Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c6809bf1-e017-3206-926e-3237e29986f7.roa
File:                     c6809bf1-e017-3206-926e-3237e29986f7.roa (raw, json)
Hash identifier:          8uFdyl7ydYzk+ShcmJWcVO4lvkx5LWt+NXk3xHh0ZK4=
Subject key identifier:   A2:D1:E9:19:6F:2A:4A:94:E4:F9:95:36:AE:57:4E:1D:40:D4:BB:46
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453E42A424515F37D4C7CF7900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c6809bf1-e017-3206-926e-3237e29986f7.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     852
IP address blocks:        2001:56a:b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:a4:24:51:5f:37:d4:c7:cf:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=35d99c08-67c8-47ff-ac57-2b6776d9cb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7e:6a:a4:f1:cb:70:20:69:52:b8:4d:ca:bd:
                    cf:9e:6e:fc:f8:6f:78:02:11:23:2c:e1:9c:89:ab:
                    eb:da:e4:2c:33:1a:b9:8a:f3:ed:b9:62:ee:78:a8:
                    e4:b6:2d:86:49:9c:f3:07:2a:0a:70:d5:52:7b:6f:
                    89:0a:85:55:41:c7:ea:d4:5b:25:b8:94:46:d8:c2:
                    12:a1:d6:ab:78:78:2a:a9:4c:26:18:af:87:84:51:
                    03:08:cd:fe:93:e9:83:cb:a3:a3:5e:5e:5a:28:76:
                    b6:f4:0f:9b:2f:5d:c5:62:c1:7a:ec:5f:0d:72:a8:
                    34:5f:fb:91:5e:29:03:cc:f2:8f:8f:b4:e0:69:98:
                    16:94:cd:1c:4d:26:3a:14:98:a2:d3:ed:09:90:7b:
                    ff:59:75:7e:84:e0:07:10:b3:93:e1:2b:f6:fe:20:
                    e5:22:7c:0f:3d:cc:e3:da:3d:92:98:d8:a4:51:ad:
                    70:a1:b1:fc:79:dd:91:f6:e5:33:d6:27:a0:eb:23:
                    74:92:7f:4c:7f:c0:bd:6f:40:54:61:45:37:fc:5d:
                    60:b5:c4:08:90:af:94:56:b0:1c:5c:65:f3:9c:15:
                    a7:ce:5c:a3:a9:84:cf:d6:46:1d:eb:b9:c2:30:af:
                    53:52:1a:4f:ae:59:6a:4b:23:99:97:51:e1:8a:a1:
                    8c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D1:E9:19:6F:2A:4A:94:E4:F9:95:36:AE:57:4E:1D:40:D4:BB:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c6809bf1-e017-3206-926e-3237e29986f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:cb:1e:f1:ee:b7:07:cd:eb:43:66:dd:12:e1:a0:a1:a8:32:
         8b:be:d2:91:fc:26:81:88:ad:af:9c:3f:0a:23:84:75:c4:b7:
         4d:3e:b2:33:97:78:a0:94:77:d9:08:d5:cb:bd:b1:b0:25:40:
         19:bb:fd:df:73:ba:e8:6e:73:4b:05:78:62:05:08:19:08:b7:
         40:c0:48:da:5d:f4:74:01:52:e1:a3:0a:31:36:17:fd:21:25:
         15:64:c1:e8:62:8a:b2:87:bf:72:dd:52:89:91:80:31:08:65:
         2e:5d:ad:3d:c1:63:95:3a:6a:09:2d:f9:dc:1d:35:18:df:c4:
         c8:a8:7d:90:f3:f4:21:6c:cb:57:86:a0:d3:60:06:ad:a4:00:
         33:72:db:e5:46:f6:2b:6a:40:48:af:96:06:f3:d1:77:ec:74:
         2b:4a:04:f1:ca:04:c6:41:da:b1:ed:dc:dc:94:4f:9a:d9:bb:
         a5:e5:ed:a1:54:9b:05:1f:e3:2a:f7:8e:52:f9:75:dc:57:40:
         21:16:bc:1a:32:8c:35:3f:ba:56:14:b9:ef:04:c7:d6:36:9e:
         5e:f1:d9:7d:fb:73:1b:58:30:e1:3e:c4:4f:04:32:d0:5e:6f:
         1c:79:83:e2:4a:44:f1:b0:7c:b4:4e:dd:bf:1f:7c:36:12:45:
         21:6b:85:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 14:50:32 2024 by rpki-client on console-fra.rpki-client.org