Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d357ae0b-bed2-3254-8430-8899cde32953.roa
File:                     d357ae0b-bed2-3254-8430-8899cde32953.roa (raw, json)
Hash identifier:          C3G90PufDV+IOVZUtz+gTDQ4D7ydyl8ajx0bdfeKlVc=
Subject key identifier:   38:5E:5B:84:C2:1E:31:79:DF:37:B3:25:7E:A9:78:F3:1A:E2:35:83
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285845347D46B9C259F79C1DFD27B0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d357ae0b-bed2-3254-8430-8899cde32953.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     852
IP address blocks:        2001:56a:6ff0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:46:b9:c2:59:f7:9c:1d:fd:27:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=82270532-97ba-498d-bddd-fe66075546e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5e:d4:20:44:f0:2d:96:a4:2d:5a:3e:a8:9b:
                    5b:5f:6c:e7:db:0c:ea:56:30:b0:92:80:6c:88:a6:
                    52:0c:db:15:81:64:5e:1d:82:00:b8:42:02:3f:22:
                    12:c1:ec:9a:78:34:a6:ac:59:e9:47:4b:9b:6e:69:
                    8d:59:5d:b9:28:a6:35:c0:c2:24:b3:a7:55:8f:dd:
                    d8:c2:90:c7:ec:99:7a:0e:d2:88:25:7e:9f:2f:a5:
                    dd:8e:aa:06:f8:a7:67:26:f6:6c:51:7a:b9:0a:9d:
                    ba:43:f5:ca:4b:1c:5d:5e:ec:d0:45:f3:db:fb:fd:
                    68:81:6c:5c:d5:1c:52:e2:e2:a2:70:62:48:00:0d:
                    38:9d:d1:22:59:7b:19:d1:d5:32:74:81:8b:ae:72:
                    90:a5:c0:ee:ad:46:65:65:c1:50:ac:ad:f4:84:b2:
                    b7:6b:3c:2a:91:e2:49:75:ae:c2:f4:8e:b0:29:3b:
                    d4:d7:38:ed:bd:ed:a1:85:88:1f:df:10:73:80:d5:
                    c6:bf:d6:f2:45:c9:a2:7e:81:b6:3e:08:32:80:86:
                    16:8b:22:7b:a5:b0:f0:d9:08:bd:44:e5:07:fe:90:
                    91:ec:9a:7f:5d:9a:0c:2a:63:f3:21:af:15:ca:17:
                    e9:be:fb:bb:cb:54:f2:fb:df:52:41:87:61:33:75:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5E:5B:84:C2:1E:31:79:DF:37:B3:25:7E:A9:78:F3:1A:E2:35:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d357ae0b-bed2-3254-8430-8899cde32953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a:6ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:6c:82:18:f3:72:53:1b:61:d0:41:81:90:ea:68:ca:7c:2d:
         b4:20:8f:b7:3f:f5:34:b0:5f:c0:a2:08:65:f7:3e:90:97:c8:
         be:e1:7f:15:df:84:19:73:de:20:42:1f:a1:6e:b0:b8:68:5c:
         25:44:2e:e1:16:ea:4a:ed:17:58:35:67:4b:98:02:1a:51:b6:
         bb:a7:0c:c7:54:9f:b6:91:ac:1b:34:6c:9a:c1:73:d9:7d:87:
         a1:0a:4c:50:42:53:e3:84:02:50:84:e4:11:59:b9:d9:31:45:
         0f:3c:48:d5:83:54:02:8f:1b:8f:c9:ec:46:5d:0a:9d:dd:93:
         2b:d1:21:e2:4e:ec:e1:d3:66:66:85:b6:20:24:9b:44:8a:10:
         62:8b:19:67:71:fb:be:28:44:62:dd:ad:0e:57:ee:e6:06:0b:
         86:09:cf:bc:35:47:19:c4:ae:d1:85:0d:74:c1:6e:a5:fb:41:
         e6:10:cc:d6:c0:8a:ee:a8:d4:58:a7:3d:c8:a6:46:fe:2d:da:
         ea:e5:68:44:74:b1:b4:4b:f1:fb:87:9e:dc:d2:eb:02:6b:fb:
         79:a6:e1:33:da:a7:a1:db:98:b8:a9:b8:ad:92:c1:81:ea:f0:
         03:eb:80:32:7a:66:4c:f9:dd:67:55:d1:59:d6:30:8e:8f:79:
         fa:e7:a8:51
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEU0fUa5wln3nB39J7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDMxNDEzMDAzMFoXDTI0MDYxMjEzMDAzMFowLzEtMCsGA1UEAxMk
ODIyNzA1MzItOTdiYS00OThkLWJkZGQtZmU2NjA3NTU0NmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV7UIETwLZakLVo+qJtbX2zn2wzqVjCwkoBs
iKZSDNsVgWReHYIAuEICPyISweyaeDSmrFnpR0ubbmmNWV25KKY1wMIks6dVj93Y
wpDH7Jl6DtKIJX6fL6XdjqoG+KdnJvZsUXq5Cp26Q/XKSxxdXuzQRfPb+/1ogWxc
1RxS4uKicGJIAA04ndEiWXsZ0dUydIGLrnKQpcDurUZlZcFQrK30hLK3azwqkeJJ
da7C9I6wKTvU1zjtve2hhYgf3xBzgNXGv9byRcmifoG2PggygIYWiyJ7pbDw2Qi9
ROUH/pCR7Jp/XZoMKmPzIa8Vyhfpvvu7y1Ty+99SQYdhM3XIowIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDheW4TCHjF53zezJX6pePMa4jWDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDM1N2FlMGItYmVkMi0z
MjU0LTg0MzAtODg5OWNkZTMyOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFam/w
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJdsghjzclMbYdBBgZDqaMp8LbQgj7c/9TSwX8CiCGX3PpCXyL7h
fxXfhBlz3iBCH6FusLhoXCVELuEW6krtF1g1Z0uYAhpRtrunDMdUn7aRrBs0bJrB
c9l9h6EKTFBCU+OEAlCE5BFZudkxRQ88SNWDVAKPG4/J7EZdCp3dkyvRIeJO7OHT
ZmaFtiAkm0SKEGKLGWdx+74oRGLdrQ5X7uYGC4YJz7w1RxnErtGFDXTBbqX7QeYQ
zNbAiu6o1FinPcimRv4t2urlaER0sbRL8fuHntzS6wJr+3mm4TPap6HbmLipuK2S
wYHq8APrgDJ6Zkz53WdV0VnWMI6PefrnqFE=
-----END CERTIFICATE-----
Generated at Mon May 27 01:58:12 2024 by rpki-client on console-fra.rpki-client.org