Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08dfb257-3763-3e8a-9712-b56e96009abf.roa
File:                     08dfb257-3763-3e8a-9712-b56e96009abf.roa (raw, json)
Hash identifier:          Y7iXJa7BaXYST4QxOF9gyCq6OgRDOYS+0sdk5NcdfnY=
Subject key identifier:   51:19:F5:9F:B0:A0:82:56:66:03:89:E9:C6:1A:83:3E:D3:2B:DC:32
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAE98D65FE1D9274F690580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08dfb257-3763-3e8a-9712-b56e96009abf.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33651
IP address blocks:        2001:559:8660::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:98:d6:5f:e1:d9:27:4f:69:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=3c81aa71-8b5b-4c7e-afe3-e973e216d604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f7:69:d8:c8:fc:02:8a:9c:31:29:50:cb:56:
                    ce:7b:f6:0c:4d:aa:0f:6f:95:f0:f9:a5:2b:98:a6:
                    cd:f3:f8:33:48:3c:05:19:96:da:b8:bb:ce:ae:d1:
                    8c:ba:81:4b:f5:25:39:1f:91:dc:2f:32:bb:e8:8d:
                    72:82:3a:84:94:b1:e9:8a:f8:be:5f:45:85:75:9e:
                    02:17:2d:12:93:ef:53:50:f3:f8:ee:7e:a9:3a:73:
                    32:0c:c3:60:13:54:8f:e5:75:75:e1:25:e9:1a:fd:
                    e9:30:10:39:ea:36:66:f4:84:94:d3:92:ae:a0:80:
                    02:a5:64:c4:da:81:93:c8:78:95:dd:7a:70:eb:0b:
                    1e:12:c0:51:a3:91:4a:25:09:56:48:f1:1a:d5:b9:
                    85:f5:13:e2:24:43:14:67:13:f6:fc:6f:ba:fb:6d:
                    88:1f:ff:b3:25:57:75:dc:65:28:ef:32:58:48:30:
                    b1:09:c1:07:ed:f4:1e:60:44:19:90:87:2d:ee:80:
                    f1:30:9b:52:9c:a5:a6:e4:2f:5c:63:23:48:f7:88:
                    1a:b6:fc:44:fa:a7:7b:28:00:8a:31:f3:05:e7:74:
                    72:08:e5:2f:3e:4a:c8:a6:30:c6:dc:59:ee:08:01:
                    bd:a6:1d:4a:74:fc:a0:0c:4a:4d:66:c8:fa:7d:f3:
                    24:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:19:F5:9F:B0:A0:82:56:66:03:89:E9:C6:1A:83:3E:D3:2B:DC:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08dfb257-3763-3e8a-9712-b56e96009abf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8660::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:0b:0a:43:f5:3b:21:65:51:c2:72:07:0a:04:1d:34:fd:74:
         87:99:64:df:35:90:d3:1f:10:83:73:c1:3a:3d:54:cd:43:88:
         4b:0b:32:5e:01:6e:f1:90:eb:fa:d2:82:61:91:dc:f1:bd:fd:
         f0:5d:20:17:0b:45:81:16:53:fc:a6:cb:0e:07:7d:57:ec:ad:
         ca:43:54:fb:6a:4a:87:f3:f1:10:fd:34:6f:8e:2b:53:6e:1d:
         5d:f8:32:fc:2e:20:0c:f8:0a:bf:75:92:e2:7a:c9:13:3b:db:
         8b:22:57:7f:7d:65:b5:fe:ee:22:a5:0c:b7:48:c3:39:db:fe:
         1a:78:5b:33:55:07:9c:65:d4:8f:b4:6a:19:5f:7a:2b:02:30:
         2c:e3:3c:ad:1f:1f:e2:37:d3:a9:7b:90:7d:2d:7d:7c:5c:18:
         ab:d4:ea:55:8a:01:f9:a5:5c:67:1f:67:d2:71:56:f9:24:f3:
         5c:a7:dd:21:76:42:a7:55:54:1e:56:3a:de:8e:95:0d:e4:97:
         d1:e8:02:19:fc:30:a1:b9:7f:fa:ed:70:a3:2c:84:cf:a5:ad:
         d3:0b:04:02:cb:8c:26:62:c3:9f:50:4c:70:3f:28:ba:ca:6d:
         2b:34:ea:95:c9:6f:e4:af:e7:9a:52:21:a8:a8:35:1f:cc:e7:
         c9:57:8f:17
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrpjWX+HZJ09pBYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
M2M4MWFhNzEtOGI1Yi00YzdlLWFmZTMtZTk3M2UyMTZkNjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/dp2Mj8AoqcMSlQy1bOe/YMTaoPb5Xw+aUr
mKbN8/gzSDwFGZbauLvOrtGMuoFL9SU5H5HcLzK76I1ygjqElLHpivi+X0WFdZ4C
Fy0Sk+9TUPP47n6pOnMyDMNgE1SP5XV14SXpGv3pMBA56jZm9ISU05KuoIACpWTE
2oGTyHiV3Xpw6wseEsBRo5FKJQlWSPEa1bmF9RPiJEMUZxP2/G+6+22IH/+zJVd1
3GUo7zJYSDCxCcEH7fQeYEQZkIct7oDxMJtSnKWm5C9cYyNI94gatvxE+qd7KACK
MfMF53RyCOUvPkrIpjDG3FnuCAG9ph1KdPygDEpNZsj6ffMkeQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFEZ9Z+woIJWZgOJ6cYagz7TK9wyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDhkZmIyNTctMzc2My0z
ZThhLTk3MTItYjU2ZTk2MDA5YWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYZg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADgLCkP1OyFlUcJyBwoEHTT9dIeZZN81kNMfEINzwTo9VM1DiEsL
Ml4BbvGQ6/rSgmGR3PG9/fBdIBcLRYEWU/ymyw4HfVfsrcpDVPtqSofz8RD9NG+O
K1NuHV34MvwuIAz4Cr91kuJ6yRM724siV399ZbX+7iKlDLdIwznb/hp4WzNVB5xl
1I+0ahlfeisCMCzjPK0fH+I306l7kH0tfXxcGKvU6lWKAfmlXGcfZ9JxVvkk81yn
3SF2QqdVVB5WOt6OlQ3kl9HoAhn8MKG5f/rtcKMshM+lrdMLBALLjCZiw59QTHA/
KLrKbSs06pXJb+Sv55pSIaioNR/M58lXjxc=
-----END CERTIFICATE-----
Generated at Sat May 4 14:47:00 2024 by rpki-client on console-ams.rpki-client.org