Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a4a4bb11-26da-330a-bb5b-de2802fe76fd.roa
File:                     a4a4bb11-26da-330a-bb5b-de2802fe76fd.roa (raw, json)
Hash identifier:          ywf+dbY1ieubscpmP240ic/Jtz+u/okfl13LdPVuBR8=
Subject key identifier:   29:F8:11:8E:C5:30:53:DB:F3:6A:59:53:A8:12:34:F8:6B:AE:1A:74
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285845347D49CF13D3CD9EB91EC840
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a4a4bb11-26da-330a-bb5b-de2802fe76fd.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     852
IP address blocks:        2001:56b:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:49:cf:13:d3:cd:9e:b9:1e:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=d84ee331-84d7-4e60-aa38-4e476a2eaae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d2:63:4b:e0:03:ba:ed:07:5a:34:48:09:b2:
                    c3:59:0d:70:02:56:35:38:50:71:5e:63:e4:02:4b:
                    fa:a4:6e:6f:59:be:99:c9:b5:05:fd:b9:6c:48:79:
                    f2:43:c6:ef:c2:e0:be:1f:81:03:40:99:61:98:c5:
                    78:a6:cd:07:30:ee:ea:8b:ed:6f:df:d2:57:28:fc:
                    1d:f8:79:1c:81:8f:0c:fd:72:91:76:f4:1a:fd:cd:
                    77:c0:b1:56:d3:b7:31:24:96:df:d6:59:cb:bc:03:
                    e4:62:b6:a7:91:3a:51:50:a1:42:53:60:7c:aa:a5:
                    d0:b7:d7:37:eb:3c:a5:e8:f6:47:01:22:e3:a3:32:
                    37:55:75:c5:5d:27:1f:bb:0d:ab:62:b3:7d:5f:bb:
                    b0:23:87:b1:50:bf:e0:1b:83:5f:a4:3e:ba:7a:93:
                    37:86:e2:39:39:ca:db:73:a8:06:8f:d4:7a:5f:93:
                    76:b6:db:ce:d3:5c:9d:d6:86:8a:1b:24:4e:34:4b:
                    0a:0e:61:6a:a3:98:13:22:e6:ba:d6:fc:52:ab:95:
                    72:c7:ef:5d:68:ed:fd:7c:10:b3:59:6a:85:ca:e3:
                    6f:10:80:a4:2c:62:94:ea:26:48:a7:37:5a:aa:a4:
                    8c:d6:c5:d3:76:8e:03:9d:75:7e:b3:fd:e8:5c:7b:
                    ef:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F8:11:8E:C5:30:53:DB:F3:6A:59:53:A8:12:34:F8:6B:AE:1A:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a4a4bb11-26da-330a-bb5b-de2802fe76fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ef:bb:e7:27:5e:6b:a8:ae:e5:08:06:80:16:f4:71:6e:f7:
         dd:71:d7:d7:79:95:ca:ec:21:88:e4:a9:33:9a:9d:dc:f3:97:
         94:de:c6:3b:48:37:0f:27:3a:a2:34:af:55:7b:37:04:3a:00:
         29:35:02:de:ae:98:a6:7b:95:d7:cd:fc:af:c8:2a:b8:b3:75:
         b9:cb:d9:64:fa:04:62:70:cb:48:00:fc:3b:ee:c4:c5:40:08:
         fe:15:a4:74:d5:e1:36:44:65:97:a2:5f:b9:7d:e2:7f:93:8d:
         c2:cd:34:fa:9b:7c:14:ab:26:d7:93:3a:5b:20:a4:32:23:16:
         2c:e5:23:09:1b:80:cd:fb:5b:83:c4:1b:57:f5:24:b0:19:cf:
         0b:1e:b0:14:3b:17:27:f1:7f:e7:ab:42:e7:a4:fa:00:51:dd:
         e9:66:09:f0:ca:07:03:4e:18:be:a5:ce:0f:d0:19:de:c0:1b:
         e0:c3:ee:1e:58:be:2c:0a:02:b4:07:7d:c2:b0:19:e5:51:8f:
         a7:00:36:6e:3b:f5:88:b7:4f:64:2b:eb:1e:8b:18:df:7a:7c:
         69:ea:31:94:50:c3:c1:6b:36:37:76:40:b1:ea:5c:2e:15:da:
         7d:bd:70:b6:fd:f6:5d:05:ab:d3:c4:86:b5:3a:01:6e:0f:59:
         0d:79:cf:cf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEU0fUnPE9PNnrkeyEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDMxNDEzMDAzMFoXDTI0MDYxMjEzMDAzMFowLzEtMCsGA1UEAxMk
ZDg0ZWUzMzEtODRkNy00ZTYwLWFhMzgtNGU0NzZhMmVhYWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltJjS+ADuu0HWjRICbLDWQ1wAlY1OFBxXmPk
Akv6pG5vWb6ZybUF/blsSHnyQ8bvwuC+H4EDQJlhmMV4ps0HMO7qi+1v39JXKPwd
+HkcgY8M/XKRdvQa/c13wLFW07cxJJbf1lnLvAPkYrankTpRUKFCU2B8qqXQt9c3
6zyl6PZHASLjozI3VXXFXScfuw2rYrN9X7uwI4exUL/gG4NfpD66epM3huI5Ocrb
c6gGj9R6X5N2ttvO01yd1oaKGyRONEsKDmFqo5gTIua61vxSq5Vyx+9daO39fBCz
WWqFyuNvEICkLGKU6iZIpzdaqqSM1sXTdo4DnXV+s/3oXHvvmwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCn4EY7FMFPb82pZU6gSNPhrrhp0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTRhNGJiMTEtMjZkYS0z
MzBhLWJiNWItZGUyODAyZmU3NmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFawAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACbvu+cnXmuoruUIBoAW9HFu991x19d5lcrsIYjkqTOandzzl5Te
xjtINw8nOqI0r1V7NwQ6ACk1At6umKZ7ldfN/K/IKrizdbnL2WT6BGJwy0gA/Dvu
xMVACP4VpHTV4TZEZZeiX7l94n+TjcLNNPqbfBSrJteTOlsgpDIjFizlIwkbgM37
W4PEG1f1JLAZzwsesBQ7Fyfxf+erQuek+gBR3elmCfDKBwNOGL6lzg/QGd7AG+DD
7h5YviwKArQHfcKwGeVRj6cANm479Yi3T2Qr6x6LGN96fGnqMZRQw8FrNjd2QLHq
XC4V2n29cLb99l0Fq9PEhrU6AW4PWQ15z88=
-----END CERTIFICATE-----
Generated at Sun May 19 01:55:03 2024 by rpki-client on console-fra.rpki-client.org