Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5be72693-e77e-3018-aaf9-9d1b330f1dd1.roa
File:                     5be72693-e77e-3018-aaf9-9d1b330f1dd1.roa (raw, json)
Hash identifier:          HLFJXPk0Kz7+y5l8LvQt9iBbxjFkYWRWkzylhnTC2lU=
Subject key identifier:   B5:06:23:3A:93:F8:1B:64:9C:8B:0B:47:DC:76:7C:3A:6E:86:E9:19
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584992949FC3D0B3DA2A0A399500
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5be72693-e77e-3018-aaf9-9d1b330f1dd1.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     852
IP address blocks:        2001:56b:3ff0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:9f:c3:d0:b3:da:2a:0a:39:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=c6dc8bd0-62cb-4096-a643-aa561f06f3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:69:2a:da:41:08:18:7c:d2:9a:11:79:00:76:
                    3f:b7:b9:57:97:bc:70:90:9f:54:d9:ed:ea:6b:b9:
                    86:3d:ab:63:70:f9:bb:ae:b1:89:c7:0e:80:fd:d9:
                    39:1c:c2:6d:f1:1d:7f:22:27:12:f1:69:29:96:33:
                    24:71:de:61:a2:a2:4f:58:4d:bc:62:94:f4:f7:94:
                    4f:2a:b3:f1:18:c5:0f:d8:02:3a:36:fa:d2:5b:f4:
                    d1:1d:69:82:5a:52:de:15:25:e1:5f:d3:5c:00:d8:
                    e9:e3:b8:28:dc:d2:4d:5f:47:c9:2e:ce:a2:57:38:
                    7d:74:57:90:3a:d8:66:6f:03:9c:eb:8a:b0:39:ca:
                    6b:7c:fc:c8:9c:8a:ee:24:dc:90:1e:9d:b2:3f:ec:
                    e6:23:76:db:75:e4:7d:3f:0c:14:e1:a1:84:48:e2:
                    17:e3:fe:e3:bf:83:29:a9:b7:c4:7e:0f:5f:c1:b7:
                    b9:b5:d0:3c:d3:b8:55:7b:f2:21:b8:c5:b4:2d:b2:
                    b9:fd:81:16:67:31:5c:a2:1c:4d:b1:85:fa:a0:b7:
                    1e:01:a4:e9:89:44:2d:58:54:c3:1c:c4:82:8f:64:
                    70:0e:19:2f:43:7e:a3:c9:bd:b2:a6:ca:99:f2:46:
                    95:29:7f:9e:f2:aa:46:1e:13:af:af:b5:a0:95:1a:
                    5e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:06:23:3A:93:F8:1B:64:9C:8B:0B:47:DC:76:7C:3A:6E:86:E9:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5be72693-e77e-3018-aaf9-9d1b330f1dd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:3ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:9c:1e:67:29:52:7a:e8:00:42:07:3f:0b:ab:08:df:e3:a6:
         70:4b:a9:df:55:05:d0:dc:71:6c:6d:8b:5c:14:d3:40:41:e9:
         db:73:b3:52:8f:45:07:42:9e:20:3c:20:97:d1:5e:8a:0c:14:
         d5:d2:e7:2d:6e:5b:a7:87:a0:6f:21:2b:90:5a:23:3c:72:f6:
         cd:a3:5a:ee:1f:3d:42:bf:49:c2:c0:03:7b:8a:0e:80:4d:d9:
         3f:56:8a:36:4c:1c:66:df:d6:9f:cd:08:3b:e0:fa:1c:1b:4b:
         31:7b:00:e2:5b:ac:49:09:22:58:5b:4d:d6:cf:db:ad:cc:bc:
         d6:5d:d4:ec:10:80:27:28:46:13:e0:85:12:c7:9f:17:0e:2f:
         a6:58:6f:02:44:c8:bf:d5:c9:9c:98:45:1f:9f:31:74:10:8b:
         5f:6a:45:6e:0f:69:b2:21:7c:73:19:98:0b:cf:3c:db:46:72:
         ca:ec:f8:14:f6:98:fe:7e:21:1a:d7:63:39:a0:1f:60:c3:f0:
         1f:ff:51:2c:cd:11:b1:41:e0:c2:0d:e1:a9:dd:5e:9d:21:f5:
         c2:4b:f0:97:f2:b0:7d:f3:63:19:0d:29:2b:59:34:c5:4d:0c:
         2f:38:2f:98:87:5d:4d:e3:7f:da:b4:24:c9:94:d9:c1:c4:a0:
         0b:fa:ff:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:48:37 2025 by rpki-client