Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18dc8b20-b5e2-36a2-acc1-013b5cf4c26d.roa
File:                     18dc8b20-b5e2-36a2-acc1-013b5cf4c26d.roa (raw, json)
Hash identifier:          HMILgBDmdhYknDAcMUWU2NTZ71kHioT8Dt0wwOK7Un8=
Subject key identifier:   00:6F:A1:91:9C:D9:E0:A7:C2:41:7E:AF:21:FE:A3:08:A0:65:35:CF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847CE6F528F9E771CFA49C2AD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18dc8b20-b5e2-36a2-acc1-013b5cf4c26d.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     36040
IP address blocks:        2001:559:0:9d::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:52:8f:9e:77:1c:fa:49:c2:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=4dc60677-830f-49e2-933c-84cd11c996a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:29:9e:d2:5b:22:96:a6:df:dd:37:57:80:
                    71:28:fd:8a:75:83:cd:05:8a:0e:1b:fe:67:9f:83:
                    70:05:57:51:8a:3a:e6:84:29:31:c2:7c:3b:6f:dc:
                    6d:d5:3b:39:f0:bc:44:80:4f:74:85:ad:7e:b3:3e:
                    7e:86:7c:22:55:25:61:7f:53:26:c2:99:2d:cf:b9:
                    e0:79:45:65:36:ae:bc:06:40:87:d0:88:3d:38:16:
                    25:d6:bd:5d:0f:54:ed:65:71:2e:6f:9b:b3:d4:a7:
                    a1:8b:9f:31:0c:e8:dc:f9:58:55:9e:3b:35:82:7e:
                    dd:45:00:a8:bc:f1:8f:16:85:e2:e7:fb:4b:cf:cd:
                    64:66:48:bf:d3:ee:a3:22:54:6f:a2:e4:0e:ea:ac:
                    c4:85:0e:87:fc:dd:22:e2:13:04:ca:16:6f:ac:f3:
                    de:b8:cc:81:16:88:e0:19:64:8a:f7:b6:d2:88:38:
                    cd:bc:61:22:eb:c5:82:30:83:24:56:72:fb:f2:ef:
                    30:30:ee:8a:af:80:e5:03:b8:8a:0f:4f:5f:c0:9b:
                    54:cc:11:e9:21:5f:c8:8a:18:cb:32:02:e7:da:d9:
                    75:8c:20:94:d2:86:18:90:2a:4d:ea:57:23:42:51:
                    99:fd:95:ad:5d:01:5b:61:16:83:a4:8e:c0:dc:8b:
                    35:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6F:A1:91:9C:D9:E0:A7:C2:41:7E:AF:21:FE:A3:08:A0:65:35:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18dc8b20-b5e2-36a2-acc1-013b5cf4c26d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:0:9d::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:2f:8c:1f:ae:d2:ca:a9:6f:bd:e2:68:56:dc:9c:58:54:76:
         43:8a:3c:25:ac:ff:24:4b:9c:d1:01:45:69:5a:bd:b7:81:de:
         36:9d:3e:06:6f:f8:61:27:a9:83:3c:46:d8:41:82:d5:fe:f2:
         8e:e2:ee:9e:0c:3e:2f:b4:9c:dc:c7:41:93:2d:77:4d:26:ba:
         de:e9:72:f6:dc:9f:4c:be:4c:6a:eb:d2:64:e0:3f:0b:cb:67:
         ba:3c:58:9d:2f:2c:8a:60:7c:f9:cd:ab:c1:cb:5a:e7:a9:33:
         30:bb:7d:4e:ef:c2:9b:69:c3:e8:b2:5b:e3:75:44:ed:77:5e:
         12:b1:88:96:15:57:71:3e:ea:98:ea:d8:7c:8a:c1:ed:0f:35:
         f6:1a:d3:10:f1:b1:0f:69:26:c7:4a:0e:d1:2b:67:bf:f7:34:
         c7:f3:36:a4:ad:59:db:6c:d7:61:06:d0:f6:01:33:27:e0:a5:
         db:83:9b:45:38:2f:89:04:67:77:ba:90:14:1b:0c:fb:d4:13:
         5b:e7:45:db:0b:45:b4:fb:31:ae:f0:d3:dd:7c:e6:e4:59:7c:
         ae:0b:01:86:a9:86:6a:b8:42:99:22:0d:8f:ff:be:c0:c5:50:
         1e:76:05:2c:30:99:28:bf:a1:dd:c5:be:db:f6:8a:15:b7:51:
         b6:c7:a4:aa
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEfOb1KPnncc+knCrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk
NGRjNjA2NzctODMwZi00OWUyLTkzM2MtODRjZDExYzk5NmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryIpntJbIpam3903V4BxKP2KdYPNBYoOG/5n
n4NwBVdRijrmhCkxwnw7b9xt1Ts58LxEgE90ha1+sz5+hnwiVSVhf1Mmwpktz7ng
eUVlNq68BkCH0Ig9OBYl1r1dD1TtZXEub5uz1Kehi58xDOjc+VhVnjs1gn7dRQCo
vPGPFoXi5/tLz81kZki/0+6jIlRvouQO6qzEhQ6H/N0i4hMEyhZvrPPeuMyBFojg
GWSK97bSiDjNvGEi68WCMIMkVnL78u8wMO6Kr4DlA7iKD09fwJtUzBHpIV/IihjL
MgLn2tl1jCCU0oYYkCpN6lcjQlGZ/ZWtXQFbYRaDpI7A3Is1pQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFABvoZGc2eCnwkF+ryH+owigZTXPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMThkYzhiMjAtYjVlMi0z
NmEyLWFjYzEtMDEzYjVjZjRjMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFWQAA
AJ0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAhS+MH67SyqlvveJoVtycWFR2Q4o8Jaz/JEuc0QFFaVq9t4He
Np0+Bm/4YSepgzxG2EGC1f7yjuLungw+L7Sc3MdBky13TSa63uly9tyfTL5MauvS
ZOA/C8tnujxYnS8simB8+c2rwcta56kzMLt9Tu/Cm2nD6LJb43VE7XdeErGIlhVX
cT7qmOrYfIrB7Q819hrTEPGxD2kmx0oO0Stnv/c0x/M2pK1Z22zXYQbQ9gEzJ+Cl
24ObRTgviQRnd7qQFBsM+9QTW+dF2wtFtPsxrvDT3Xzm5Fl8rgsBhqmGarhCmSIN
j/++wMVQHnYFLDCZKL+h3cW+2/aKFbdRtsekqg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:11:37 2024 by rpki-client on console-ams.rpki-client.org