Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a193d12d-457d-325b-8197-aad7ef2b9787.roa
File:                     a193d12d-457d-325b-8197-aad7ef2b9787.roa (raw, json)
Hash identifier:          qGdsjTCZ3nIaHoNvBv++j0TapnpBuZmMdtL85h2CCqo=
Subject key identifier:   08:FA:79:7A:AB:58:19:11:CC:34:28:3F:F8:26:46:CC:5E:FE:71:28
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847D4048FF690E6CB6302DECE80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a193d12d-457d-325b-8197-aad7ef2b9787.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        2001:56b:9f70::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:8f:f6:90:e6:cb:63:02:de:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=fb666716-77eb-4636-a93a-58b0ba71a7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a5:c5:1f:6c:33:15:84:40:7c:2a:45:ae:39:
                    b6:2d:85:71:2f:35:ed:dc:d3:3f:af:8e:d5:3f:da:
                    0c:78:8c:bb:42:1a:48:1b:b7:ff:34:2e:1f:f8:15:
                    4c:63:7b:59:e9:ce:10:ce:23:33:30:99:bb:d3:f5:
                    29:55:fa:5a:6b:36:7a:e4:77:85:c2:12:ae:80:c4:
                    f4:9c:07:13:49:a5:f4:32:e7:3a:bc:24:f8:0d:af:
                    fd:bd:5d:ad:dd:08:89:0a:6a:0f:40:a5:6b:5c:81:
                    8d:a9:04:64:fa:36:e1:ff:da:d7:14:8a:27:b1:da:
                    9f:c9:c0:1e:f6:72:0a:07:a3:94:5c:03:76:f7:90:
                    d4:d2:e3:61:45:7f:7f:8e:df:7f:f2:c1:db:e4:dd:
                    21:b2:be:ac:79:1a:d9:02:7b:19:b4:5f:46:9e:a1:
                    52:3d:26:f2:87:b5:20:c5:17:3a:bb:10:da:57:01:
                    7b:58:a9:fb:52:2b:c7:67:10:0e:cb:fe:f1:21:a3:
                    65:01:11:3a:52:d6:9c:39:70:5d:9e:0e:4f:e6:b9:
                    62:29:c8:c9:a4:bb:d5:39:54:88:10:13:7b:d3:2e:
                    a4:32:2a:15:f1:21:b6:cd:b2:78:7c:80:49:e6:26:
                    01:61:2c:57:7d:80:09:b3:24:ac:c9:63:15:3f:52:
                    18:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FA:79:7A:AB:58:19:11:CC:34:28:3F:F8:26:46:CC:5E:FE:71:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a193d12d-457d-325b-8197-aad7ef2b9787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:9f70::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f7:99:b1:af:44:23:3c:cd:1c:4d:7c:4c:17:25:98:7a:80:74:
         e7:0b:95:75:b3:be:75:07:2b:97:ff:ed:95:68:5d:01:74:e3:
         23:fe:fb:d2:02:c3:fd:20:7f:e5:0d:2a:25:72:bd:2b:5a:61:
         13:c0:f7:f5:19:f1:bb:39:07:ba:8e:ca:8d:6d:7f:47:9c:ea:
         42:2b:85:7f:44:9d:22:a5:7b:90:46:59:a6:98:ba:7f:59:a0:
         68:eb:86:f6:0f:86:00:71:d8:3f:e8:fa:9c:8b:03:17:8a:d1:
         21:b9:c5:8a:fe:67:b5:c3:86:51:ae:e5:e4:1f:5a:6f:40:f2:
         f0:dd:94:b1:14:bb:52:9e:c6:0e:e9:2a:22:21:4c:be:3c:91:
         30:cf:ac:4b:ec:10:62:de:e6:3c:40:36:71:4c:5d:5f:11:ed:
         97:5f:cc:3b:0c:58:9b:93:33:85:12:11:2e:1b:bd:f6:0b:22:
         e3:b6:ee:f1:23:2d:7e:c2:5f:d2:d3:7b:81:b9:92:20:85:6e:
         18:93:15:05:13:f6:4f:da:83:e7:29:8e:56:fc:16:63:af:5e:
         2b:7b:6b:ca:55:c8:dd:42:b1:08:23:c6:56:da:95:9d:2c:cc:
         ac:d4:b6:32:17:c3:88:2c:80:20:34:55:6a:2f:57:2f:25:05:
         de:7a:bf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:04:12 2024 by rpki-client on console-ams.rpki-client.org