Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa
File:                     d9d5ced5-8d7a-384e-a047-9db809fa8081.roa (raw, json)
Hash identifier:          wujnoD++qBW8nGad0J0E+DfjG13fmd1ttH2J+ZurUw8=
Subject key identifier:   B8:3B:86:98:43:65:FB:84:ED:F4:F9:B5:CA:90:02:2E:BF:44:71:C0
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453E42A438E321BADD3797CCD0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa
Signing time:             Mon 18 Mar 2024 01:00:25 +0000
ROA not before:           Mon 18 Mar 2024 01:00:25 +0000
ROA not after:            Sun 16 Jun 2024 01:00:25 +0000
asID:                     852
IP address blocks:        2001:56a:800b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3e:42:a4:38:e3:21:ba:dd:37:97:cc:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 18 01:00:25 2024 GMT
            Not After : Jun 16 01:00:25 2024 GMT
        Subject: CN=8a022b36-f8e3-426b-95e2-84012da6c936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:14:87:43:02:d3:f2:9e:6e:2d:80:4b:79:c3:
                    71:ee:b9:88:fa:e5:13:38:f7:6c:a8:86:ec:43:45:
                    cc:d6:2b:f2:52:08:b4:2e:fb:76:fd:4b:67:45:da:
                    5c:ab:9b:f0:b7:29:40:20:c8:96:0f:02:08:ab:08:
                    7f:bf:53:31:ed:c0:a2:8e:62:38:98:22:d8:0d:3f:
                    dd:75:c0:e2:a0:3f:cc:71:f4:3a:1f:16:3c:b9:6b:
                    fc:ce:c0:26:94:8a:45:62:ae:46:4c:c3:49:32:9a:
                    94:b8:2f:c2:45:0f:d0:29:3a:12:62:9b:75:57:74:
                    07:8b:dd:e3:34:ef:46:8f:1e:68:33:b6:bc:0f:cb:
                    15:4e:9e:ce:07:bf:41:75:f7:d0:09:fd:8f:aa:2e:
                    99:99:f3:7b:c8:87:2f:1a:5a:e3:90:55:23:2a:99:
                    a1:bc:18:14:c9:af:2e:da:7b:d6:bd:c3:f5:d8:57:
                    51:63:eb:86:32:24:c2:d7:c4:b8:89:f4:b4:5b:b8:
                    2b:91:12:ef:5e:11:a6:6d:59:e1:13:3b:9b:b4:b9:
                    37:fa:9d:85:50:55:53:00:d4:d0:10:48:e3:c9:fa:
                    91:88:3c:f2:6a:37:ef:7b:dc:3e:46:27:38:af:dd:
                    09:19:e9:f3:49:51:4c:40:d9:af:c0:cc:d1:a2:ba:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3B:86:98:43:65:FB:84:ED:F4:F9:B5:CA:90:02:2E:BF:44:71:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d9d5ced5-8d7a-384e-a047-9db809fa8081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a:800b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:9f:10:bf:17:7d:da:a0:0c:2e:d2:d1:69:5f:03:2b:91:4c:
         9d:24:ac:d0:34:25:82:ff:a1:a4:76:61:51:b4:16:75:e7:29:
         e1:73:6a:c1:cd:83:48:94:28:fc:4c:b3:28:53:25:0a:05:64:
         b8:f8:bd:46:13:5c:3c:da:2f:17:91:51:9a:ac:6e:f9:08:67:
         02:ed:3a:13:01:4c:25:4d:8a:65:b7:4a:98:cc:b3:bf:00:c9:
         04:0b:3e:ea:df:7a:68:e3:c9:39:d1:fb:79:a9:6c:8c:e9:65:
         37:ec:c8:a4:64:3a:4b:4e:bf:38:64:80:82:2a:ce:bc:fd:76:
         18:80:71:2e:2f:1f:cc:31:f1:9d:45:88:20:6a:c3:f0:13:68:
         a5:24:14:30:51:64:69:1e:c5:b1:97:dd:65:0d:e4:46:5c:93:
         8e:bd:8f:6f:57:be:f6:f0:66:e1:c3:0c:20:a5:c1:86:6c:e2:
         c9:b4:13:ed:d0:2d:58:09:32:57:7a:d7:9e:d1:44:ef:4f:0b:
         7b:fa:33:10:2a:09:4d:48:b9:86:ec:d2:90:57:2f:5d:cc:7f:
         a3:fc:bf:f0:f2:ba:17:0f:f5:64:46:7e:b3:f8:0f:a7:f3:db:
         08:1d:ce:ef:5c:01:24:9a:c6:3d:6a:15:2b:62:6f:ef:40:e7:
         b7:80:37:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:36:29 2024 by rpki-client on console-fra.rpki-client.org