Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1aa4759-7df5-350e-b50b-3f6c5fbc43a0.roa
File:                     c1aa4759-7df5-350e-b50b-3f6c5fbc43a0.roa (raw, json)
Hash identifier:          9c9aaVEofGyiv1E/gESUVaOBSGcQaJHZ0hNmgPx2njE=
Subject key identifier:   6B:76:2E:97:34:E9:86:C1:5E:12:35:41:59:16:D1:E2:89:98:9E:9B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004AA43F487A56D0249E3BDC
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1aa4759-7df5-350e-b50b-3f6c5fbc43a0.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33491
IP address blocks:        2001:559:8246::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:a4:3f:48:7a:56:d0:24:9e:3b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=b1aea5e3-274a-4ee1-ab61-e21a4f462baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:08:81:48:03:3d:38:c7:61:10:25:d8:e7:ef:
                    39:3e:9e:6f:8e:47:63:6b:2e:a3:c3:ec:b8:aa:2c:
                    f1:77:eb:2a:70:b2:90:26:d8:3e:c1:34:f4:be:32:
                    72:7a:1d:7f:45:c8:db:96:20:67:00:88:2e:71:04:
                    75:01:4f:4c:45:f0:4b:3b:bd:d5:89:f5:bc:99:7e:
                    0c:10:bd:f8:cb:8f:13:9b:65:6f:ec:9a:d6:55:e7:
                    ab:ac:d4:54:32:3b:dc:65:82:4e:91:ae:ef:86:1c:
                    cd:65:4f:ee:44:29:cb:e7:0c:c5:f5:eb:33:7a:77:
                    2d:e4:e0:34:94:0d:be:26:7d:13:b4:59:ef:31:82:
                    d0:d1:70:fc:bd:bd:46:30:aa:73:9d:8d:11:4e:0a:
                    3c:b5:59:35:cd:d5:ce:68:7f:39:6a:98:5d:6f:5d:
                    94:03:eb:c0:81:1e:12:eb:e9:48:5c:57:10:c3:cf:
                    9c:36:9a:1d:ae:41:83:20:56:7a:de:a9:b6:66:95:
                    93:34:47:14:19:7d:0d:dc:d9:d2:dd:7b:22:21:e8:
                    f2:d4:63:1d:50:e3:dd:e5:e4:47:8b:c6:1f:76:81:
                    0f:df:97:fb:c7:34:d7:4c:56:72:92:23:92:95:27:
                    53:4e:f0:6c:43:92:6f:b9:71:8b:da:fc:81:ed:0e:
                    db:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:76:2E:97:34:E9:86:C1:5E:12:35:41:59:16:D1:E2:89:98:9E:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1aa4759-7df5-350e-b50b-3f6c5fbc43a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8246::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:cb:1a:95:16:4a:30:3b:82:c7:32:c5:53:fe:46:a4:21:91:
         81:83:d5:ff:b4:37:9c:44:fb:0f:bf:62:7f:d0:24:38:5d:5a:
         73:b0:1a:83:8f:e4:0c:20:ac:57:5a:14:19:fb:84:82:5d:09:
         e8:3a:60:40:42:8f:c3:a9:2a:31:6c:4d:1e:b5:c5:cb:a8:a0:
         21:0e:d1:b7:4e:1d:d3:db:30:0f:02:b0:cc:e5:9d:e3:99:e1:
         50:49:1c:48:52:1c:7f:4c:97:54:e1:30:4a:d5:ae:66:f5:db:
         1e:f7:f8:70:c5:cc:e0:fa:48:38:e5:09:b0:13:d1:12:49:4b:
         5b:5a:28:4b:fd:1c:d1:b0:eb:46:83:0b:82:5b:e1:97:a0:ce:
         81:bb:c8:61:15:4f:a5:73:a3:73:ff:13:43:7c:67:c8:f6:5d:
         3c:68:39:33:aa:e8:5e:2a:bd:12:9f:9c:fc:ba:a9:c0:46:ff:
         26:99:5a:a0:91:bb:05:9a:92:13:52:59:1b:9c:4a:b2:d7:d9:
         69:01:01:27:d1:73:1a:41:86:de:4b:30:e0:05:a7:ad:bc:f1:
         b4:4d:76:1f:51:27:bb:61:86:c9:8d:62:4a:85:f3:c6:d7:9f:
         5c:d4:2f:7e:28:ed:ec:9c:20:13:ec:36:de:69:5f:08:66:93:
         cc:74:1a:20
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYASqQ/SHpW0CSeO9wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
YjFhZWE1ZTMtMjc0YS00ZWUxLWFiNjEtZTIxYTRmNDYyYmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgiBSAM9OMdhECXY5+85Pp5vjkdjay6jw+y4
qizxd+sqcLKQJtg+wTT0vjJyeh1/RcjbliBnAIgucQR1AU9MRfBLO73VifW8mX4M
EL34y48Tm2Vv7JrWVeerrNRUMjvcZYJOka7vhhzNZU/uRCnL5wzF9eszenct5OA0
lA2+Jn0TtFnvMYLQ0XD8vb1GMKpznY0RTgo8tVk1zdXOaH85aphdb12UA+vAgR4S
6+lIXFcQw8+cNpodrkGDIFZ63qm2ZpWTNEcUGX0N3NnS3XsiIejy1GMdUOPd5eRH
i8YfdoEP35f7xzTXTFZykiOSlSdTTvBsQ5JvuXGL2vyB7Q7bnQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGt2Lpc06YbBXhI1QVkW0eKJmJ6bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzFhYTQ3NTktN2RmNS0z
NTBlLWI1MGItM2Y2YzVmYmM0M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYJG
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFnLGpUWSjA7gscyxVP+RqQhkYGD1f+0N5xE+w+/Yn/QJDhdWnOw
GoOP5AwgrFdaFBn7hIJdCeg6YEBCj8OpKjFsTR61xcuooCEO0bdOHdPbMA8CsMzl
neOZ4VBJHEhSHH9Ml1ThMErVrmb12x73+HDFzOD6SDjlCbAT0RJJS1taKEv9HNGw
60aDC4Jb4ZegzoG7yGEVT6Vzo3P/E0N8Z8j2XTxoOTOq6F4qvRKfnPy6qcBG/yaZ
WqCRuwWakhNSWRucSrLX2WkBASfRcxpBht5LMOAFp6288bRNdh9RJ7thhsmNYkqF
88bXn1zUL34o7eycIBPsNt5pXwhmk8x0GiA=
-----END CERTIFICATE-----
Generated at Sat Jun 8 01:44:27 2024 by rpki-client on console-fra.rpki-client.org