Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7f7aba2-2da8-3ee5-b6c1-90e11a9c3282.roa
File:                     f7f7aba2-2da8-3ee5-b6c1-90e11a9c3282.roa (raw, json)
Hash identifier:          VCG7lez2BfLhVbXKUyB9UyxE03Yf9n43YiVWDg3cueg=
Subject key identifier:   81:2D:6C:C0:BE:A5:55:22:86:3F:4C:7C:94:00:39:0E:5A:2D:E0:D4
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584535E29A68A442DE7BFB43F880
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7f7aba2-2da8-3ee5-b6c1-90e11a9c3282.roa
Signing time:             Fri 15 Mar 2024 01:00:26 +0000
ROA not before:           Fri 15 Mar 2024 01:00:26 +0000
ROA not after:            Thu 13 Jun 2024 01:00:26 +0000
asID:                     852
IP address blocks:        2001:569::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:e2:9a:68:a4:42:de:7b:fb:43:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 15 01:00:26 2024 GMT
            Not After : Jun 13 01:00:26 2024 GMT
        Subject: CN=de282528-c44c-48d1-89bf-9cc38c1f728c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:67:03:db:59:81:f0:6d:d4:83:f4:7e:1b:5f:
                    30:d1:24:c4:87:b9:ae:e4:08:9d:d5:dd:5b:05:a6:
                    e0:4a:51:da:ab:81:0c:b0:d3:61:29:0b:22:f5:1a:
                    5a:0f:02:96:4c:46:4d:44:4f:3b:21:cc:6f:67:57:
                    5a:65:96:3a:ff:f2:d0:71:46:a2:3d:4a:ac:85:78:
                    84:6c:7a:df:68:37:1c:6b:c7:8d:87:07:e0:f1:5d:
                    a0:56:42:b5:f6:17:79:65:2f:e8:d4:a6:3b:ed:d3:
                    9b:b2:aa:72:12:c0:70:40:81:78:05:02:5b:68:17:
                    0f:1c:14:30:56:b4:1f:bb:da:21:80:f0:90:40:60:
                    d4:c2:30:11:8e:b3:c5:48:b0:58:b1:26:15:a7:76:
                    77:1f:2b:29:df:29:dc:5a:5d:9e:99:25:e1:cc:c6:
                    50:2d:b1:37:d2:51:79:de:c5:ea:87:cb:ae:cf:63:
                    7a:39:d0:b7:8a:5e:56:92:f3:6a:7e:3a:24:27:71:
                    ef:97:59:a1:6f:3f:f0:f4:72:ef:e6:6f:2d:31:f4:
                    6e:b2:07:eb:26:65:f4:8b:65:b1:90:2a:ad:f2:bc:
                    91:22:d4:cd:87:52:20:5e:8b:1a:b8:e1:46:f4:64:
                    af:0e:7e:3d:6a:a9:20:ef:fd:f3:d6:86:d4:ae:4b:
                    fa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2D:6C:C0:BE:A5:55:22:86:3F:4C:7C:94:00:39:0E:5A:2D:E0:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f7f7aba2-2da8-3ee5-b6c1-90e11a9c3282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:569::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:a6:b7:c6:02:94:d1:a7:aa:9d:e2:a8:dd:76:a1:3e:63:26:
         6b:47:c4:61:d6:ac:01:49:00:c6:5f:51:eb:01:f6:dc:78:f1:
         bf:bb:bf:37:b2:91:f2:1a:25:38:c8:ef:e8:af:7f:03:e3:04:
         34:ad:12:78:0d:9e:e8:9a:e8:45:ab:10:46:92:3e:83:f2:6b:
         88:2e:9d:11:4e:1b:86:29:02:83:b8:d3:c0:f2:19:05:f1:cc:
         b2:a2:eb:76:91:e1:c7:7c:e2:86:1a:8f:2d:57:4c:f7:e0:56:
         9a:6b:10:c9:e2:b7:f0:0a:cc:b7:3e:22:38:e1:0c:4e:cb:21:
         f0:8d:0d:b8:63:54:1d:f0:c9:60:c4:cc:8c:3f:2b:45:0b:e2:
         39:d9:58:58:69:6d:ae:bf:9a:73:de:6b:4b:76:4d:21:b4:7f:
         f1:d3:5b:16:dd:49:40:c7:5e:12:dd:ed:e5:94:2b:f6:0b:7b:
         9f:1d:a6:b2:f1:71:e5:b0:81:08:8a:bd:4c:2f:f6:d9:47:9f:
         be:b3:5e:85:7c:f5:4e:a3:5f:a0:f1:d2:86:ac:7e:73:30:7c:
         ad:af:00:69:01:80:ff:28:c4:73:3e:2c:5a:ac:d8:b9:91:f0:
         57:53:ca:af:46:04:18:b1:5d:50:24:4c:b7:91:f2:9c:33:9a:
         3c:5c:5d:d0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEU14ppopELee/tD+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDMxNTAxMDAyNloXDTI0MDYxMzAxMDAyNlowLzEtMCsGA1UEAxMk
ZGUyODI1MjgtYzQ0Yy00OGQxLTg5YmYtOWNjMzhjMWY3MjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWcD21mB8G3Ug/R+G18w0STEh7mu5Aid1d1b
BabgSlHaq4EMsNNhKQsi9RpaDwKWTEZNRE87IcxvZ1daZZY6//LQcUaiPUqshXiE
bHrfaDcca8eNhwfg8V2gVkK19hd5ZS/o1KY77dObsqpyEsBwQIF4BQJbaBcPHBQw
VrQfu9ohgPCQQGDUwjARjrPFSLBYsSYVp3Z3Hysp3yncWl2emSXhzMZQLbE30lF5
3sXqh8uuz2N6OdC3il5WkvNqfjokJ3Hvl1mhbz/w9HLv5m8tMfRusgfrJmX0i2Wx
kCqt8ryRItTNh1IgXosauOFG9GSvDn49aqkg7/3z1obUrkv6+wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIEtbMC+pVUihj9MfJQAOQ5aLeDUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZjdmN2FiYTItMmRhOC0z
ZWU1LWI2YzEtOTBlMTFhOWMzMjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHIAEFaQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAj6a3xgKU0aeqneKo3XahPmMma0fEYdasAUkAxl9R6wH23Hjxv7u/
N7KR8holOMjv6K9/A+MENK0SeA2e6JroRasQRpI+g/JriC6dEU4bhikCg7jTwPIZ
BfHMsqLrdpHhx3zihhqPLVdM9+BWmmsQyeK38ArMtz4iOOEMTssh8I0NuGNUHfDJ
YMTMjD8rRQviOdlYWGltrr+ac95rS3ZNIbR/8dNbFt1JQMdeEt3t5ZQr9gt7nx2m
svFx5bCBCIq9TC/22UefvrNehXz1TqNfoPHShqx+czB8ra8AaQGA/yjEcz4sWqzY
uZHwV1PKr0YEGLFdUCRMt5HynDOaPFxd0A==
-----END CERTIFICATE-----
Generated at Mon May 27 08:10:49 2024 by rpki-client on console-ams.rpki-client.org