Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fe47bcf-2a21-34a5-9b4b-ca5c3096cc43.roa
File:                     2fe47bcf-2a21-34a5-9b4b-ca5c3096cc43.roa (raw, json)
Hash identifier:          R+U/2okG9q+kPYlRsxTlRaQRIj9lnwxl8hnxXD8kBI8=
Subject key identifier:   B8:9F:67:A5:36:F1:E4:3C:7A:94:1B:34:73:6A:A8:2B:88:73:C3:14
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847DF2F4DED3FA40FD22814F800
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fe47bcf-2a21-34a5-9b4b-ca5c3096cc43.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        2001:56b:500c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:4d:ed:3f:a4:0f:d2:28:14:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=3598160f-ad36-44c3-944b-d457b801c773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:86:f3:e1:8e:6b:3f:99:0f:c2:c2:4e:84:e8:
                    58:96:33:c4:fb:13:06:d1:37:9b:6a:65:78:2d:db:
                    f9:8d:37:c5:01:8e:dc:64:ee:dd:29:d4:a7:95:f9:
                    16:f6:6b:54:dc:df:8d:3b:1a:19:ef:1f:3e:2c:78:
                    4a:dc:38:6c:cf:94:b9:fe:28:2d:e4:5a:d0:b2:8e:
                    49:86:5b:08:81:67:28:7c:09:c1:96:b8:bd:32:cb:
                    48:6f:33:ee:49:0f:4b:8d:bc:7c:eb:5c:54:99:c6:
                    2f:ed:cf:2b:31:df:a3:d0:8f:d9:fc:66:1e:92:ac:
                    6e:a4:a2:b7:90:50:d1:96:83:07:02:89:f3:e8:7e:
                    78:b2:ed:10:e4:e3:ed:ab:f9:2e:25:97:fa:f8:da:
                    54:82:96:f5:29:56:3b:e1:77:1e:e2:3a:46:d0:99:
                    30:2a:f8:b5:f1:5a:ea:57:e4:5f:c6:42:51:ba:2d:
                    23:dc:61:03:98:75:b9:cd:13:b1:14:ea:d9:97:83:
                    29:7d:d7:95:4d:5d:3e:93:84:20:fe:93:fd:b5:79:
                    63:f5:36:53:80:9d:5b:a7:ef:bd:92:6f:04:e8:d3:
                    99:ca:6c:d8:af:90:03:01:18:13:10:17:a0:2a:d9:
                    1b:e4:6b:32:c5:e3:7d:c4:e4:9e:68:9d:7f:c3:36:
                    c2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9F:67:A5:36:F1:E4:3C:7A:94:1B:34:73:6A:A8:2B:88:73:C3:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2fe47bcf-2a21-34a5-9b4b-ca5c3096cc43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:56b:500c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ec:26:3f:d6:25:69:17:60:36:34:72:0f:30:f6:f3:b6:b6:4c:
         76:ba:4d:91:b0:9a:5c:50:fb:ff:bf:15:ba:4a:75:a4:c0:f6:
         ab:78:e9:1a:de:36:d5:81:a2:bf:39:ba:50:16:ea:be:9b:c6:
         81:34:c2:d7:f5:e3:69:87:a4:5b:22:e9:a5:ff:e3:33:54:a6:
         2d:eb:66:b9:74:98:ea:f0:1e:cf:9e:f9:e3:e0:99:5b:81:64:
         73:90:dc:b1:77:e6:2d:4c:7e:32:c9:ef:19:d0:5e:8b:46:68:
         cb:c4:e0:be:7b:00:e4:63:11:aa:7e:a2:12:c3:91:8e:4a:90:
         f6:ec:78:aa:1d:4a:c0:0c:cf:24:15:b8:25:0b:f4:2e:7d:01:
         27:21:1c:c7:ab:c7:a8:c2:d2:71:dd:56:c2:30:1f:46:8a:d4:
         c6:00:f8:e4:3b:cc:75:31:d9:3f:05:71:78:11:67:2b:8b:19:
         c6:d6:8f:b9:e1:48:09:bc:1e:00:5d:ca:e3:4f:ae:25:29:8a:
         b5:22:91:66:fe:e0:45:59:8c:59:5b:05:0e:4e:51:b9:28:6c:
         7b:48:81:be:4a:bf:d8:ee:1b:7a:a6:2c:d6:c4:f6:b6:83:8a:
         ee:0c:32:a0:a0:cd:f2:eb:44:67:9d:4c:45:f7:13:77:fb:ae:
         9a:c0:cd:5b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEffL03tP6QP0igU+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk
MzU5ODE2MGYtYWQzNi00NGMzLTk0NGItZDQ1N2I4MDFjNzczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4bz4Y5rP5kPwsJOhOhYljPE+xMG0TebamV4
Ldv5jTfFAY7cZO7dKdSnlfkW9mtU3N+NOxoZ7x8+LHhK3Dhsz5S5/igt5FrQso5J
hlsIgWcofAnBlri9MstIbzPuSQ9Ljbx861xUmcYv7c8rMd+j0I/Z/GYekqxupKK3
kFDRloMHAonz6H54su0Q5OPtq/kuJZf6+NpUgpb1KVY74Xce4jpG0JkwKvi18Vrq
V+RfxkJRui0j3GEDmHW5zROxFOrZl4MpfdeVTV0+k4Qg/pP9tXlj9TZTgJ1bp++9
km8E6NOZymzYr5ADARgTEBegKtkb5GsyxeN9xOSeaJ1/wzbCcwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLifZ6U28eQ8epQbNHNqqCuIc8MUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMmZlNDdiY2YtMmEyMS0z
NGE1LTliNGItY2E1YzMwOTZjYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFa1AM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAOwmP9YlaRdgNjRyDzD287a2THa6TZGwmlxQ+/+/FbpKdaTA9qt4
6RreNtWBor85ulAW6r6bxoE0wtf142mHpFsi6aX/4zNUpi3rZrl0mOrwHs+e+ePg
mVuBZHOQ3LF35i1MfjLJ7xnQXotGaMvE4L57AORjEap+ohLDkY5KkPbseKodSsAM
zyQVuCUL9C59ASchHMerx6jC0nHdVsIwH0aK1MYA+OQ7zHUx2T8FcXgRZyuLGcbW
j7nhSAm8HgBdyuNPriUpirUikWb+4EVZjFlbBQ5OUbkobHtIgb5Kv9juG3qmLNbE
9raDiu4MMqCgzfLrRGedTEX3E3f7rprAzVs=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:32 2024 by rpki-client on console-ams.rpki-client.org