Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cfae7d7-f978-31d6-b065-81ebd99a8b86.roa
File:                     3cfae7d7-f978-31d6-b065-81ebd99a8b86.roa (raw, json)
Hash identifier:          IQrsOcc7B0PStbF53BMgCURtngegWbiXp41YMdVuvTg=
Subject key identifier:   E5:99:FF:8C:AC:E7:19:B3:01:3B:1E:4E:75:CC:4A:AD:99:DB:6F:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858477D5BA7D027665F4C0DBA0640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cfae7d7-f978-31d6-b065-81ebd99a8b86.roa
Signing time:             Thu 10 Oct 2024 01:00:33 +0000
ROA not before:           Thu 10 Oct 2024 01:00:33 +0000
ROA not after:            Wed 08 Jan 2025 02:00:33 +0000
asID:                     33657
IP address blocks:        2001:559:a03b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7d:5b:a7:d0:27:66:5f:4c:0d:ba:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 10 01:00:33 2024 GMT
            Not After : Jan  8 02:00:33 2025 GMT
        Subject: CN=57bc5293-23d5-4025-993a-07fc59dd0b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:20:07:38:f8:0f:9e:3e:15:89:5b:cf:07:71:
                    0f:79:b8:03:37:5c:92:b9:b1:58:63:54:f7:04:7d:
                    33:a3:80:bc:6e:2c:53:7b:b3:b2:93:04:19:dd:af:
                    aa:6b:6c:26:4a:16:4e:84:2e:5b:46:a9:6f:63:d7:
                    c2:81:60:99:37:a0:d8:02:3b:3b:67:ba:b7:de:06:
                    56:ad:f5:c2:36:63:9b:0f:4b:80:35:38:42:f2:d1:
                    9a:4d:17:d2:d0:81:75:b7:b5:73:3e:03:3b:f6:bb:
                    16:3d:31:54:4b:5d:51:85:7b:af:ea:73:72:99:61:
                    5e:39:c8:9a:ce:85:56:64:96:f6:ae:f7:35:23:68:
                    4c:35:06:74:76:2d:69:c7:88:f7:81:88:39:00:72:
                    bf:d8:6a:96:60:ac:9d:a7:54:4b:a3:ba:9d:00:bd:
                    14:c2:bb:8d:5b:3a:1e:ba:e8:b3:db:6d:ba:1a:28:
                    b5:24:51:64:bf:9f:6f:4d:23:3a:33:81:ac:81:69:
                    c7:3d:f4:7b:a7:dd:b3:3b:e6:e6:fa:49:18:a3:87:
                    80:88:54:a5:54:37:b6:52:5f:7d:59:71:7a:16:fc:
                    6c:90:2e:1f:e9:f4:e0:06:ea:72:89:4a:00:e4:e3:
                    ce:62:dd:c9:f4:2f:d2:16:d9:ef:40:5a:7c:9f:41:
                    c6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:99:FF:8C:AC:E7:19:B3:01:3B:1E:4E:75:CC:4A:AD:99:DB:6F:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cfae7d7-f978-31d6-b065-81ebd99a8b86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:a03b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:17:af:76:7d:f4:8c:1f:65:c8:3d:bb:6c:c4:6f:48:b1:b7:
         8b:a4:9e:b0:91:36:4c:d1:c1:19:00:8e:ce:d5:52:9b:bf:26:
         62:d7:46:86:90:3f:3d:21:4d:82:6c:f6:eb:01:b0:86:58:81:
         49:77:76:0b:25:16:e1:14:94:3c:fd:ca:af:c0:eb:7a:8b:29:
         d9:40:2e:15:9d:c4:a7:ef:de:f7:fa:5b:55:69:98:be:2b:8b:
         53:74:ef:b2:b0:f1:dc:52:ad:4f:2e:06:eb:ba:b1:09:e6:65:
         43:69:e6:97:30:c5:39:4b:7c:5c:98:06:64:96:86:9b:05:89:
         bc:c1:7c:29:3e:cc:3b:24:58:17:63:dd:7a:35:96:86:9d:8a:
         87:a9:75:10:f7:ca:85:50:10:3b:da:27:d9:f9:d2:8e:01:46:
         a3:63:a3:30:f2:c0:a6:b7:b3:55:5a:86:c5:21:7b:fb:1e:11:
         2f:aa:16:72:65:79:db:51:d8:14:60:d5:0c:1b:01:84:99:f6:
         79:9c:a6:54:17:32:93:2b:49:31:88:bb:69:f4:f6:a4:b7:40:
         64:9f:65:1d:65:28:d9:de:fd:f7:d7:d3:6f:6b:7c:f8:f7:e6:
         d6:43:9b:97:e9:35:97:6f:5e:5b:44:79:cc:cd:99:0a:ef:37:
         7b:47:23:94
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEd9W6fQJ2ZfTA26BkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAxMDAxMDAzM1oXDTI1MDEwODAyMDAzM1owLzEtMCsGA1UEAxMk
NTdiYzUyOTMtMjNkNS00MDI1LTk5M2EtMDdmYzU5ZGQwYjJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSAHOPgPnj4ViVvPB3EPebgDN1ySubFYY1T3
BH0zo4C8bixTe7OykwQZ3a+qa2wmShZOhC5bRqlvY9fCgWCZN6DYAjs7Z7q33gZW
rfXCNmObD0uANThC8tGaTRfS0IF1t7VzPgM79rsWPTFUS11RhXuv6nNymWFeOcia
zoVWZJb2rvc1I2hMNQZ0di1px4j3gYg5AHK/2GqWYKydp1RLo7qdAL0UwruNWzoe
uuiz2226Gii1JFFkv59vTSM6M4GsgWnHPfR7p92zO+bm+kkYo4eAiFSlVDe2Ul99
WXF6FvxskC4f6fTgBupyiUoA5OPOYt3J9C/SFtnvQFp8n0HGpQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOWZ/4ys5xmzATseTnXMSq2Z22/WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2NmYWU3ZDctZjk3OC0z
MWQ2LWIwNjUtODFlYmQ5OWE4Yjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaA7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJEXr3Z99IwfZcg9u2zEb0ixt4uknrCRNkzRwRkAjs7VUpu/JmLX
RoaQPz0hTYJs9usBsIZYgUl3dgslFuEUlDz9yq/A63qLKdlALhWdxKfv3vf6W1Vp
mL4ri1N077Kw8dxSrU8uBuu6sQnmZUNp5pcwxTlLfFyYBmSWhpsFibzBfCk+zDsk
WBdj3Xo1loadioepdRD3yoVQEDvaJ9n50o4BRqNjozDywKa3s1VahsUhe/seES+q
FnJledtR2BRg1QwbAYSZ9nmcplQXMpMrSTGIu2n09qS3QGSfZR1lKNne/ffX029r
fPj35tZDm5fpNZdvXltEeczNmQrvN3tHI5Q=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:53:23 2024 by rpki-client on console-ams.rpki-client.org