Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0505573b-5831-3c0b-982e-0eaf2f92c2a8.roa
File:                     0505573b-5831-3c0b-982e-0eaf2f92c2a8.roa (raw, json)
Hash identifier:          nf0wIeZPe8O30a+OR+9nwJW7gym+RmPprUNyFP0hvlk=
Subject key identifier:   1B:A5:23:EF:80:D8:2A:35:16:9C:D1:E0:88:D1:43:BB:1E:B2:B5:4D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004AB77C47BE2084B13E26C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0505573b-5831-3c0b-982e-0eaf2f92c2a8.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33657
IP address blocks:        2001:559:c0db::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:b7:7c:47:be:20:84:b1:3e:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=37d32646-911d-422f-ae72-e2c10e28c447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8a:30:18:c3:9e:57:1a:e8:43:1a:a3:ad:f2:
                    c7:bd:cf:e8:fb:2f:1e:14:09:08:0c:37:a6:19:bf:
                    a4:07:df:d8:46:69:e8:9b:6e:d1:2c:ff:11:eb:a3:
                    db:dc:35:d7:7b:e5:68:48:e3:a8:bd:0b:5e:6e:6d:
                    45:ca:64:33:8d:b5:91:a2:b7:8a:46:b6:e2:0c:c6:
                    17:05:05:33:a8:09:95:2c:a1:fe:3a:6d:78:8c:82:
                    0a:b6:14:ba:57:a7:97:79:bb:03:e0:ad:5b:60:16:
                    60:7f:65:7a:c6:4a:d9:64:a3:48:34:5a:ed:0c:e2:
                    8e:da:cc:a7:c0:22:6a:59:f8:1a:f7:8f:b7:97:30:
                    8e:fd:a9:a8:90:91:6a:f4:b5:ef:98:41:d2:be:5d:
                    42:af:63:d4:1b:37:ca:f8:5e:a4:b2:c8:c3:0a:33:
                    03:c7:0d:b9:87:8a:af:ff:a4:c8:15:90:78:e4:8c:
                    6b:5c:ce:e8:86:60:81:ee:ac:6f:58:eb:51:d4:e5:
                    de:7a:61:6e:b1:52:1a:74:1a:54:5b:ad:f6:0d:a7:
                    87:15:6f:bc:8d:cc:c4:24:05:58:a5:b8:b1:f5:94:
                    00:2f:5c:e1:fc:4a:5f:eb:19:1f:c2:84:c9:2c:07:
                    3a:a5:71:cf:45:e7:00:2d:ff:ea:34:e2:ac:d6:09:
                    b3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A5:23:EF:80:D8:2A:35:16:9C:D1:E0:88:D1:43:BB:1E:B2:B5:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0505573b-5831-3c0b-982e-0eaf2f92c2a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c0db::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:55:34:be:d5:05:1a:31:3d:a1:aa:cb:bc:f5:26:98:35:a0:
         9e:30:89:11:d1:6a:28:42:04:46:8e:83:fa:a5:00:9f:a2:5a:
         7a:7c:3d:60:0b:cd:c8:bb:7b:c8:92:8c:39:4e:02:62:1c:ca:
         21:66:9b:af:67:f8:0f:18:87:20:e3:dd:d1:a4:fa:45:40:c1:
         26:9e:a0:c3:42:42:74:dd:b3:1d:a2:ee:36:13:ef:34:e6:70:
         d4:d6:ef:ac:21:75:6d:15:04:38:ea:71:d2:3e:b4:f1:72:cd:
         19:92:41:76:06:f6:f4:17:71:7c:a7:b8:49:95:26:ab:72:73:
         3f:89:f5:51:23:ec:31:d8:1d:f6:b3:42:28:2e:a5:74:00:2b:
         52:1d:c4:12:f2:00:9a:d2:a8:48:8d:66:dd:d5:ed:6b:35:1b:
         31:51:b5:58:0b:29:1b:5b:0d:1f:6c:41:84:a1:a5:08:17:6c:
         69:d3:0e:ec:ef:c9:9f:6b:28:0f:80:5c:71:66:20:d3:62:15:
         ed:00:24:58:59:c9:82:f9:c5:7f:23:81:68:2b:c3:ac:4b:d5:
         f2:23:2b:8e:4f:a7:45:df:2f:b6:60:12:65:0d:91:49:22:cb:
         2d:f3:ba:db:2c:67:1b:44:84:7b:24:8b:f8:6e:72:bd:ec:28:
         ce:48:75:65
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYASrd8R74ghLE+JsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
MzdkMzI2NDYtOTExZC00MjJmLWFlNzItZTJjMTBlMjhjNDQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoowGMOeVxroQxqjrfLHvc/o+y8eFAkIDDem
Gb+kB9/YRmnom27RLP8R66Pb3DXXe+VoSOOovQtebm1FymQzjbWRoreKRrbiDMYX
BQUzqAmVLKH+Om14jIIKthS6V6eXebsD4K1bYBZgf2V6xkrZZKNINFrtDOKO2syn
wCJqWfga94+3lzCO/amokJFq9LXvmEHSvl1Cr2PUGzfK+F6kssjDCjMDxw25h4qv
/6TIFZB45IxrXM7ohmCB7qxvWOtR1OXeemFusVIadBpUW632DaeHFW+8jczEJAVY
pbix9ZQAL1zh/Epf6xkfwoTJLAc6pXHPRecALf/qNOKs1gmzUQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBulI++A2Co1FpzR4IjRQ7sesrVNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDUwNTU3M2ItNTgzMS0z
YzBiLTk4MmUtMGVhZjJmOTJjMmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcDb
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKJVNL7VBRoxPaGqy7z1Jpg1oJ4wiRHRaihCBEaOg/qlAJ+iWnp8
PWALzci7e8iSjDlOAmIcyiFmm69n+A8YhyDj3dGk+kVAwSaeoMNCQnTdsx2i7jYT
7zTmcNTW76whdW0VBDjqcdI+tPFyzRmSQXYG9vQXcXynuEmVJqtycz+J9VEj7DHY
HfazQigupXQAK1IdxBLyAJrSqEiNZt3V7Ws1GzFRtVgLKRtbDR9sQYShpQgXbGnT
DuzvyZ9rKA+AXHFmINNiFe0AJFhZyYL5xX8jgWgrw6xL1fIjK45Pp0XfL7ZgEmUN
kUkiyy3zutssZxtEhHski/hucr3sKM5IdWU=
-----END CERTIFICATE-----
Generated at Sat Jun 8 01:39:41 2024 by rpki-client on console-fra.rpki-client.org