Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/db4f7648-ed27-320e-b9bd-3bc630e1b5e8.roa
File:                     db4f7648-ed27-320e-b9bd-3bc630e1b5e8.roa (raw, json)
Hash identifier:          2ajhn8AQUS08HT5s7xtlWElkfj7TTIi68eealOOhwq0=
Subject key identifier:   FC:B2:50:66:C7:C6:82:81:1F:4D:22:39:3C:C4:0B:FA:5E:8F:CA:17
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847D40490EBA1BBA7D2E51A8F00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/db4f7648-ed27-320e-b9bd-3bc630e1b5e8.roa
Signing time:             Sun 10 Nov 2024 02:00:27 +0000
ROA not before:           Sun 10 Nov 2024 02:00:27 +0000
ROA not after:            Sat 08 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        2001:56b:5000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d4:04:90:eb:a1:bb:a7:d2:e5:1a:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 10 02:00:27 2024 GMT
            Not After : Feb  8 02:00:27 2025 GMT
        Subject: CN=83226bc9-748d-4bf4-8383-b2d4a10d2521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cd:3e:70:ef:ea:2f:64:38:56:0c:b4:0c:b1:
                    02:17:e9:ed:0b:aa:cc:75:30:1a:fd:f1:f9:36:4d:
                    41:a3:b5:45:2f:3c:15:4e:63:e6:96:2e:e6:2c:f1:
                    9e:6e:0d:15:de:e5:c4:ee:43:c5:96:df:d1:9c:71:
                    6c:1d:35:39:43:00:9d:91:91:8f:9f:56:00:44:56:
                    55:88:06:44:8e:7a:f6:a5:a2:70:4c:1d:13:5c:59:
                    68:9a:5b:e7:b3:15:ea:a5:d9:40:81:02:a4:7e:1c:
                    36:7d:f5:47:02:33:15:29:2b:36:18:e3:91:ce:5d:
                    20:27:4a:b6:98:3d:63:d3:08:ff:49:9e:52:e5:b9:
                    39:eb:7a:17:0a:ad:2b:37:e9:86:ea:f4:ca:fd:d2:
                    7a:5f:7a:11:11:f4:7b:76:28:b8:1d:88:eb:9e:b3:
                    9c:32:ab:49:3f:31:6c:b1:60:b8:aa:f8:b9:34:3a:
                    e4:dd:80:d7:e6:52:30:fd:1a:66:ac:21:e2:20:4b:
                    16:aa:fe:ac:42:98:d3:88:c6:58:a0:75:90:fa:f6:
                    87:1c:cf:28:5e:44:33:96:69:c3:f9:c7:62:da:1f:
                    12:3a:db:ff:72:82:c8:e0:7c:c8:02:6a:da:fb:0d:
                    00:df:fe:d0:ae:cd:15:9d:dc:9a:2d:97:6a:25:22:
                    6b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B2:50:66:C7:C6:82:81:1F:4D:22:39:3C:C4:0B:FA:5E:8F:CA:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/db4f7648-ed27-320e-b9bd-3bc630e1b5e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:7c:14:1d:26:1d:7c:14:9e:11:b8:54:11:50:49:9e:70:d4:
         2b:56:38:b7:61:69:64:db:ec:75:65:78:44:57:28:8d:85:47:
         fa:df:d0:5c:d1:ad:a7:56:ec:5a:bb:2b:e9:2b:a5:79:af:41:
         b0:3a:e7:40:69:72:22:03:b1:d3:7e:a8:77:1b:6d:b6:14:d3:
         b8:b8:36:44:1f:5f:73:62:d3:0b:bd:fa:db:96:f7:13:3b:a3:
         05:91:bb:1d:ce:2a:ce:3f:f1:f7:e0:1e:c3:a3:b0:63:d2:67:
         ff:47:49:a8:1c:6a:ec:2e:93:75:a8:39:c8:1f:dc:24:69:8b:
         1a:a7:e0:db:64:8d:87:8b:cd:ae:66:48:73:ae:25:60:2e:34:
         e7:aa:1a:f7:65:b7:7a:e7:fe:67:01:bd:fe:01:62:a3:c3:2e:
         c7:d8:25:88:95:80:52:ca:64:83:94:50:e5:b0:ad:b2:7a:20:
         78:ce:53:f9:fc:37:18:39:ee:94:83:d8:2b:85:12:a4:a8:8a:
         0b:f5:ca:14:fc:d0:37:9b:c8:11:f8:39:a0:01:2b:ea:4f:46:
         56:01:56:56:44:db:42:9b:a1:19:b9:e1:be:7f:62:9d:cf:d8:
         cc:aa:5f:5e:ff:a3:7a:6b:73:83:05:10:90:28:8e:23:a6:18:
         48:9f:b7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:50 2024 by rpki-client on console-fra.rpki-client.org