Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bb78d66b-734e-37e2-9dc7-c536a522f1ed.roa
File:                     bb78d66b-734e-37e2-9dc7-c536a522f1ed.roa (raw, json)
Hash identifier:          XFFmGDaUycQK03U4hIdc7x1u5674CH0nSryTiYqQlVI=
Subject key identifier:   62:9C:42:92:51:24:64:48:3A:E3:B0:9A:69:71:7C:E3:73:83:CB:A5
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848BE862B7BA15BCE571087CD00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bb78d66b-734e-37e2-9dc7-c536a522f1ed.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     852
IP address blocks:        2001:56b:a00b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:2b:7b:a1:5b:ce:57:10:87:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=9836b00e-55b1-4567-a361-5118d7828cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ad:ed:e2:6d:01:f7:91:c1:b0:a1:51:07:53:
                    46:7c:66:76:01:ab:f1:82:87:45:aa:9c:be:1f:b1:
                    fb:07:2f:d8:2c:a7:26:09:43:89:8f:f9:97:87:bf:
                    7f:f8:de:93:48:45:35:a4:85:db:66:8b:aa:4c:a7:
                    5a:af:4c:a3:ef:2b:c0:84:b4:a5:b2:f7:16:15:eb:
                    36:09:7f:d1:77:d2:f0:a7:74:7e:7f:e6:0b:9f:e7:
                    d1:fa:eb:91:2c:ac:b2:67:43:57:5b:79:9f:8d:af:
                    88:9c:48:e9:1b:32:7c:08:f2:4f:0f:92:da:ac:d9:
                    16:1d:ab:1b:7f:86:c5:3c:cf:8a:02:c8:f8:a5:8b:
                    b5:15:93:03:d2:3a:eb:22:1b:1c:54:91:17:cf:b8:
                    5b:f9:31:1a:51:1c:92:2c:8a:12:2d:84:c8:8e:e4:
                    e6:bd:5c:e4:78:0f:74:59:56:c3:ff:16:f2:64:0f:
                    5a:28:03:00:65:00:87:10:4f:66:eb:06:24:9f:5f:
                    8b:06:c6:c5:74:e2:7a:1c:25:48:a8:a9:9d:8d:65:
                    d1:ca:d4:55:1e:ea:c8:4e:d9:ae:7a:c1:a0:e6:da:
                    5e:91:c1:9d:84:40:22:a4:18:34:44:a5:c2:52:18:
                    a8:01:32:8a:9e:bb:53:8e:91:af:80:5f:7a:17:0d:
                    a7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9C:42:92:51:24:64:48:3A:E3:B0:9A:69:71:7C:E3:73:83:CB:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bb78d66b-734e-37e2-9dc7-c536a522f1ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:a00b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:f4:94:8c:9c:d0:a1:7d:03:e7:6a:c2:a5:0c:67:32:ab:50:
         58:18:2d:c4:26:b9:42:a5:ea:4c:0a:6d:38:64:fc:94:82:bf:
         3c:12:f7:3d:62:a5:f1:9d:e3:72:79:ee:f8:a2:45:13:64:30:
         22:ff:3d:9d:ff:5b:d7:50:07:9d:80:a0:f1:1c:4a:0c:36:e1:
         e8:00:32:c3:a4:a8:d9:bb:71:d7:94:62:65:49:b5:c9:7d:d0:
         bc:e4:00:f1:94:3b:1e:01:5b:9e:0b:a5:87:45:39:b3:ee:92:
         63:30:83:e0:12:5a:a1:3d:39:2a:c9:e7:d3:e7:f9:3e:74:e4:
         bf:13:19:6b:7c:c3:c9:26:7d:99:a0:41:0d:d4:81:5e:75:13:
         3a:4c:60:98:c4:85:05:25:18:92:c3:c7:64:9c:ca:c3:4c:1f:
         10:1e:11:f0:07:e9:a5:b7:5e:60:c6:a5:ce:44:92:3b:c5:f4:
         86:c8:23:9d:11:cb:1c:1d:44:34:07:4d:e7:57:6b:bd:ba:ae:
         44:f5:2c:00:6c:38:3f:65:73:6f:e1:fb:2e:4a:b5:3d:2a:72:
         26:39:42:7c:79:52:b5:8d:2d:f7:30:41:44:c0:b2:e2:7f:e3:
         fa:bc:c0:73:01:e5:9c:31:d6:7a:0d:54:fd:c7:9d:2b:19:e0:
         fb:18:65:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:30 2025 by rpki-client