Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/017e0106-0350-3fde-b434-9cfe75a7fbc2.roa
File:                     017e0106-0350-3fde-b434-9cfe75a7fbc2.roa (raw, json)
Hash identifier:          qtJJC9Yujyz3+Z9nf90ltbdwmsPYQ6f1mw5N5y6ZNHk=
Subject key identifier:   0B:CD:6F:45:77:10:B1:E6:87:1F:80:EA:59:F8:40:DA:C5:2F:2F:8F
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584992949FA68FEC143F6A64B780
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/017e0106-0350-3fde-b434-9cfe75a7fbc2.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     852
IP address blocks:        2001:56b:5fe0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:9f:a6:8f:ec:14:3f:6a:64:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=f89f9dca-80f9-4457-954a-f4dddb9985a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:be:23:66:b1:95:b2:21:51:57:70:47:37:
                    2a:b3:3b:ef:65:cd:47:2b:69:77:31:b9:b9:4d:22:
                    98:d1:a5:50:00:cd:5a:fe:4e:c2:2c:5f:2e:11:3d:
                    19:f1:8d:1a:bf:38:bc:f1:b9:d0:f9:12:70:48:6c:
                    2e:95:56:79:47:84:45:22:ac:70:c4:43:97:67:f6:
                    d2:a7:5d:9c:75:1f:1d:16:cd:f9:5d:0a:2d:e9:3d:
                    e7:7b:ec:b7:75:ca:f6:d6:5d:e7:9c:89:9a:25:38:
                    35:ca:f7:85:d5:d6:3e:de:63:de:b7:eb:e9:ac:6b:
                    42:7b:c2:3e:90:fb:37:d8:2a:9e:cf:2d:9a:9c:24:
                    d7:ac:87:56:8d:69:20:89:6f:32:b7:c0:56:48:4f:
                    e8:b7:7f:df:ec:f2:ec:a3:dc:ee:33:8f:e6:8a:7a:
                    ce:da:6f:c3:a3:40:60:a7:fa:1a:90:a6:bf:03:d6:
                    67:1f:89:08:a8:67:6b:99:a0:ce:a0:20:9c:ee:87:
                    65:b8:6e:71:42:1a:1b:88:9b:e2:6e:b0:cc:b4:2b:
                    c9:25:39:b1:f8:86:9e:3a:4b:a8:5b:fc:63:50:2a:
                    f5:4f:18:b6:7c:e2:71:a4:e8:f9:4f:18:0e:35:05:
                    3d:f7:ca:4e:05:c5:83:2f:cb:6f:02:9e:a2:00:77:
                    32:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CD:6F:45:77:10:B1:E6:87:1F:80:EA:59:F8:40:DA:C5:2F:2F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/017e0106-0350-3fde-b434-9cfe75a7fbc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:5fe0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:01:55:08:0b:31:53:c1:6c:72:f9:1a:d2:1c:64:9f:2f:85:
         a8:24:12:a0:f6:55:b7:e5:80:7c:90:be:5c:75:ec:05:c8:fa:
         01:1e:6e:62:64:8f:0f:95:ee:b2:20:e8:4b:5c:8e:e8:cd:ae:
         3c:41:b0:5c:8b:3b:56:a6:44:ed:5e:c2:d9:1b:86:3d:17:b6:
         51:5d:ef:3d:49:be:55:c6:7f:b6:20:e1:5a:3b:18:3c:b3:99:
         96:03:1e:50:66:3b:60:67:4e:39:49:73:c3:38:66:82:4a:7e:
         69:2a:fc:5f:e5:39:0d:76:98:51:72:c4:80:8f:c0:64:84:5f:
         9f:e9:c2:09:d0:a0:19:f1:57:1a:a9:f1:b8:dc:16:1e:ff:8c:
         19:43:56:42:96:50:18:9e:e0:58:56:aa:30:ba:44:71:1a:57:
         c9:c5:c6:31:e3:fa:b1:df:a7:48:76:4a:c2:47:0f:5a:d6:a2:
         a7:98:e3:4e:ab:b8:3d:b3:64:38:c1:d7:ca:54:77:93:a0:cd:
         2d:da:70:72:25:0a:3b:a2:00:a9:b8:80:53:60:94:0b:6b:64:
         4f:a2:d1:64:d4:ce:b0:71:2b:65:a7:28:85:3b:c7:e1:84:12:
         82:06:b6:a4:59:7d:de:aa:73:3b:95:ee:9e:44:00:7d:cd:a0:
         39:51:7f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:38:42 2025 by rpki-client