Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/165a816a-a4ea-3b73-8cad-98fae7072dab.roa
File:                     165a816a-a4ea-3b73-8cad-98fae7072dab.roa (raw, json)
Hash identifier:          yTEJsjHNqujmvcnqUgwc/0lmLk9Cyf57b8pVeH07llk=
Subject key identifier:   0C:98:9F:5F:51:1D:6B:A5:16:3F:6E:0A:68:E3:8E:69:48:F2:FB:EA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF72C7D7A4353507519E500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/165a816a-a4ea-3b73-8cad-98fae7072dab.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7016
IP address blocks:        2001:559:c3e4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:2c:7d:7a:43:53:50:75:19:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=2923801d-4051-4f4f-8a8a-72cad5777fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:21:91:8f:dc:bf:11:2d:1e:34:ee:0b:b5:be:
                    00:e7:16:ba:50:be:c3:b1:c7:c2:1f:68:e1:6f:7e:
                    b3:4e:46:9f:c3:72:4f:9d:14:53:7a:e9:91:c1:6e:
                    5f:7c:41:56:14:29:4c:fd:e9:76:16:38:5c:49:61:
                    0e:f8:74:b4:3c:cf:17:d5:ff:a0:08:d4:02:4b:24:
                    e3:23:ab:1b:94:1e:dc:35:0a:01:6a:0b:93:0d:20:
                    bb:7e:40:08:00:f1:51:8f:a2:6d:85:bd:c7:52:ab:
                    af:9e:13:e4:1d:d0:65:bc:ca:c6:f2:cc:85:8f:e9:
                    4e:7a:b8:30:12:f4:d0:aa:26:4a:d6:34:f0:e0:92:
                    b9:82:a6:18:0d:8c:c9:47:6f:13:e0:a1:6a:a1:51:
                    f7:a5:fd:00:a1:c1:df:24:11:71:52:7d:1a:28:b6:
                    35:7c:47:21:c9:a2:9d:aa:c5:68:55:27:4f:50:45:
                    8e:30:2e:48:82:ff:59:18:d0:f5:4a:cb:3c:e2:9d:
                    34:90:84:c7:ac:9a:2b:ae:9f:3b:05:e2:bc:fd:30:
                    f3:6a:dd:4d:32:68:24:3e:40:12:4c:33:37:e0:64:
                    45:84:a1:a4:67:67:17:66:4c:8d:df:73:5d:dd:22:
                    99:fe:6c:ea:d8:48:d8:be:dc:96:f5:c5:df:39:8b:
                    36:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:98:9F:5F:51:1D:6B:A5:16:3F:6E:0A:68:E3:8E:69:48:F2:FB:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/165a816a-a4ea-3b73-8cad-98fae7072dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c3e4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:e4:c1:d6:07:ff:3a:1b:ef:d0:8a:56:d3:0c:d7:db:f6:87:
         17:85:fb:3e:28:38:4b:77:38:be:10:0b:69:80:d6:a6:5f:ab:
         85:d4:35:39:7e:b7:c0:29:cc:f3:45:d0:c7:d4:6a:9a:5a:41:
         e6:80:ff:bc:8c:b6:5b:03:e9:d9:d4:ce:fa:7e:af:d6:14:83:
         64:b3:a2:04:13:2d:89:e0:ab:11:29:e8:44:2c:48:69:cc:41:
         bb:e3:85:df:97:2c:35:64:96:87:14:84:8a:fa:1a:7f:a6:02:
         f1:71:cc:79:27:cc:2e:05:16:de:51:71:21:79:50:ac:63:13:
         2f:84:02:89:ed:87:f2:f2:b7:ae:3e:29:53:2f:25:ca:e4:92:
         ad:16:ed:5b:24:f9:5d:78:e6:d9:37:2c:51:71:8b:14:11:3c:
         cb:99:ad:bf:33:6f:b1:f9:29:7d:c7:7b:9c:56:49:b9:bc:42:
         05:af:dd:a3:d9:d1:0a:91:bf:5e:b9:df:b6:58:65:1f:34:ca:
         16:65:a9:73:b5:49:7d:99:1e:29:fb:ea:57:72:2c:85:b9:fa:
         c7:e8:5c:b8:a5:62:af:d9:5e:9e:f6:76:51:8e:85:a3:3f:01:
         da:6a:15:b5:a5:94:a7:8c:f2:6c:75:90:a6:ad:1a:5a:25:bd:
         5a:17:24:4a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+9yx9ekNTUHUZ5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
MjkyMzgwMWQtNDA1MS00ZjRmLThhOGEtNzJjYWQ1Nzc3ZmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCGRj9y/ES0eNO4Ltb4A5xa6UL7DscfCH2jh
b36zTkafw3JPnRRTeumRwW5ffEFWFClM/el2FjhcSWEO+HS0PM8X1f+gCNQCSyTj
I6sblB7cNQoBaguTDSC7fkAIAPFRj6Jthb3HUquvnhPkHdBlvMrG8syFj+lOergw
EvTQqiZK1jTw4JK5gqYYDYzJR28T4KFqoVH3pf0AocHfJBFxUn0aKLY1fEchyaKd
qsVoVSdPUEWOMC5Igv9ZGND1Sss84p00kITHrJorrp87BeK8/TDzat1NMmgkPkAS
TDM34GRFhKGkZ2cXZkyN33Nd3SKZ/mzq2EjYvtyW9cXfOYs21wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAyYn19RHWulFj9uCmjjjmlI8vvqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTY1YTgxNmEtYTRlYS0z
YjczLThjYWQtOThmYWU3MDcyZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcPk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAK3kwdYH/zob79CKVtMM19v2hxeF+z4oOEt3OL4QC2mA1qZfq4XU
NTl+t8ApzPNF0MfUappaQeaA/7yMtlsD6dnUzvp+r9YUg2SzogQTLYngqxEp6EQs
SGnMQbvjhd+XLDVklocUhIr6Gn+mAvFxzHknzC4FFt5RcSF5UKxjEy+EAonth/Ly
t64+KVMvJcrkkq0W7Vsk+V145tk3LFFxixQRPMuZrb8zb7H5KX3He5xWSbm8QgWv
3aPZ0QqRv16537ZYZR80yhZlqXO1SX2ZHin76ldyLIW5+sfoXLilYq/ZXp72dlGO
haM/AdpqFbWllKeM8mx1kKatGlolvVoXJEo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:56:15 2024 by rpki-client on console-ams.rpki-client.org