Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b20bf3c9-82a4-34f7-8760-384c876951af.roa
File:                     b20bf3c9-82a4-34f7-8760-384c876951af.roa (raw, json)
Hash identifier:          APJnB+fs7Jm5hFtk1turM2dNBJfZXsrSyi0njTXzbvk=
Subject key identifier:   68:75:D7:67:37:E3:6C:9C:1B:FD:13:2A:FC:E7:FF:06:EE:4A:E7:76
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847D4048CDF1AFCFB0D45525FC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b20bf3c9-82a4-34f7-8760-384c876951af.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        2001:56a:6f10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:8c:df:1a:fc:fb:0d:45:52:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=a942b9ff-a70b-46fd-bc22-af773657e3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:a3:59:80:f6:ee:88:44:bb:34:d5:81:7b:
                    af:42:51:fe:3a:c8:57:49:34:f9:25:47:03:c2:0f:
                    44:73:67:e9:e6:a7:4a:c7:d6:ed:1d:04:50:82:af:
                    9f:e6:d9:2b:0e:74:00:f9:45:f8:7d:c1:21:7c:75:
                    6b:b0:24:90:58:e7:35:8f:e5:eb:3a:0f:da:77:c2:
                    63:17:e5:1d:01:e4:81:13:e6:ed:02:fc:e6:da:d2:
                    9a:e7:79:5e:f0:7a:92:ef:77:9a:27:04:68:62:3e:
                    ba:61:3f:b4:a7:5f:e9:20:10:5a:76:d2:f3:f2:02:
                    e1:ec:41:54:c1:fe:a4:b2:ed:b1:85:11:7a:2b:ed:
                    dc:ee:5f:64:87:8e:2c:61:82:7f:6a:e8:49:6e:61:
                    02:e3:94:bf:de:08:21:44:96:3f:01:3d:c7:a0:52:
                    5a:dc:57:26:82:16:da:cf:95:3d:7b:7c:f5:00:6e:
                    0d:2e:05:c9:18:b7:d0:05:a3:25:75:81:ce:d8:b6:
                    c3:56:6c:e7:79:da:23:af:5b:0e:74:ee:13:53:dd:
                    ad:3a:3e:ad:aa:2f:6c:17:d8:5b:90:f0:c1:ed:41:
                    8b:37:59:f4:27:d2:a6:56:e0:6e:ce:d0:9f:c2:3f:
                    24:b7:24:75:d4:68:ae:0a:e1:c0:6c:1b:fe:70:f1:
                    57:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:75:D7:67:37:E3:6C:9C:1B:FD:13:2A:FC:E7:FF:06:EE:4A:E7:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b20bf3c9-82a4-34f7-8760-384c876951af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a:6f10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b9:39:21:00:d7:89:91:4e:36:7d:05:c1:c0:7e:ae:97:fc:
         b8:4b:69:03:c6:fb:ba:fb:a9:77:74:3f:b7:03:70:e8:d9:5b:
         41:cc:68:2a:f2:92:ca:c8:22:b2:49:9d:7a:f2:f8:ee:fa:44:
         98:b2:83:4a:af:c8:ac:ed:9c:73:c7:d5:d8:7e:c0:92:cb:95:
         bd:1b:8b:a3:ec:61:68:fb:ff:38:a0:4b:de:bd:77:10:f7:b8:
         d4:0c:be:a9:a9:91:64:00:c7:af:4b:a1:ff:5e:80:d9:f6:7a:
         55:aa:45:79:9d:47:9c:54:a0:e7:dc:6e:39:a4:28:b5:12:62:
         91:23:40:be:c7:0b:7f:b6:31:6a:be:e8:b1:aa:fa:49:2e:3f:
         61:ef:52:a6:92:00:49:b7:96:7a:f3:1f:06:ec:0d:b4:14:82:
         3c:e2:8e:ca:44:d3:a3:63:49:b1:f3:46:4d:db:18:6a:40:6d:
         3e:00:54:33:78:e5:38:bb:a9:56:be:b7:6a:55:c3:1d:92:e1:
         6e:de:9d:dd:5b:c2:79:5c:be:14:f2:89:7d:db:4e:c7:6a:85:
         f7:40:6c:f5:e0:16:b8:7b:43:58:27:f0:26:63:4e:1e:9c:97:
         bd:6c:68:ef:0a:99:f7:6a:e8:9b:50:6c:d6:21:30:10:b8:86:
         93:56:51:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:59:58 2024 by rpki-client on console-fra.rpki-client.org