Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18d6b46b-d161-3a98-a9f5-a9f63fd455a4.roa
File:                     18d6b46b-d161-3a98-a9f5-a9f63fd455a4.roa (raw, json)
Hash identifier:          /kRlDJcLqBLdg74sWqBg/eedJmx7z38iM2EAxAV5LHc=
Subject key identifier:   28:BD:66:7E:ED:50:11:A9:A7:68:77:6D:71:9A:FD:6B:7F:DA:C8:E5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B3208C80196659B01C500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18d6b46b-d161-3a98-a9f5-a9f63fd455a4.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33661
IP address blocks:        2001:559:135::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:32:08:c8:01:96:65:9b:01:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=13282280-b69f-426c-8a57-38a877010f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4d:a1:db:f2:16:be:ca:a9:a8:d9:3f:1a:3c:
                    cd:95:ed:28:2a:bc:74:ad:11:3f:a1:ce:45:8a:9c:
                    39:0d:d1:a6:3c:b0:e6:3d:b1:4d:4e:f2:30:2f:47:
                    91:49:a3:55:d4:83:86:35:cf:ac:12:45:94:74:ab:
                    d3:1e:e1:ea:35:bd:86:73:60:b2:b3:d9:5f:ad:23:
                    8b:55:80:3b:6f:bf:39:16:34:b3:0e:a0:9c:5d:42:
                    92:9f:16:48:85:66:30:f2:8e:92:01:bf:51:70:27:
                    fd:12:57:f0:94:48:29:15:ae:b2:82:0f:23:42:37:
                    1f:d2:c6:52:4a:8b:f5:70:39:b2:11:68:e1:0e:57:
                    7c:fc:9f:61:ce:f7:29:3f:b3:7e:86:b2:f5:72:65:
                    20:64:28:ed:c4:cf:0b:de:09:2a:1f:04:6e:4f:b9:
                    aa:e3:4d:0a:66:61:a9:4d:be:86:04:ec:f0:dd:c9:
                    90:28:fe:0e:dc:e7:7a:18:09:de:24:1a:98:b2:6b:
                    24:3b:46:e4:17:b0:20:67:40:c2:14:ca:19:a3:d5:
                    2c:30:5b:1e:58:0b:83:00:e6:f7:ed:4d:54:f9:1e:
                    f2:14:41:b5:69:1d:d7:53:d5:f6:98:70:2f:71:8e:
                    a1:ff:b6:18:09:13:25:1b:1e:bc:29:a9:07:71:47:
                    d4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BD:66:7E:ED:50:11:A9:A7:68:77:6D:71:9A:FD:6B:7F:DA:C8:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18d6b46b-d161-3a98-a9f5-a9f63fd455a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:eb:78:35:24:4f:9b:25:a8:a7:23:69:04:c1:5a:46:77:37:
         47:ed:70:e4:08:45:69:9b:2c:06:71:c3:b5:53:79:01:fe:58:
         74:bd:e2:b5:be:a9:82:80:0d:6c:e7:1a:1a:cd:e1:b9:97:bf:
         91:3c:e2:f2:c1:10:b0:89:be:ff:57:6d:1f:7c:fe:63:5e:0e:
         9f:99:c0:43:6e:8a:71:18:15:01:64:2c:2b:f1:95:b8:1a:f3:
         73:dd:69:ad:6e:c2:7c:12:6f:11:80:c6:9d:45:ab:6a:9b:9f:
         16:22:0c:a8:86:87:ce:a5:25:c0:0f:bd:bb:0a:71:e2:c4:b4:
         ec:15:9c:bf:58:5d:40:a2:38:66:8c:d9:14:ac:8e:c5:c4:9f:
         da:03:5f:a9:1f:cd:36:5f:96:f1:14:ca:3e:d0:ae:13:25:1c:
         3d:54:f6:4b:0d:54:0e:32:06:29:a1:10:ae:96:2f:97:c6:00:
         dc:9f:23:4f:3e:40:1f:cf:86:1c:37:c0:d2:5b:14:fe:49:78:
         12:98:b1:ec:8d:e0:fb:4b:c3:bc:e8:2a:db:1e:57:64:84:b7:
         cd:fa:51:72:db:9c:51:6f:6f:88:f4:2e:20:b1:cf:2e:6d:de:
         98:ae:03:0d:a9:dd:e0:94:1c:bd:c7:6d:4f:54:4d:6a:9e:b6:
         bc:5d:e4:2c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYASzIIyAGWZZsBxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
MTMyODIyODAtYjY5Zi00MjZjLThhNTctMzhhODc3MDEwZjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi02h2/IWvsqpqNk/GjzNle0oKrx0rRE/oc5F
ipw5DdGmPLDmPbFNTvIwL0eRSaNV1IOGNc+sEkWUdKvTHuHqNb2Gc2Cys9lfrSOL
VYA7b785FjSzDqCcXUKSnxZIhWYw8o6SAb9RcCf9ElfwlEgpFa6ygg8jQjcf0sZS
Sov1cDmyEWjhDld8/J9hzvcpP7N+hrL1cmUgZCjtxM8L3gkqHwRuT7mq400KZmGp
Tb6GBOzw3cmQKP4O3Od6GAneJBqYsmskO0bkF7AgZ0DCFMoZo9UsMFseWAuDAOb3
7U1U+R7yFEG1aR3XU9X2mHAvcY6h/7YYCRMlGx68KakHcUfU5wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCi9Zn7tUBGpp2h3bXGa/Wt/2sjlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMThkNmI0NmItZDE2MS0z
YTk4LWE5ZjUtYTlmNjNmZDQ1NWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQE1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFvreDUkT5slqKcjaQTBWkZ3N0ftcOQIRWmbLAZxw7VTeQH+WHS9
4rW+qYKADWznGhrN4bmXv5E84vLBELCJvv9XbR98/mNeDp+ZwENuinEYFQFkLCvx
lbga83Pdaa1uwnwSbxGAxp1Fq2qbnxYiDKiGh86lJcAPvbsKceLEtOwVnL9YXUCi
OGaM2RSsjsXEn9oDX6kfzTZflvEUyj7QrhMlHD1U9ksNVA4yBimhEK6WL5fGANyf
I08+QB/Phhw3wNJbFP5JeBKYseyN4PtLw7zoKtseV2SEt836UXLbnFFvb4j0LiCx
zy5t3piuAw2p3eCUHL3HbU9UTWqetrxd5Cw=
-----END CERTIFICATE-----
Generated at Sat Jun 8 11:20:57 2024 by rpki-client on console-fra.rpki-client.org