Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2740fb72-0304-3239-8c60-f530c0e4f8ca.roa
File:                     2740fb72-0304-3239-8c60-f530c0e4f8ca.roa (raw, json)
Hash identifier:          OvRdkAi0gFNyJ0GVDzm8INe+9gT+3a7oZXnxb9eB5hg=
Subject key identifier:   4B:D7:F6:BE:AF:B2:31:7B:38:9A:83:39:22:02:0C:E5:FA:80:2F:36
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285845347D4A335E1477EC49FD0140
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2740fb72-0304-3239-8c60-f530c0e4f8ca.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     852
IP address blocks:        2001:56b:5ff0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:4a:33:5e:14:77:ec:49:fd:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=51cff5fd-919d-4cab-b8d5-d8676831845f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:21:04:d1:5d:23:44:bb:6c:7f:03:72:7c:
                    c2:71:1b:d5:63:b8:fe:aa:27:e7:ea:85:84:b1:40:
                    ca:1a:2d:33:63:b3:07:65:84:dd:d6:ec:07:93:82:
                    60:8d:5c:df:cf:74:ff:5c:bf:15:19:5a:ed:8e:96:
                    dd:f8:28:bc:0e:90:46:63:59:67:fe:28:ef:72:18:
                    40:79:19:57:4a:45:fb:07:0c:aa:62:0b:ce:e2:8a:
                    52:fb:19:ce:b0:dd:bb:90:05:bc:fb:1d:89:64:a1:
                    53:25:06:ce:c0:81:45:85:bd:69:b1:fa:5f:3c:a2:
                    7f:b4:ef:43:7f:22:59:89:4d:80:29:1e:0c:27:15:
                    a4:05:cc:56:97:5c:0e:7b:35:b8:ab:4f:f5:bf:3f:
                    66:36:a7:5d:30:44:25:b7:17:02:4d:87:a5:7c:37:
                    6e:ff:ef:8e:61:aa:82:69:41:d1:e2:07:cf:d7:f3:
                    36:21:50:42:8b:fd:17:fa:05:09:7a:dc:0b:c1:32:
                    e1:fc:69:89:15:85:fc:d7:8d:a1:df:b6:ee:d4:a8:
                    69:72:6b:ba:56:2b:06:c7:69:2f:c9:bd:7c:b2:1f:
                    5b:37:a4:03:26:e1:ba:57:e8:04:13:d3:4a:ab:18:
                    5f:b7:f3:35:ea:0d:e8:67:00:62:60:c9:03:2d:dd:
                    3c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D7:F6:BE:AF:B2:31:7B:38:9A:83:39:22:02:0C:E5:FA:80:2F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2740fb72-0304-3239-8c60-f530c0e4f8ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:5ff0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:ef:f6:87:d3:15:6d:56:a2:bf:2f:9d:5b:a0:0b:84:3c:ef:
         0d:25:08:70:12:90:a0:69:d0:26:37:2b:44:30:71:f5:c0:81:
         4f:b7:b0:af:15:0a:c2:e2:5e:e5:63:16:f8:5b:4c:fc:62:6d:
         ef:ec:31:0f:df:55:e3:12:ea:16:00:52:f6:d1:eb:fe:d5:2d:
         8f:74:b3:78:60:d2:d6:9e:71:b1:05:1c:96:09:6d:09:78:3f:
         d5:5f:e5:95:41:4e:7b:7f:02:0a:26:c5:af:a1:55:06:fd:f6:
         95:ae:15:36:e2:47:14:e2:fe:62:3e:85:dc:1c:c3:5e:1b:32:
         ac:a6:af:b4:c5:17:01:06:ae:75:ee:d1:b7:db:e9:e3:a6:6b:
         42:01:28:6c:b7:0e:6f:4b:40:14:35:57:2d:0f:d9:b9:0c:7e:
         08:c1:89:d2:a6:aa:77:de:5e:99:be:f1:67:9e:50:66:d2:c4:
         99:09:b7:4f:eb:a8:7a:eb:62:9f:b1:f1:93:66:5b:20:63:4b:
         d4:92:ea:77:5f:0c:9b:df:a4:28:2a:5c:5e:47:7a:31:bf:3b:
         4b:c3:99:f2:1a:5f:89:70:5d:e2:66:b0:fd:43:25:a6:8f:30:
         2c:52:e4:02:96:2b:85:90:51:85:17:18:ab:f2:ef:95:af:c5:
         0e:26:c9:f2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEU0fUozXhR37En9AUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MDMxNDEzMDAzMFoXDTI0MDYxMjEzMDAzMFowLzEtMCsGA1UEAxMk
NTFjZmY1ZmQtOTE5ZC00Y2FiLWI4ZDUtZDg2NzY4MzE4NDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7shBNFdI0S7bH8DcnzCcRvVY7j+qifn6oWE
sUDKGi0zY7MHZYTd1uwHk4JgjVzfz3T/XL8VGVrtjpbd+Ci8DpBGY1ln/ijvchhA
eRlXSkX7BwyqYgvO4opS+xnOsN27kAW8+x2JZKFTJQbOwIFFhb1psfpfPKJ/tO9D
fyJZiU2AKR4MJxWkBcxWl1wOezW4q0/1vz9mNqddMEQltxcCTYelfDdu/++OYaqC
aUHR4gfP1/M2IVBCi/0X+gUJetwLwTLh/GmJFYX8142h37bu1Khpcmu6VisGx2kv
yb18sh9bN6QDJuG6V+gEE9NKqxhft/M16g3oZwBiYMkDLd08hwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEvX9r6vsjF7OJqDOSICDOX6gC82MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMjc0MGZiNzItMDMwNC0z
MjM5LThjNjAtZjUzMGMwZTRmOGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFa1/w
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKjv9ofTFW1Wor8vnVugC4Q87w0lCHASkKBp0CY3K0QwcfXAgU+3
sK8VCsLiXuVjFvhbTPxibe/sMQ/fVeMS6hYAUvbR6/7VLY90s3hg0taecbEFHJYJ
bQl4P9Vf5ZVBTnt/Agomxa+hVQb99pWuFTbiRxTi/mI+hdwcw14bMqymr7TFFwEG
rnXu0bfb6eOma0IBKGy3Dm9LQBQ1Vy0P2bkMfgjBidKmqnfeXpm+8WeeUGbSxJkJ
t0/rqHrrYp+x8ZNmWyBjS9SS6ndfDJvfpCgqXF5HejG/O0vDmfIaX4lwXeJmsP1D
JaaPMCxS5AKWK4WQUYUXGKvy75WvxQ4myfI=
-----END CERTIFICATE-----
Generated at Sat May 25 06:27:20 2024 by rpki-client on console-fra.rpki-client.org