Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c/56aeaf20-ec02-368e-9ec5-ef94c9575cdb.roa
File:                     56aeaf20-ec02-368e-9ec5-ef94c9575cdb.roa (raw, json)
Hash identifier:          J3iRUDwYHxH03EM/bPcUK7oo2WN/g8moHe5NaXEDwGk=
Subject key identifier:   8D:5A:87:79:EF:DC:27:6F:E3:EA:2A:33:E3:94:54:95:7D:99:3A:76
Certificate issuer:       /CN=2361d86f-f922-4559-a514-d5ddeb84428c
Certificate serial:       010D0C9F432858458F387F7968CAF74ECA05D730
Authority key identifier: 07:37:78:64:26:53:54:43:8A:C3:25:C1:CB:24:3C:6B:DB:88:94:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c/56aeaf20-ec02-368e-9ec5-ef94c9575cdb.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     3356
IP address blocks:        2606:6ec0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c/2361d86f-f922-4559-a514-d5ddeb84428c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c/2361d86f-f922-4559-a514-d5ddeb84428c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:7f:79:68:ca:f7:4e:ca:05:d7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2361d86f-f922-4559-a514-d5ddeb84428c
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=8e2e794d-4160-48c3-a093-c7a0f155e1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:89:84:7e:5a:04:a0:af:35:5a:6f:c7:4b:db:
                    f9:2d:2a:47:20:c6:6f:82:fd:f3:5e:59:3d:22:e7:
                    cd:02:0d:b2:ad:7a:9d:f1:a7:20:0c:ae:03:d1:bc:
                    aa:f4:46:83:da:44:25:58:18:d7:d8:db:75:ac:86:
                    95:45:3c:4a:bc:25:11:fa:d5:fa:bb:46:89:ef:87:
                    2d:a6:48:ee:0a:50:52:42:48:d9:64:67:f6:8c:59:
                    15:32:95:f2:37:39:4e:de:ec:5a:4c:89:0e:49:0d:
                    18:8a:46:cd:36:d7:1e:21:19:6d:66:42:af:ee:6a:
                    c8:d8:25:22:ac:ba:c4:24:96:a8:7b:89:7f:fb:1f:
                    d6:43:a5:9e:a3:36:f4:2b:38:be:bb:0c:c7:6a:da:
                    bd:11:e3:06:d1:d0:6d:27:89:f0:cd:ee:fe:0a:57:
                    82:0d:19:5f:1c:e4:b3:c6:4c:51:67:d4:3b:41:10:
                    e9:9b:16:61:a8:f4:01:af:ac:e5:9d:73:8e:8a:b5:
                    3f:64:e2:40:cb:49:3a:c8:c8:ff:d7:3c:f3:f9:d1:
                    c8:4b:89:c2:d4:92:44:43:59:1e:90:4a:ff:32:59:
                    aa:ff:fd:1c:4b:92:9d:f9:1f:c6:34:54:b2:46:c2:
                    bf:11:ae:12:97:32:8a:e8:c2:a8:75:e1:61:71:e5:
                    97:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5A:87:79:EF:DC:27:6F:E3:EA:2A:33:E3:94:54:95:7D:99:3A:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c/56aeaf20-ec02-368e-9ec5-ef94c9575cdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c/2361d86f-f922-4559-a514-d5ddeb84428c.crl

            X509v3 Authority Key Identifier:
                keyid:07:37:78:64:26:53:54:43:8A:C3:25:C1:CB:24:3C:6B:DB:88:94:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:6ec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:58:f7:e6:6c:01:c1:f4:27:2a:c9:c6:17:c5:4d:a1:7e:16:
         ea:09:ef:93:65:d6:03:64:82:90:07:2d:07:66:24:4e:e3:82:
         02:b6:99:8d:31:08:c9:d7:cb:ca:43:76:0b:27:79:1c:6c:85:
         b6:68:41:5b:75:3a:6c:f1:db:3b:d6:2c:70:fe:bb:8b:fb:5f:
         0c:b5:a2:f6:19:5a:07:28:93:67:3c:e2:c2:ad:94:e3:ba:db:
         f1:4b:b3:63:37:d0:72:55:08:b9:0f:89:e1:bc:5f:93:de:c8:
         de:8f:73:ac:4f:44:ce:34:6e:9b:a4:4f:9c:cf:ae:07:31:e4:
         3c:be:d8:4d:ef:71:7f:9a:4d:f9:74:23:92:86:b9:e9:af:bc:
         d4:53:cc:d8:c7:d8:1c:ed:78:87:e3:1e:3b:0d:e3:6b:15:e8:
         a9:14:9f:bc:f0:bc:6e:bc:63:18:5c:74:7a:4d:23:db:33:bb:
         65:06:d8:77:43:f5:41:07:c5:60:62:40:16:af:31:81:70:27:
         d4:e6:f1:db:4c:a5:58:64:03:d5:c8:b5:52:3e:bc:af:c3:20:
         51:97:33:e1:9d:7d:d9:ff:62:76:80:9c:3b:cd:f7:84:ad:4f:
         82:a3:14:ae:91:d7:54:7f:b6:da:26:90:ef:27:74:79:f4:03:
         56:3f:7c:2a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEWPOH95aMr3TsoF1zAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjM2MWQ4NmYtZjkyMi00NTU5LWE1MTQtZDVkZGViODQ0
MjhjMB4XDTI0MDQxNjAxMDAyNloXDTI0MDcxNTAxMDAyNlowLzEtMCsGA1UEAxMk
OGUyZTc5NGQtNDE2MC00OGMzLWEwOTMtYzdhMGYxNTVlMWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ImEfloEoK81Wm/HS9v5LSpHIMZvgv3zXlk9
IufNAg2yrXqd8acgDK4D0byq9EaD2kQlWBjX2Nt1rIaVRTxKvCUR+tX6u0aJ74ct
pkjuClBSQkjZZGf2jFkVMpXyNzlO3uxaTIkOSQ0YikbNNtceIRltZkKv7mrI2CUi
rLrEJJaoe4l/+x/WQ6Weozb0Kzi+uwzHatq9EeMG0dBtJ4nwze7+CleCDRlfHOSz
xkxRZ9Q7QRDpmxZhqPQBr6zlnXOOirU/ZOJAy0k6yMj/1zzz+dHIS4nC1JJEQ1ke
kEr/Mlmq//0cS5Kd+R/GNFSyRsK/Ea4SlzKK6MKodeFhceWXmwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFI1ah3nv3Cdv4+oqM+OUVJV9mTp2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yMzYx
ZDg2Zi1mOTIyLTQ1NTktYTUxNC1kNWRkZWI4NDQyOGMvNTZhZWFmMjAtZWMwMi0z
NjhlLTllYzUtZWY5NGM5NTc1Y2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjM2MWQ4NmYtZjkyMi00NTU5LWE1
MTQtZDVkZGViODQ0MjhjLzIzNjFkODZmLWY5MjItNDU1OS1hNTE0LWQ1ZGRlYjg0
NDI4Yy5jcmwwHwYDVR0jBBgwFoAUBzd4ZCZTVEOKwyXByyQ8a9uIlF0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yMzYxZDg2Zi1mOTIyLTQ1NTktYTUxNC1kNWRk
ZWI4NDQyOGMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgZuwDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQASWPfmbAHB9CcqycYXxU2hfhbqCe+TZdYDZIKQBy0HZiRO44ICtpmN
MQjJ18vKQ3YLJ3kcbIW2aEFbdTps8ds71ixw/ruL+18MtaL2GVoHKJNnPOLCrZTj
utvxS7NjN9ByVQi5D4nhvF+T3sjej3OsT0TONG6bpE+cz64HMeQ8vthN73F/mk35
dCOShrnpr7zUU8zYx9gc7XiH4x47DeNrFeipFJ+88LxuvGMYXHR6TSPbM7tlBth3
Q/VBB8VgYkAWrzGBcCfU5vHbTKVYZAPVyLVSPryvwyBRlzPhnX3Z/2J2gJw7zfeE
rU+CoxSukddUf7baJpDvJ3R59ANWP3wq
-----END CERTIFICATE-----
Generated at Tue Apr 23 18:41:53 2024 by rpki-client on console-fra.rpki-client.org