Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a865eac1-d558-3c88-a0ac-5e857a578efb.roa
File:                     a865eac1-d558-3c88-a0ac-5e857a578efb.roa (raw, json)
Hash identifier:          SqO2jQZwYeKGRtk1Oj3yL+WVHolyrggv9ZGZ4b4arK4=
Subject key identifier:   E4:FC:C9:4A:69:B5:A7:38:3B:94:35:59:41:ED:9E:D5:07:C3:FB:35
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847D404916362EBDA2DCC74EDA0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a865eac1-d558-3c88-a0ac-5e857a578efb.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        2001:56b:a000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:91:63:62:eb:da:2d:cc:74:ed:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=a9f58d37-98a3-4dc3-8e77-69506aeef961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:14:9a:da:e6:1c:74:4c:9e:65:7a:74:16:36:
                    63:46:8c:bb:bb:4c:95:31:7c:41:0f:18:2e:77:a2:
                    41:56:2d:c4:eb:ba:ae:44:99:90:b2:bd:fb:45:25:
                    28:22:b6:80:8a:e8:84:92:a2:51:9b:4f:d8:a7:7c:
                    19:3b:4c:f6:be:ed:93:76:07:29:f2:63:4b:b0:06:
                    ee:92:16:64:cf:a6:09:a0:36:83:0b:cb:7a:f0:3b:
                    e0:6b:b7:fc:5a:b7:96:34:8c:4e:95:25:e8:d9:fe:
                    ae:c7:18:b5:2d:eb:52:6d:ab:6c:9e:7f:28:d7:b9:
                    2d:5c:b2:ac:46:27:f3:e8:d2:8d:56:b9:21:03:66:
                    6b:43:f0:ef:db:86:9a:bb:60:1b:08:d6:94:7e:0d:
                    44:5d:2e:41:17:43:8c:f2:07:a3:6d:54:d7:59:17:
                    59:30:66:56:57:a0:13:6e:4e:34:cd:40:ac:4a:79:
                    fb:ae:1d:b1:29:3c:26:1e:fd:58:a7:01:b3:a3:2b:
                    30:73:5b:3f:26:8c:af:fa:06:cb:cc:63:e1:14:25:
                    2c:b5:97:c6:22:96:e0:b3:c4:dc:0d:be:d6:7d:6e:
                    c0:35:2f:5c:00:56:f2:df:40:8e:ff:b6:41:98:fb:
                    8c:73:6e:63:0f:de:61:ce:df:fd:1e:13:5c:db:08:
                    ee:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FC:C9:4A:69:B5:A7:38:3B:94:35:59:41:ED:9E:D5:07:C3:FB:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a865eac1-d558-3c88-a0ac-5e857a578efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:a000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e9:4a:3a:39:2a:c7:8b:f7:67:70:ab:0f:80:a5:96:2e:13:8a:
         2c:b2:2a:69:3f:30:4c:00:53:e5:e0:14:58:d3:b2:89:e5:4e:
         9f:da:34:70:b1:25:d1:25:a0:14:46:f2:59:0d:6f:3b:a1:0c:
         75:0e:55:82:ac:52:8b:00:4b:94:fc:3b:f4:8e:0a:b3:d7:c1:
         2d:2c:4d:3f:7b:c2:fe:8e:ad:16:74:22:dd:27:c3:bc:a3:c1:
         22:ee:f6:2f:3f:c9:63:b9:31:e1:49:68:24:e4:7c:3b:7f:ac:
         7a:51:60:0d:33:4a:51:18:61:df:f0:9e:75:bc:7f:15:6e:f5:
         21:05:57:fd:5b:76:b3:ed:5b:62:89:66:94:c8:97:aa:da:55:
         c7:c0:39:5f:61:e8:21:93:5a:f5:1a:08:1b:30:f4:8c:99:a6:
         31:e9:51:35:c4:76:3f:9b:e9:80:01:8f:dc:28:87:de:b2:34:
         9d:58:c3:68:6b:3a:c7:5b:a9:f8:82:9b:8c:29:70:80:fc:94:
         92:9a:4f:99:0f:08:74:af:85:89:86:a3:ac:7e:0b:9c:3e:ec:
         12:30:69:6f:63:6e:34:ee:fd:03:72:cc:73:90:3f:76:63:8e:
         9c:fa:93:5f:f8:40:3e:f1:89:71:1a:d6:af:10:ee:13:ba:a7:
         1d:7b:65:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:04:12 2024 by rpki-client on console-ams.rpki-client.org