Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ba8b121c-e521-3b94-85dd-d50459da2ef0.roa
File:                     ba8b121c-e521-3b94-85dd-d50459da2ef0.roa (raw, json)
Hash identifier:          fYd0dqajvcTbEQ917E8W5b3KnA71ujgquaGui1ayqqg=
Subject key identifier:   BD:36:6E:BE:77:8A:45:72:FB:47:F1:DC:DC:C3:FD:34:3A:96:5C:2D
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285847D6CF41EBF32FBBD0554AEB00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ba8b121c-e521-3b94-85dd-d50459da2ef0.roa
Signing time:             Mon 11 Nov 2024 02:00:27 +0000
ROA not before:           Mon 11 Nov 2024 02:00:27 +0000
ROA not after:            Sun 09 Feb 2025 02:00:27 +0000
asID:                     852
IP address blocks:        2001:569:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:cf:41:eb:f3:2f:bb:d0:55:4a:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov 11 02:00:27 2024 GMT
            Not After : Feb  9 02:00:27 2025 GMT
        Subject: CN=4abb89d4-79f4-4163-903b-32b547c0f292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e1:7e:24:58:5a:03:47:5f:f4:68:30:a3:d3:
                    e1:26:46:f8:e0:32:b6:bc:0c:f4:49:2d:17:f1:6c:
                    40:88:86:a4:55:59:06:31:7b:42:9f:ae:93:f2:d1:
                    04:af:48:26:2a:69:8e:0a:52:39:e6:9e:4e:f7:38:
                    56:fe:48:60:ff:20:bc:c5:25:ae:29:92:09:be:7a:
                    3d:bb:6e:40:18:6c:14:41:de:94:67:e3:9c:da:59:
                    f6:1e:2e:d3:a8:ba:d5:67:36:8d:f3:2e:f3:0c:b8:
                    d2:dd:77:64:80:72:75:79:80:51:ff:6a:49:e2:78:
                    00:5b:07:f3:98:b3:d8:c1:a0:d6:d9:21:02:d2:24:
                    13:7f:7f:38:9b:7d:bc:c7:91:20:d3:ab:82:2a:51:
                    c6:93:e0:3b:f1:85:f4:ad:cf:14:07:d4:0b:09:73:
                    34:13:fc:66:21:3c:41:78:d9:25:76:45:ea:07:69:
                    12:56:20:f2:fd:84:54:06:b5:d7:1a:a3:9b:f0:44:
                    aa:a7:64:06:53:e7:d1:3f:9c:c4:27:cf:0b:de:a8:
                    04:a9:c4:93:75:38:30:f2:30:2f:fc:5d:88:b2:78:
                    55:81:f6:07:a0:ff:e6:96:98:b0:f7:54:ff:82:d5:
                    c5:18:1a:b7:b1:e7:04:ce:65:ab:b4:1d:3d:7b:ac:
                    3a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:36:6E:BE:77:8A:45:72:FB:47:F1:DC:DC:C3:FD:34:3A:96:5C:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ba8b121c-e521-3b94-85dd-d50459da2ef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:569:8000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:96:71:05:1a:8f:9f:45:5c:6b:0f:13:e0:55:6b:b8:21:90:
         6e:52:a8:3d:c5:a9:fa:01:bc:92:75:b4:3c:bb:f1:79:85:04:
         cd:cf:90:1c:ee:3c:b6:92:83:64:23:50:a1:9e:b6:c0:f2:dc:
         17:41:ad:d8:70:86:a8:f7:a6:a0:cb:63:56:7a:4c:b2:cb:e7:
         c3:ca:02:49:a2:90:ec:87:3f:59:47:f7:0c:09:77:59:86:50:
         43:d6:fe:cc:56:2e:17:4b:f8:7a:04:a3:45:55:7f:84:6f:58:
         e1:8b:43:e0:3f:61:f6:52:36:ad:05:58:96:d0:49:bc:ad:1d:
         a9:22:84:47:87:f4:aa:84:7b:fc:f2:bf:f9:1f:f7:4e:ae:78:
         84:8a:46:c7:b5:ac:f8:7b:d2:35:5d:8e:4d:b1:50:b6:eb:b1:
         4d:3e:ce:ab:8a:3c:43:6b:4e:d9:ef:89:05:44:20:15:6e:86:
         74:42:bf:10:73:95:60:bd:0d:bb:72:51:88:ed:20:6d:28:17:
         58:c9:7e:00:f5:24:d1:66:2f:2d:75:ed:d4:5a:0e:62:09:35:
         e4:60:c4:9c:17:fa:d0:cb:2a:8e:24:f0:70:88:42:d8:6d:ef:
         24:76:24:3b:06:a9:b1:e3:f5:1d:d7:d6:04:69:3f:e1:d3:ee:
         29:04:17:86
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEfWz0Hr8y+70FVK6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI0MTExMTAyMDAyN1oXDTI1MDIwOTAyMDAyN1owLzEtMCsGA1UEAxMk
NGFiYjg5ZDQtNzlmNC00MTYzLTkwM2ItMzJiNTQ3YzBmMjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOF+JFhaA0df9Ggwo9PhJkb44DK2vAz0SS0X
8WxAiIakVVkGMXtCn66T8tEEr0gmKmmOClI55p5O9zhW/khg/yC8xSWuKZIJvno9
u25AGGwUQd6UZ+Oc2ln2Hi7TqLrVZzaN8y7zDLjS3XdkgHJ1eYBR/2pJ4ngAWwfz
mLPYwaDW2SEC0iQTf384m328x5Eg06uCKlHGk+A78YX0rc8UB9QLCXM0E/xmITxB
eNkldkXqB2kSViDy/YRUBrXXGqOb8ESqp2QGU+fRP5zEJ88L3qgEqcSTdTgw8jAv
/F2IsnhVgfYHoP/mlpiw91T/gtXFGBq3secEzmWrtB09e6w6wwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFL02br53ikVy+0fx3NzD/TQ6llwtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmE4YjEyMWMtZTUyMS0z
Yjk0LTg1ZGQtZDUwNDU5ZGEyZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGIAEFaYAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAyZZxBRqPn0Vcaw8T4FVruCGQblKoPcWp+gG8knW0PLvxeYUEzc+Q
HO48tpKDZCNQoZ62wPLcF0Gt2HCGqPemoMtjVnpMssvnw8oCSaKQ7Ic/WUf3DAl3
WYZQQ9b+zFYuF0v4egSjRVV/hG9Y4YtD4D9h9lI2rQVYltBJvK0dqSKER4f0qoR7
/PK/+R/3Tq54hIpGx7Ws+HvSNV2OTbFQtuuxTT7Oq4o8Q2tO2e+JBUQgFW6GdEK/
EHOVYL0Nu3JRiO0gbSgXWMl+APUk0WYvLXXt1FoOYgk15GDEnBf60MsqjiTwcIhC
2G3vJHYkOwapseP1HdfWBGk/4dPuKQQXhg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:04:12 2024 by rpki-client on console-ams.rpki-client.org