Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/41cb8e23-5c24-31ab-b10c-5a8f453e6889.roa
File:                     41cb8e23-5c24-31ab-b10c-5a8f453e6889.roa (raw, json)
Hash identifier:          rGROkH0+K41Rieq4lUVU+kUxFgg03tmoMRTlnnVvL94=
Subject key identifier:   C7:FB:8B:98:94:49:08:BD:5F:06:DC:4B:EB:7B:12:FD:FA:96:A1:70
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584992949EDBD382BBFF3BFE4A00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/41cb8e23-5c24-31ab-b10c-5a8f453e6889.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     852
IP address blocks:        2001:56b:9f0e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:9e:db:d3:82:bb:ff:3b:fe:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=fd6af7e7-9068-4d62-b150-c139bd035958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b1:b0:e7:16:12:ba:af:60:ad:55:78:c9:b9:
                    3d:c2:d4:b5:17:28:1d:6c:8c:e7:88:f6:90:9b:e9:
                    fc:da:15:c6:8a:f2:ce:b7:a4:17:76:78:8d:9b:3d:
                    96:ff:76:1d:c1:b8:ab:fd:e0:b7:bc:30:66:ca:b8:
                    b9:86:04:7d:72:be:51:de:27:84:c7:08:d0:37:e5:
                    e3:ed:d8:18:c5:2d:4e:87:f1:6a:83:48:06:36:8e:
                    53:8e:79:8d:b5:f1:88:60:55:e3:13:d8:46:96:a1:
                    b0:b6:30:14:d0:28:72:e4:3d:91:2a:14:66:9b:0c:
                    f5:24:28:ab:80:d0:0a:57:c3:5e:90:10:4c:1e:dd:
                    c7:09:65:2a:b6:50:1c:8a:fb:7b:3c:46:22:9e:46:
                    09:f7:19:39:22:62:8c:82:66:8b:d7:dc:a8:c6:db:
                    ab:9a:e7:d5:78:40:36:e8:a2:ec:d1:01:06:05:82:
                    5e:6d:91:48:63:6f:5f:6a:87:fb:7c:02:cf:2a:2a:
                    7c:25:f1:8f:71:ea:f1:e7:cd:f6:9e:cc:71:de:17:
                    8a:a1:b9:77:d1:1c:f1:0d:62:0c:2a:f3:8d:0d:1d:
                    1d:f8:5f:ac:56:51:40:cd:6a:44:55:4f:82:1a:a8:
                    6a:70:5f:aa:f5:68:b4:6e:9e:0d:40:1b:c8:8a:c7:
                    d1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FB:8B:98:94:49:08:BD:5F:06:DC:4B:EB:7B:12:FD:FA:96:A1:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/41cb8e23-5c24-31ab-b10c-5a8f453e6889.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:9f0e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:f0:e7:b2:71:67:4d:01:71:fe:23:3d:5c:ea:ba:23:cd:b2:
         3e:2d:62:74:40:14:a7:da:1b:98:04:00:1a:60:70:53:02:89:
         68:6d:6a:d0:a2:bc:4e:57:86:09:7b:ec:9c:fd:3d:7e:b4:56:
         2c:56:17:97:41:a4:36:99:03:3e:bc:cd:29:d7:b8:d3:0f:02:
         6b:19:ab:25:5c:d5:a1:73:13:7d:a0:fc:3b:ce:e8:b4:18:8c:
         cd:cb:f3:8c:e5:57:07:c3:6c:a8:18:0b:b4:03:ae:da:18:d9:
         7f:c8:b8:df:38:49:0e:c7:db:51:a2:29:33:93:b3:32:b8:e1:
         cd:3b:1d:0e:ba:db:65:9a:4c:a4:4d:41:01:1c:34:5f:5a:4c:
         8a:31:9b:d8:01:67:64:7d:ac:10:fd:a1:c5:c1:13:21:37:fc:
         1c:2e:0c:ac:9a:3a:9e:a0:98:07:67:8c:d3:5d:55:f6:94:c4:
         3e:16:47:db:ba:1c:df:f2:41:73:9b:42:3a:25:6c:17:1e:02:
         a5:e1:ce:72:72:90:13:ce:d8:37:93:e6:4c:4a:3e:77:6b:13:
         9e:49:6d:56:e7:72:70:e3:a8:2c:7d:8a:2b:be:7d:5a:0f:7a:
         88:dd:0a:23:9f:b9:69:1f:83:63:1f:c1:c0:2b:97:4e:97:97:
         18:d4:9b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:01:16 2025 by rpki-client