Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/fb700d78-4bc1-3d8e-931b-13dde0d7938f.roa
File:                     fb700d78-4bc1-3d8e-931b-13dde0d7938f.roa (raw, json)
Hash identifier:          yFn0N5juZP0Rzm6abLLeeOALeAWXuQlQUVZjyQB1SUA=
Subject key identifier:   F1:52:32:E0:B2:59:CE:41:7A:C7:31:6F:6B:D2:45:AC:8A:65:34:09
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F432858477EC1053A8972B3E0673F16C0
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/fb700d78-4bc1-3d8e-931b-13dde0d7938f.roa
Signing time:             Thu 10 Oct 2024 13:00:41 +0000
ROA not before:           Thu 10 Oct 2024 13:00:41 +0000
ROA not after:            Wed 08 Jan 2025 14:00:41 +0000
asID:                     55091
IP address blocks:        2606:a840::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7e:c1:05:3a:89:72:b3:e0:67:3f:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Oct 10 13:00:41 2024 GMT
            Not After : Jan  8 14:00:41 2025 GMT
        Subject: CN=05344479-23c3-49eb-a7dd-7f2b5ead0f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e8:2b:d3:26:a8:75:92:d1:6b:cc:e7:24:f5:
                    58:12:8b:b7:3a:d1:a1:7e:d0:5e:35:0f:3b:2a:54:
                    a2:2a:f5:21:85:62:b3:14:cc:f5:67:74:48:2a:06:
                    ac:f6:99:b9:19:50:6f:e3:8e:2d:7a:63:c1:59:c0:
                    fb:9b:11:be:54:6b:28:9b:db:c2:4e:02:1e:ca:9f:
                    40:f1:66:9a:9a:3d:8c:5f:d6:42:51:6f:86:78:3f:
                    e5:98:99:ec:24:ab:df:78:4d:e2:f6:dd:44:89:5d:
                    67:f2:5c:92:bc:26:1d:09:d7:b2:d1:89:33:30:89:
                    6f:c4:70:03:d5:b7:22:13:2d:a5:4f:ed:e6:60:da:
                    6f:2e:9b:03:1b:ce:47:6f:38:b8:fe:9b:1d:5a:7d:
                    86:49:cc:ce:0d:f3:97:a4:b8:98:de:e5:2e:dc:a9:
                    39:1a:4f:2e:b0:42:44:64:d7:32:ad:68:1c:3f:fe:
                    56:b5:ea:68:67:bd:ca:3c:54:e4:9c:3d:63:82:0f:
                    8d:29:38:4f:e8:f0:2d:31:9e:d7:15:e0:95:27:a7:
                    02:0b:4c:e3:1d:51:64:55:f8:8f:33:bd:73:f7:d0:
                    74:5a:d5:e5:b8:53:53:0a:34:48:e7:bd:4a:01:1d:
                    77:9b:9f:9d:50:be:50:b1:b7:70:b5:57:ac:9c:25:
                    8b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:52:32:E0:B2:59:CE:41:7A:C7:31:6F:6B:D2:45:AC:8A:65:34:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/fb700d78-4bc1-3d8e-931b-13dde0d7938f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:a840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:1d:4e:6c:4e:c6:66:59:af:13:e2:42:ed:76:d6:31:4f:d6:
         79:38:45:87:41:a7:03:27:02:49:0a:b7:9f:01:55:64:30:f8:
         33:d8:37:9f:c1:70:08:66:e1:0a:5d:8b:2e:db:60:0c:2c:67:
         fc:22:0a:76:7d:76:fe:55:e5:db:96:79:66:6b:e6:1b:07:88:
         74:8b:01:ee:3f:60:c7:b5:91:55:8e:3a:ea:cb:17:77:36:9c:
         42:8a:d6:52:10:f8:e2:97:af:7d:f6:0c:03:eb:fb:17:13:86:
         85:81:6f:a9:75:f1:02:39:e7:f7:8a:6d:a7:6b:94:4b:b3:ca:
         5c:64:d0:cf:50:c1:61:72:e2:b0:13:2c:3c:b9:7c:c2:ea:1a:
         f7:4b:ee:52:d4:e0:f7:6d:d3:f2:f3:b5:79:1b:6a:74:67:54:
         9e:a3:d5:51:ba:09:5b:59:9e:b3:b8:30:10:aa:a2:b1:af:91:
         38:99:f0:7f:a6:47:7e:7d:26:85:ef:c2:5e:26:99:ea:36:7d:
         a1:8a:b7:67:bd:21:ea:07:5b:13:93:74:ac:71:ca:0c:50:da:
         18:e7:4a:17:4b:63:ef:6c:f1:59:f1:24:2f:67:e3:69:8e:c3:
         d5:73:97:29:d3:4f:a7:0f:86:22:26:f5:25:f6:0c:e9:b3:b1:
         24:cb:e0:09
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEd+wQU6iXKz4Gc/FsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZhNzUyNjEtNGUyNy00NzhhLThmOWUtNzFhOTkxNWNl
OWI0MB4XDTI0MTAxMDEzMDA0MVoXDTI1MDEwODE0MDA0MVowLzEtMCsGA1UEAxMk
MDUzNDQ0NzktMjNjMy00OWViLWE3ZGQtN2YyYjVlYWQwZjJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+gr0yaodZLRa8znJPVYEou3OtGhftBeNQ87
KlSiKvUhhWKzFMz1Z3RIKgas9pm5GVBv444temPBWcD7mxG+VGsom9vCTgIeyp9A
8Waamj2MX9ZCUW+GeD/lmJnsJKvfeE3i9t1EiV1n8lySvCYdCdey0YkzMIlvxHAD
1bciEy2lT+3mYNpvLpsDG85Hbzi4/psdWn2GSczODfOXpLiY3uUu3Kk5Gk8usEJE
ZNcyrWgcP/5WtepoZ73KPFTknD1jgg+NKThP6PAtMZ7XFeCVJ6cCC0zjHVFkVfiP
M71z99B0WtXluFNTCjRI571KAR13m5+dUL5QsbdwtVesnCWLPQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPFSMuCyWc5Bescxb2vSRayKZTQJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NmE3
NTI2MS00ZTI3LTQ3OGEtOGY5ZS03MWE5OTE1Y2U5YjQvZmI3MDBkNzgtNGJjMS0z
ZDhlLTkzMWItMTNkZGUwZDc5MzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTZhNzUyNjEtNGUyNy00NzhhLThm
OWUtNzFhOTkxNWNlOWI0LzU2YTc1MjYxLTRlMjctNDc4YS04ZjllLTcxYTk5MTVj
ZTliNC5jcmwwHwYDVR0jBBgwFoAUpD4W+eX7d/UJhUBw50W6Yj2uG0wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81NmE3NTI2MS00ZTI3LTQ3OGEtOGY5ZS03MWE5
OTE1Y2U5YjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgaoQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA+HU5sTsZmWa8T4kLtdtYxT9Z5OEWHQacDJwJJCrefAVVkMPgz2Def
wXAIZuEKXYsu22AMLGf8Igp2fXb+VeXblnlma+YbB4h0iwHuP2DHtZFVjjrqyxd3
NpxCitZSEPjil6999gwD6/sXE4aFgW+pdfECOef3im2na5RLs8pcZNDPUMFhcuKw
Eyw8uXzC6hr3S+5S1OD3bdPy87V5G2p0Z1Seo9VRuglbWZ6zuDAQqqKxr5E4mfB/
pkd+fSaF78JeJpnqNn2hirdnvSHqB1sTk3SsccoMUNoY50oXS2PvbPFZ8SQvZ+Np
jsPVc5cp00+nD4YiJvUl9gzps7Eky+AJ
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:19:11 2024 by rpki-client on console-fra.rpki-client.org