Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2078086f-74b2-34d0-95c6-a0b2601bbac8.roa
File:                     2078086f-74b2-34d0-95c6-a0b2601bbac8.roa (raw, json)
Hash identifier:          /uQE1DIMNJfnL3DyUsedpmHICHlQiyjOLSLMyLskPnA=
Subject key identifier:   D9:F4:98:C9:7F:41:E1:F4:1E:A3:DB:91:FB:DD:24:1A:85:F9:DB:75
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B35B6069E421BAD92C747580
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2078086f-74b2-34d0-95c6-a0b2601bbac8.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     852
IP address blocks:        2001:56a:6f60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:60:69:e4:21:ba:d9:2c:74:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=c6208136-af10-4e75-88f9-ac074a27c178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:eb:1d:90:73:d4:56:64:b0:7c:c8:ca:56:96:
                    9c:87:1d:6d:fc:33:f4:67:ab:18:ba:2e:a0:c3:b7:
                    d9:31:0c:2c:fe:0d:fb:3e:b3:a3:94:fc:1e:13:d0:
                    c5:6e:92:86:04:ed:51:d9:9f:cb:68:33:36:9f:53:
                    a8:8d:b8:d5:b5:73:36:5b:4d:30:3c:43:35:73:bd:
                    96:33:31:a7:ba:93:3a:42:bc:2f:16:92:3d:14:a8:
                    37:ab:90:90:f0:28:59:1d:fc:f4:fc:fa:fd:e6:af:
                    cc:79:fd:4a:af:66:34:9f:36:97:09:65:1c:3c:2f:
                    25:95:4f:cc:c4:cb:6d:80:73:7a:b5:0e:cd:0b:b3:
                    55:c0:9f:c8:47:44:03:df:f6:ab:27:9b:12:fd:3a:
                    18:29:3a:36:df:34:32:9f:4c:de:58:e7:00:f9:a7:
                    94:7c:06:5c:17:b6:09:75:1d:e1:7f:d2:34:71:20:
                    0f:a0:0a:9e:fb:5b:08:17:80:1f:3c:d4:4c:2f:d0:
                    42:4d:05:3d:be:88:26:33:75:ba:ef:96:e1:50:5c:
                    e5:6e:3f:7a:90:24:c0:d7:57:ab:ce:a8:12:39:13:
                    d7:2f:03:03:c8:49:6d:6f:5d:ac:87:af:fb:6a:72:
                    1b:68:a1:0b:bb:97:dc:91:3d:59:50:ac:a4:99:6b:
                    4a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F4:98:C9:7F:41:E1:F4:1E:A3:DB:91:FB:DD:24:1A:85:F9:DB:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2078086f-74b2-34d0-95c6-a0b2601bbac8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56a:6f60::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:dd:78:ac:6b:57:b6:ba:4c:ef:e6:88:9c:ec:75:09:4b:ea:
         e4:9b:41:c9:ab:ba:59:d5:46:33:98:da:ce:46:c7:93:02:bd:
         3b:87:43:b3:e4:0d:37:cd:a4:c4:16:a4:ed:67:16:60:be:f9:
         c7:43:fd:65:da:ff:62:cd:96:22:18:4d:0b:2b:92:5b:ac:3a:
         ae:87:71:b0:ff:63:54:66:19:5d:4b:c2:53:f3:19:80:17:d0:
         2e:11:5a:af:d2:d9:ce:b0:c6:45:a9:3b:6c:c4:62:b2:39:e2:
         43:23:12:de:30:66:6b:53:23:7c:b5:ff:7d:d1:39:eb:17:05:
         3d:3f:fa:65:fc:a4:bf:c6:d4:ef:7b:d5:98:db:a8:50:f6:46:
         b0:f9:2e:f9:bd:63:27:55:87:ad:92:9b:f2:11:3a:be:22:9c:
         11:ca:e4:d2:23:bd:5f:38:af:66:0f:bd:9e:ef:1f:2d:5a:53:
         a4:3b:b5:e9:13:b3:06:0c:99:7d:d5:1f:dd:5b:4b:39:96:fc:
         0f:d0:5b:0f:7e:eb:f3:0c:8f:9b:e4:c5:9b:09:c4:c7:d0:80:
         cd:05:83:e7:5e:a6:3b:38:5a:a4:0e:a9:e7:87:05:e5:0a:71:
         e7:c2:29:e2:c4:87:76:98:b0:b6:9b:f3:18:ee:8d:e0:ff:9d:
         54:aa:f4:a0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEizW2Bp5CG62Sx0dYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk
YzYyMDgxMzYtYWYxMC00ZTc1LTg4ZjktYWMwNzRhMjdjMTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmusdkHPUVmSwfMjKVpachx1t/DP0Z6sYui6g
w7fZMQws/g37PrOjlPweE9DFbpKGBO1R2Z/LaDM2n1OojbjVtXM2W00wPEM1c72W
MzGnupM6QrwvFpI9FKg3q5CQ8ChZHfz0/Pr95q/Mef1Kr2Y0nzaXCWUcPC8llU/M
xMttgHN6tQ7NC7NVwJ/IR0QD3/arJ5sS/ToYKTo23zQyn0zeWOcA+aeUfAZcF7YJ
dR3hf9I0cSAPoAqe+1sIF4AfPNRML9BCTQU9vogmM3W675bhUFzlbj96kCTA11er
zqgSORPXLwMDyEltb12sh6/7anIbaKELu5fckT1ZUKykmWtK9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNn0mMl/QeH0HqPbkfvdJBqF+dt1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjA3ODA4NmYtNzRiMi0z
NGQwLTk1YzYtYTBiMjYwMWJiYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFam9g
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADDdeKxrV7a6TO/miJzsdQlL6uSbQcmrulnVRjOY2s5Gx5MCvTuH
Q7PkDTfNpMQWpO1nFmC++cdD/WXa/2LNliIYTQsrklusOq6HcbD/Y1RmGV1LwlPz
GYAX0C4RWq/S2c6wxkWpO2zEYrI54kMjEt4wZmtTI3y1/33ROesXBT0/+mX8pL/G
1O971ZjbqFD2RrD5Lvm9YydVh62Sm/IROr4inBHK5NIjvV84r2YPvZ7vHy1aU6Q7
tekTswYMmX3VH91bSzmW/A/QWw9+6/MMj5vkxZsJxMfQgM0Fg+depjs4WqQOqeeH
BeUKcefCKeLEh3aYsLab8xjujeD/nVSq9KA=
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:43 2025 by rpki-client