Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/db4f7648-ed27-320e-b9bd-3bc630e1b5e8.roa
File:                     db4f7648-ed27-320e-b9bd-3bc630e1b5e8.roa (raw, json)
Hash identifier:          WB213q8ey+2lbEmDYOL70ysX878rV8XVRAP/wVZ0ioI=
Subject key identifier:   BE:5C:C7:9C:B4:99:DA:32:99:26:C0:59:C7:26:1F:F8:CD:58:BD:7E
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499294A0044EAE389C9F5313FE
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/db4f7648-ed27-320e-b9bd-3bc630e1b5e8.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     852
IP address blocks:        2001:56b:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:a0:04:4e:ae:38:9c:9f:53:13:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=c31de9ba-5730-4486-95de-7177b1df0566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:df:e3:61:2c:c8:06:0d:9c:ec:83:da:c9:a4:
                    16:05:05:93:48:0a:3b:6a:ef:86:f3:fc:65:1f:f2:
                    73:c0:0f:02:a0:ba:0c:9b:b2:52:ec:25:46:7e:51:
                    11:28:44:c6:3d:29:cd:93:df:26:f8:42:89:c8:53:
                    80:d9:a1:16:51:21:16:52:d6:02:cf:26:4b:ba:67:
                    d0:29:8c:0f:6f:da:18:6e:9e:64:ce:b4:25:c4:e2:
                    9c:41:b4:b9:cc:7f:97:bf:55:77:bd:ec:04:4d:e4:
                    9d:38:24:fa:9e:81:9e:23:d6:5f:8b:98:58:5a:dd:
                    9d:35:ca:81:d9:84:17:c2:94:ca:7e:d4:98:30:29:
                    ae:23:2b:93:25:b8:a6:08:00:c4:80:3c:f6:1f:90:
                    a7:65:54:f9:3f:13:52:b9:5a:76:7d:b5:4c:c4:80:
                    d1:9e:d5:70:6d:e5:7d:0d:16:71:ff:36:ae:a0:6e:
                    78:c1:16:75:00:6b:c2:3a:f4:41:4f:c5:82:77:f2:
                    a3:47:33:3c:17:ac:d7:dc:a2:a5:72:c4:5b:da:08:
                    e3:f7:f1:29:ac:71:a4:12:0d:1b:a3:06:75:7f:fe:
                    83:a8:23:6d:19:a1:2c:45:2e:58:f4:ec:f9:2e:92:
                    0c:c1:d0:d5:1a:fd:a0:e2:aa:52:50:84:18:e3:40:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5C:C7:9C:B4:99:DA:32:99:26:C0:59:C7:26:1F:F8:CD:58:BD:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/db4f7648-ed27-320e-b9bd-3bc630e1b5e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:5000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:fd:d2:d0:d3:10:11:a6:6d:d0:e4:dc:ae:94:9a:13:b8:1f:
         ef:90:d5:b2:0a:02:7f:50:5e:05:0b:e1:6a:cb:59:90:cf:18:
         a9:9e:21:db:33:18:ac:cc:d2:b2:27:d9:df:dc:a9:08:ea:f0:
         15:13:a0:48:ae:6a:f5:3c:dc:af:ce:3f:09:01:73:f4:ba:62:
         8a:f3:14:8a:58:93:da:47:ea:19:06:08:c6:52:52:ad:32:81:
         e6:91:a6:c9:7e:c8:40:27:69:25:36:fd:99:33:33:e7:82:d1:
         6a:3b:24:8f:2d:32:f0:b8:4f:a4:6a:62:d2:d1:8e:3b:e2:0f:
         3d:de:43:94:b8:9c:06:b4:28:e9:3a:81:c5:0f:1e:9f:7d:ec:
         06:35:8a:2f:cc:60:3a:11:e5:1a:bf:cd:88:4d:5a:0a:97:d2:
         5d:18:80:8a:63:9a:b0:3f:73:2d:0f:29:89:4f:17:d4:c4:78:
         87:65:f2:53:25:4c:48:ae:f3:92:4d:9f:05:1c:ad:73:4b:a5:
         c9:26:01:e0:0e:90:97:91:b8:90:1e:ae:de:67:03:72:4c:0e:
         4d:86:20:91:79:8d:be:6d:fc:06:ff:d5:43:f2:f8:86:ca:61:
         a4:e9:3c:3a:0f:0b:4a:1c:23:15:5f:d9:94:f5:20:6f:47:93:
         6d:b3:4b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:01:06 2025 by rpki-client