Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/beef1c8d-1fdc-3386-9486-e5ba37fe6082.roa
File:                     beef1c8d-1fdc-3386-9486-e5ba37fe6082.roa (raw, json)
Hash identifier:          slC8kzAu/U9SS28f8AeIeNBjxHs38CuMFi2DGR0yHH0=
Subject key identifier:   8C:F8:EB:33:82:BF:53:E8:51:69:1D:9D:B6:86:BD:45:06:78:CB:ED
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584992949EEB84B209E207F6DB00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/beef1c8d-1fdc-3386-9486-e5ba37fe6082.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     852
IP address blocks:        2001:56b:c007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:9e:eb:84:b2:09:e2:07:f6:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=3e8d8e10-8593-42b7-aa3f-f76abca98393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:07:58:59:74:e3:72:5d:a9:36:d0:44:77:e3:
                    49:1c:59:a9:8e:4e:3c:8e:f3:11:cc:ff:32:46:16:
                    ee:da:50:8c:a3:39:2a:b6:14:e1:c1:b5:d0:d5:03:
                    db:74:0b:46:95:f2:62:f3:ca:b9:3b:4c:83:57:81:
                    43:e4:35:71:94:ae:64:30:b1:98:87:00:09:51:8f:
                    d3:3c:3b:4b:d0:62:6c:6b:3f:3a:5d:46:0c:e0:5f:
                    14:27:21:8f:75:bb:f0:81:91:5e:cc:12:57:75:58:
                    5d:92:0f:dd:ea:63:c5:3e:53:30:4a:60:46:6e:dc:
                    49:40:9f:67:08:cb:0e:43:c2:4e:21:9a:b9:61:79:
                    a5:cd:cc:54:68:7d:6a:43:ad:f2:6c:f4:4e:1a:45:
                    11:14:55:ee:3f:c5:93:f3:2e:e9:ac:42:d0:2a:9c:
                    51:04:f9:46:3b:e4:ac:7c:6d:d7:08:d2:73:d9:67:
                    da:21:5e:4a:bc:74:8b:2a:b5:44:e7:49:18:16:59:
                    3f:18:7a:6b:6c:2b:23:dc:21:15:5f:e3:7c:b8:49:
                    09:f5:1a:ce:24:c8:8e:72:2e:76:b0:44:28:b1:60:
                    2c:57:29:f2:79:36:f6:b4:9e:68:7e:51:b3:7b:4b:
                    ec:3c:4a:e7:ab:76:04:1d:c8:ae:f9:7f:15:cd:da:
                    db:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F8:EB:33:82:BF:53:E8:51:69:1D:9D:B6:86:BD:45:06:78:CB:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/beef1c8d-1fdc-3386-9486-e5ba37fe6082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:c007::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:8c:c6:24:7d:ed:9f:a4:a7:7a:cc:be:68:e9:c6:9a:c6:1e:
         08:2d:7a:1e:17:8e:f5:90:24:6d:3b:fc:b6:8c:ea:68:7a:c5:
         dc:5e:5f:ed:7b:19:41:01:de:fb:3e:5c:3d:10:50:6a:a0:3f:
         bb:5b:fc:30:4f:f7:b0:06:42:83:4f:4c:f1:eb:3a:dd:95:18:
         38:87:ff:f1:12:eb:b5:c0:38:cd:dd:60:9c:6b:81:2b:4c:2a:
         72:05:35:02:7d:72:86:43:33:5d:80:51:57:9f:9e:09:cf:d8:
         b8:a4:f2:c8:02:bf:a5:a5:1c:2d:05:fa:77:6f:bb:98:54:68:
         8e:c4:f9:13:eb:3d:57:7b:69:0f:f1:5a:e7:f7:53:23:45:6b:
         3a:f2:cb:7f:0e:b9:0a:43:ef:0e:77:d6:dc:4c:23:a1:bc:a9:
         a8:1e:21:41:00:69:88:eb:2a:e2:31:d1:ab:a7:9c:50:69:45:
         d9:34:e5:a4:4a:a3:fd:92:0d:e2:6c:05:e2:ee:12:ec:a3:2f:
         27:98:1c:ef:38:08:c1:33:fb:50:f1:2b:68:f3:ed:f1:12:77:
         d3:8e:2c:32:b0:cf:fd:ab:a9:08:13:48:19:fa:fb:3a:df:ed:
         b2:28:bc:27:31:08:47:a7:07:71:60:3a:31:48:e7:74:a9:0c:
         30:d6:dc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:13:39 2025 by rpki-client