:03:b6:d5:05:e9:
                    29:3c:0d:d1:a7:77:bf:b7:94:84:85:37:62:31:01:
                    3d:c1:13:a8:6f:0d:80:9b:9f:cb:84:7d:9e:62:aa:
                    e9:db:50:fe:44:95:06:99:45:f4:0f:09:fe:96:d1:
                    04:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0F:80:C3:68:25:3E:25:FD:95:01:95:75:0E:6C:41:24:6E:C0:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5be72693-e77e-3018-aaf9-9d1b330f1dd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:3ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d2:14:bf:76:38:df:ff:7f:b7:35:c2:93:76:ff:01:64:f6:
         ae:75:e1:cc:68:81:82:48:2d:38:90:8f:8a:dd:b9:8c:93:ad:
         1b:c0:c7:66:8d:0f:21:36:c0:6d:f3:52:9a:9e:48:8b:19:4b:
         74:97:f4:0f:40:4e:42:a0:a7:03:ef:f7:0f:92:44:3b:05:0a:
         cf:06:9c:8c:87:85:9c:34:67:ba:02:f0:1f:09:94:5e:61:0c:
         5a:3f:30:bb:20:49:c5:f2:cb:10:f2:30:6c:79:0f:26:45:e8:
         76:5a:7e:a1:85:1f:39:52:79:8b:1f:d1:04:c7:c1:a3:31:83:
         e8:66:9b:89:6f:59:90:ef:0a:10:fb:b8:81:17:1e:4d:e8:9f:
         42:74:08:07:92:68:c1:21:70:b9:1f:d1:f6:1f:df:5d:be:e3:
         8c:0f:82:34:c9:8d:63:b4:78:21:29:91:d5:11:9e:dc:bd:96:
         8f:ad:7f:ee:dd:72:21:6b:af:2e:35:28:2d:3e:55:93:79:e2:
         02:e0:da:1d:95:ee:ed:f4:af:ef:66:3d:68:9f:69:2b:c4:59:
         1c:6c:28:b0:27:ac:c9:c7:ed:c9:55:c4:ff:d5:b6:6d:31:a0:
         54:b7:7d:c3:87:54:6d:46:c2:d7:b7:9a:00:66:ff:52:07:ee:
         04:d0:bd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 14:50:30 2024 by rpki-client on console-fra.rpki-client.org