Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/777467dc-c551-32eb-9e88-72d03431cd0c.roa
File:                     777467dc-c551-32eb-9e88-72d03431cd0c.roa (raw, json)
Hash identifier:          caMH4VOt89VGhBxmNc0niS8KPwJjTCBoOAL/tiGtRyU=
Subject key identifier:   63:D7:91:31:25:68:10:2F:5E:93:A0:44:32:F5:97:2A:7A:39:02:F0
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847D4048BD3500CA574BFABDF00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/777467dc-c551-32eb-9e88-72d03431cd0c.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        2001:56b:5f70::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:8b:d3:50:0c:a5:74:bf:ab:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=b2877714-7732-4056-9a5f-b98d4fd90578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b2:52:fc:a2:1d:77:6c:ac:45:09:91:da:0f:
                    e4:e2:78:af:16:41:86:a5:45:3b:7d:88:cb:00:97:
                    3e:0d:72:13:0d:6f:35:ab:66:ef:af:70:f7:0a:a7:
                    58:5b:24:55:33:7c:5e:1c:c4:4d:14:02:26:43:f7:
                    5c:51:82:91:19:5c:29:06:10:60:b2:43:39:ad:7a:
                    43:24:ce:88:f7:94:bd:04:51:cb:6f:8b:02:a4:d5:
                    af:0d:7d:db:10:bf:92:c4:33:f9:6b:62:a3:25:d2:
                    37:dc:9e:1d:d8:f2:df:f7:db:35:79:89:22:d3:ea:
                    df:05:d7:62:c5:cc:37:5d:e3:6b:99:74:d6:1e:99:
                    e9:1d:e1:1c:25:92:86:f4:fe:81:42:a8:e8:02:92:
                    c6:34:26:87:c9:83:89:9c:83:75:22:0f:50:35:9e:
                    f0:58:0d:6a:1b:a1:65:0d:fa:2e:ee:a0:a9:cc:3b:
                    d6:2d:7a:f3:12:4e:8d:de:58:b3:98:ba:80:32:cd:
                    ff:b9:56:a1:f2:36:3e:73:c1:46:05:15:bb:2f:95:
                    96:09:01:59:c2:2b:be:50:e0:1f:4d:ab:a6:eb:05:
                    de:7b:74:6c:5c:b8:78:1f:f9:e8:ee:38:a0:fc:85:
                    3a:38:6f:2e:f4:ca:4f:e5:88:cc:8b:b4:e6:9c:f0:
                    7a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D7:91:31:25:68:10:2F:5E:93:A0:44:32:F5:97:2A:7A:39:02:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/777467dc-c551-32eb-9e88-72d03431cd0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:5f70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:16:26:16:59:cf:ca:11:7e:03:9d:17:09:2d:57:4d:04:97:
         33:04:b2:6e:b0:e1:93:15:87:5b:cb:50:c2:d1:91:7b:2a:1c:
         58:27:b4:53:d3:72:d0:bc:c9:5e:53:02:11:c8:96:36:4a:06:
         72:26:b9:64:64:dd:28:e3:3e:9a:59:e3:a6:cd:d2:8e:8d:c1:
         29:6a:c6:46:7f:fa:44:5e:2a:8f:f3:eb:46:ed:87:25:80:6e:
         58:1d:b9:b5:12:29:94:1e:6f:bc:f5:78:27:9f:c1:26:54:e5:
         71:5d:a8:60:82:08:49:4b:90:7e:5f:6c:3e:7b:22:4c:52:42:
         aa:5e:bd:55:4c:54:43:82:9e:f6:c4:bd:f8:45:81:dc:49:7b:
         88:c0:c4:c2:41:a9:79:12:82:8b:76:ac:39:85:d4:f3:a2:be:
         f9:ae:56:d7:aa:22:d8:16:da:46:c1:08:83:8f:f1:e3:60:30:
         79:f4:b4:ed:70:42:8b:a9:5b:af:17:5b:0f:45:bc:66:a4:07:
         23:51:3a:6a:f1:50:a5:8c:cd:fd:c2:28:b7:8b:06:43:f8:0a:
         27:95:6b:e5:a6:eb:09:6f:d5:6e:a4:00:d3:76:ad:e1:27:2d:
         a2:4e:3c:ae:54:76:62:39:88:c0:4a:16:75:e3:bb:e8:54:49:
         96:03:2a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:57 2024 by rpki-client on console-fra.rpki-client.org