Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/beef1c8d-1fdc-3386-9486-e5ba37fe6082.roa
File:                     beef1c8d-1fdc-3386-9486-e5ba37fe6082.roa (raw, json)
Hash identifier:          lgnK/ioDC+cXNiQ77rDe7mNX/X8IW6Lz/TpQJB+GAsA=
Subject key identifier:   3B:0C:D9:0F:44:C1:24:26:D2:FF:B9:CE:15:79:21:C9:BA:D3:B8:7D
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285845347D495C22C75271B4928500
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/beef1c8d-1fdc-3386-9486-e5ba37fe6082.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     852
IP address blocks:        2001:56b:c007::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:49:5c:22:c7:52:71:b4:92:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=e38f0147-c9e4-45ad-8f18-aad6e0a27a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f2:aa:fe:67:b1:d7:73:e8:f4:67:f5:19:2a:
                    df:5b:bb:2d:7a:75:52:21:67:64:f6:b4:e8:31:c2:
                    ad:fa:ae:37:39:f0:99:e5:50:3d:ad:4e:59:b2:fc:
                    90:17:7f:1e:a3:81:59:b2:7d:a0:e2:df:12:e7:ce:
                    df:00:40:13:c8:88:7f:ac:15:f1:06:85:51:55:91:
                    d7:09:ca:dd:2f:67:c2:15:b7:7b:15:4a:bd:ca:9b:
                    69:94:cf:b7:e6:94:8e:da:66:98:af:e9:cf:36:fd:
                    0d:02:25:8b:82:c5:6b:1a:5f:90:ba:20:0b:1a:25:
                    5a:d7:73:6b:fc:4a:4b:a7:0b:eb:0c:71:70:e4:2f:
                    a8:b1:b2:24:86:8f:2e:1e:4a:95:7c:d5:e5:c0:d8:
                    85:96:db:e6:b4:f6:bd:d4:f2:1e:da:d6:f3:ad:e0:
                    a5:96:e1:0c:85:f1:f5:46:97:10:47:26:ad:14:6f:
                    80:91:a3:e0:67:aa:8e:b1:f7:25:7a:67:52:a3:f6:
                    a4:1c:2f:5e:fc:66:b9:27:96:79:8e:56:dd:40:ea:
                    72:fd:a4:4e:16:8a:cd:07:ac:f6:6d:ff:70:46:01:
                    70:a8:6e:b2:7c:6c:fe:0d:b3:88:0f:4e:8e:0f:76:
                    a8:d8:41:ca:17:00:d1:2f:7e:b8:15:92:7b:91:58:
                    1b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0C:D9:0F:44:C1:24:26:D2:FF:B9:CE:15:79:21:C9:BA:D3:B8:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/beef1c8d-1fdc-3386-9486-e5ba37fe6082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:c007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:1d:4f:dc:64:70:c0:a5:16:f8:f8:f5:cb:9b:2f:50:84:e1:
         90:c7:37:81:46:dd:e5:9a:77:0f:b4:de:e3:13:31:db:e8:4f:
         c3:6d:a0:bb:b4:b6:e3:c7:69:d2:31:83:eb:4b:9d:e9:4b:f1:
         8f:9f:2d:0d:c1:69:11:8a:be:56:4c:73:bd:85:4c:4e:52:3a:
         07:41:31:7b:7e:c5:56:ef:c1:ac:88:40:b6:cc:93:b8:ed:42:
         c4:b5:60:b7:e0:0c:79:44:c0:73:61:bf:9e:18:72:f5:81:7d:
         df:f1:93:27:f7:cd:25:78:42:3e:28:60:43:11:cd:a4:31:62:
         89:94:fa:fb:1b:83:ec:e2:6d:74:4b:ff:58:71:9f:4b:aa:8b:
         c2:58:01:46:08:e4:8b:2d:36:04:4b:7e:03:f6:ee:46:cb:6b:
         9b:70:00:e8:9e:ae:9c:4d:15:47:75:f7:61:d5:99:4c:e1:19:
         4a:13:c7:2c:de:8c:80:aa:95:33:7e:e9:6d:e2:db:0b:c5:19:
         55:33:de:88:c6:84:76:b9:4a:84:10:b6:24:62:da:3b:80:a2:
         e9:33:18:5b:81:79:d8:02:01:f5:30:11:95:b2:9c:8d:fd:91:
         49:75:9b:44:86:b5:fc:2b:ba:07:00:13:a7:af:78:78:6e:d2:
         9c:0f:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:36:28 2024 by rpki-client on console-fra.rpki-client.org