Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d16fa0ba-f475-38f1-af2a-ff6973c2334f.roa
File:                     d16fa0ba-f475-38f1-af2a-ff6973c2334f.roa (raw, json)
Hash identifier:          LCQ5CPp673jVjpEPlZfVJrPlk23Xw1gIGTiXeOwRr4Q=
Subject key identifier:   0E:A7:76:80:60:76:62:CF:0E:A8:4F:11:5A:3F:68:2D:09:30:67:D2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473B5307A6944E37554DDFB1A8
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d16fa0ba-f475-38f1-af2a-ff6973c2334f.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        2606:54c1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:53:07:a6:94:4e:37:55:4d:df:b1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=980708b4-2732-4d31-ad1f-cf82276af70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:46:01:31:9c:41:99:7f:f0:bd:90:9b:e6:
                    f2:3c:a4:07:e9:7b:89:48:da:a9:22:bb:05:7d:a8:
                    2e:b2:af:cc:81:3d:1f:2b:1b:b3:c4:6c:6c:d2:56:
                    5d:0a:a2:76:f8:11:55:62:34:be:29:7e:f7:7f:3b:
                    e9:87:96:00:ab:0b:a0:44:81:23:5a:81:00:19:88:
                    d9:1c:7b:ba:9f:c2:f2:25:9d:00:74:da:1a:23:8a:
                    08:18:af:63:25:40:fb:07:aa:8b:89:1e:4f:24:75:
                    f9:c5:09:30:ee:da:6e:55:ac:e7:ed:1f:37:65:00:
                    c3:d7:79:5a:bf:09:b0:f8:7b:c8:e4:11:f5:da:7a:
                    b6:7f:ce:19:ca:d7:f4:9b:01:cd:6d:23:49:49:c5:
                    d5:29:9a:f8:04:c2:fc:12:1d:52:7c:82:f6:4e:10:
                    5f:ff:49:1a:bb:ec:a4:eb:87:20:f1:10:3d:44:9a:
                    44:f6:71:dc:0e:70:2f:be:a3:2b:e5:3a:b1:a8:1f:
                    fc:61:3e:86:8f:a3:e0:5f:e2:bf:7a:b7:d8:f3:8a:
                    68:4d:c5:41:a5:aa:62:db:ee:6c:ce:ff:bc:32:be:
                    ef:da:54:6e:29:f3:51:05:ed:c7:90:dd:f4:16:3b:
                    d6:ed:8b:76:13:b2:33:f2:e7:7c:db:51:81:42:4a:
                    ea:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A7:76:80:60:76:62:CF:0E:A8:4F:11:5A:3F:68:2D:09:30:67:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d16fa0ba-f475-38f1-af2a-ff6973c2334f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:54c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ca:5b:bd:35:f0:4d:27:c0:66:c4:2c:d6:ea:78:65:f6:48:
         63:fb:ef:16:03:bf:b8:35:7d:23:3b:db:2e:c0:1b:7b:06:e6:
         51:af:88:bb:a5:c3:e1:d5:03:9c:b4:a3:76:3f:53:10:d2:38:
         51:90:38:27:25:dc:0f:a8:ee:d5:82:dd:07:b6:f6:81:39:28:
         e0:05:c3:a0:e4:1d:ca:b7:db:4c:a7:e9:54:91:39:2f:21:b0:
         98:84:d4:6d:cb:24:82:13:ec:cf:fd:32:c5:19:5d:c2:26:b2:
         d0:ad:6f:86:f0:6f:f9:81:b5:ca:84:ef:e0:04:18:85:84:8a:
         dc:58:53:2d:b6:31:31:a7:80:31:ce:82:c3:a6:9d:58:b9:cd:
         66:14:41:46:13:5a:98:54:6d:d4:01:21:66:dc:f2:e7:0b:b4:
         18:05:8d:60:64:04:21:3b:0e:72:02:95:23:63:3a:76:bd:17:
         06:42:36:3a:e6:ab:dc:d4:9c:83:e7:b9:50:40:92:6c:94:42:
         39:fa:9c:bc:b0:28:87:a5:50:ba:74:b6:8b:0d:1b:52:73:cf:
         c3:2d:b9:cc:63:dc:73:50:26:40:4a:46:3d:70:d7:de:eb:7f:
         20:43:cb:3d:a1:88:17:f1:40:34:1e:39:c5:aa:d1:31:f6:c5:
         d2:96:78:71
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEc7UwemlE43VU3fsagwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
OTgwNzA4YjQtMjczMi00ZDMxLWFkMWYtY2Y4MjI3NmFmNzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsglGATGcQZl/8L2Qm+byPKQH6XuJSNqpIrsF
fagusq/MgT0fKxuzxGxs0lZdCqJ2+BFVYjS+KX73fzvph5YAqwugRIEjWoEAGYjZ
HHu6n8LyJZ0AdNoaI4oIGK9jJUD7B6qLiR5PJHX5xQkw7tpuVazn7R83ZQDD13la
vwmw+HvI5BH12nq2f84Zytf0mwHNbSNJScXVKZr4BML8Eh1SfIL2ThBf/0kau+yk
64cg8RA9RJpE9nHcDnAvvqMr5TqxqB/8YT6Gj6PgX+K/erfY84poTcVBpapi2+5s
zv+8Mr7v2lRuKfNRBe3HkN30FjvW7Yt2E7Iz8ud821GBQkrq+wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA6ndoBgdmLPDqhPEVo/aC0JMGfSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDE2ZmEwYmEtZjQ3NS0z
OGYxLWFmMmEtZmY2OTczYzIzMzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZUwQAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFHKW7018E0nwGbELNbqeGX2SGP77xYDv7g1fSM72y7AG3sG5lGv
iLulw+HVA5y0o3Y/UxDSOFGQOCcl3A+o7tWC3Qe29oE5KOAFw6DkHcq320yn6VSR
OS8hsJiE1G3LJIIT7M/9MsUZXcImstCtb4bwb/mBtcqE7+AEGIWEitxYUy22MTGn
gDHOgsOmnVi5zWYUQUYTWphUbdQBIWbc8ucLtBgFjWBkBCE7DnIClSNjOna9FwZC
Njrmq9zUnIPnuVBAkmyUQjn6nLywKIelULp0tosNG1Jzz8Mtucxj3HNQJkBKRj1w
197rfyBDyz2hiBfxQDQeOcWq0TH2xdKWeHE=
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:10:56 2024 by rpki-client on console-ams.rpki-client.org