Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a394588-3ed2-323c-8005-ac959c707d5e.roa
File:                     3a394588-3ed2-323c-8005-ac959c707d5e.roa (raw, json)
Hash identifier:          lLPW9j9KQqU/cSSgYXqV84KSU820R1NMmk3H8QpV5rk=
Subject key identifier:   86:B6:59:56:AC:61:24:51:C1:26:4D:66:A8:FA:04:1A:06:CA:7E:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAEDE1595639F28A10C6680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a394588-3ed2-323c-8005-ac959c707d5e.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33662
IP address blocks:        2001:559:5ab::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:de:15:95:63:9f:28:a1:0c:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=828e9b23-3501-41ef-b983-ea251a127533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:79:0e:e7:7f:18:77:90:74:a1:d2:29:37:0b:
                    f7:7f:6b:4e:01:47:95:98:11:ac:f1:7e:f3:58:84:
                    9d:27:1c:65:77:da:f8:ac:25:fa:63:23:aa:35:c7:
                    e9:52:23:70:21:c3:94:92:60:fe:09:2f:34:80:d3:
                    c6:24:eb:0f:8d:da:dc:64:6b:f9:30:20:d8:bc:fb:
                    41:a9:5c:ce:1e:15:25:67:b9:a6:21:af:71:bc:c9:
                    b1:7f:70:67:c2:10:b4:7a:a1:2d:3c:6e:54:25:e4:
                    2a:fe:44:44:d4:ec:3d:8a:64:54:ff:f6:1c:98:cb:
                    94:23:80:98:e0:c5:ae:db:2a:74:1d:c5:d2:1b:e6:
                    7d:8f:53:fb:c3:1b:3a:ae:79:86:e1:b5:18:f7:14:
                    f5:d3:c3:f8:22:61:a3:6e:5a:b0:c3:9e:56:27:6f:
                    62:c5:d7:ae:3d:b0:e7:35:5b:41:50:82:7f:ef:48:
                    84:93:2b:55:d6:e7:88:b2:2b:12:66:2f:35:e9:d8:
                    1d:15:62:50:dc:19:9b:19:2d:39:f3:a7:eb:36:fe:
                    03:e2:ac:59:8b:7d:d7:5f:ed:de:de:73:52:c0:ae:
                    7f:ab:e7:72:42:12:26:79:39:d0:1d:85:8c:b0:2d:
                    6d:05:b3:8c:74:f7:0e:bb:5d:0f:e1:5e:4f:57:4b:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B6:59:56:AC:61:24:51:C1:26:4D:66:A8:FA:04:1A:06:CA:7E:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a394588-3ed2-323c-8005-ac959c707d5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:5ab::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:7d:c6:80:70:17:b9:f0:19:17:48:86:a5:dd:7b:ab:14:bf:
         bb:3b:48:c9:75:38:ee:77:5c:db:07:6f:93:10:ee:9e:ae:13:
         53:f8:57:2e:21:d7:9b:0f:e1:a0:e0:4f:6f:69:6e:65:b1:00:
         2a:fe:ca:ca:21:71:3c:9a:17:77:f3:bd:6e:7f:8c:f8:7e:d3:
         31:68:8d:f5:d6:30:65:1b:e0:0f:c6:62:96:53:cb:53:7d:8a:
         74:a6:f6:95:f7:41:38:87:51:48:68:1b:21:f5:51:ed:10:21:
         90:a3:61:b3:f0:74:87:c0:46:81:0a:bb:9a:01:a7:f1:2f:83:
         fc:5d:7e:94:10:30:ba:73:64:e4:82:d4:83:72:5b:ee:2f:f2:
         41:b1:ea:e3:a9:80:e9:5b:fe:6d:92:e8:78:70:95:fe:a5:20:
         d2:d0:e7:cb:9c:5e:fc:b6:70:82:1c:37:e2:7b:61:38:30:39:
         04:f5:25:c9:94:a9:51:bf:19:4b:b2:c1:6a:76:38:48:da:13:
         84:c5:3c:08:30:f1:ba:bc:be:38:48:3d:91:41:2b:c8:77:51:
         f3:a8:4d:66:42:06:90:64:4f:58:15:5d:be:6c:2d:8c:2c:2e:
         58:d8:d7:30:c5:6e:1b:64:6d:ed:da:17:ea:e4:1c:30:fa:3d:
         0c:0f:16:c7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrt4VlWOfKKEMZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
ODI4ZTliMjMtMzUwMS00MWVmLWI5ODMtZWEyNTFhMTI3NTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXkO538Yd5B0odIpNwv3f2tOAUeVmBGs8X7z
WISdJxxld9r4rCX6YyOqNcfpUiNwIcOUkmD+CS80gNPGJOsPjdrcZGv5MCDYvPtB
qVzOHhUlZ7mmIa9xvMmxf3BnwhC0eqEtPG5UJeQq/kRE1Ow9imRU//YcmMuUI4CY
4MWu2yp0HcXSG+Z9j1P7wxs6rnmG4bUY9xT108P4ImGjblqww55WJ29ixdeuPbDn
NVtBUIJ/70iEkytV1ueIsisSZi816dgdFWJQ3BmbGS0586frNv4D4qxZi33XX+3e
3nNSwK5/q+dyQhImeTnQHYWMsC1tBbOMdPcOu10P4V5PV0tapQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIa2WVasYSRRwSZNZqj6BBoGyn4ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2EzOTQ1ODgtM2VkMi0z
MjNjLTgwMDUtYWM5NTljNzA3ZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQWr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAL19xoBwF7nwGRdIhqXde6sUv7s7SMl1OO53XNsHb5MQ7p6uE1P4
Vy4h15sP4aDgT29pbmWxACr+ysohcTyaF3fzvW5/jPh+0zFojfXWMGUb4A/GYpZT
y1N9inSm9pX3QTiHUUhoGyH1Ue0QIZCjYbPwdIfARoEKu5oBp/Evg/xdfpQQMLpz
ZOSC1INyW+4v8kGx6uOpgOlb/m2S6Hhwlf6lINLQ58ucXvy2cIIcN+J7YTgwOQT1
JcmUqVG/GUuywWp2OEjaE4TFPAgw8bq8vjhIPZFBK8h3UfOoTWZCBpBkT1gVXb5s
LYwsLljY1zDFbhtkbe3aF+rkHDD6PQwPFsc=
-----END CERTIFICATE-----
Generated at Sat May 4 14:49:40 2024 by rpki-client on console-ams.rpki-client.org