Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b486102-07d8-3303-983b-69afa7ef59a1.roa
File:                     4b486102-07d8-3303-983b-69afa7ef59a1.roa (raw, json)
Hash identifier:          rPkG5TKjhQHHTDjL+LvY7l0LVKa9EQ3VHLJfbPaJNPY=
Subject key identifier:   7B:C5:28:7E:E9:F6:D5:22:01:1C:D1:82:00:51:80:52:14:4B:E7:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF73B45546A835BCB6FD540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b486102-07d8-3303-983b-69afa7ef59a1.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        2001:559:c1bd::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:3b:45:54:6a:83:5b:cb:6f:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=11826cf2-b53c-4fe6-bf0e-5d47441cc122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:bb:d9:58:24:9a:f4:89:1a:58:01:40:9d:
                    41:65:17:41:32:42:dd:6f:22:64:f1:84:33:b0:fc:
                    d4:95:40:92:aa:67:6e:65:c4:fb:11:20:f8:49:35:
                    f2:f8:8b:a6:0e:57:b6:5d:5b:8e:79:4d:b7:e4:00:
                    a6:74:1a:e1:aa:ad:ba:73:d4:e5:1d:ab:fb:b4:02:
                    5e:64:59:54:16:28:80:33:c7:44:20:dc:fb:35:8a:
                    e8:25:b5:3d:00:51:b7:f9:21:83:89:d1:15:81:71:
                    bc:08:ed:9a:9b:bb:90:81:7e:d5:34:3b:c9:07:81:
                    df:05:25:0f:7f:18:c6:42:ce:d9:22:0a:f2:45:6f:
                    01:4f:cd:c4:70:cb:36:0d:58:87:4e:4c:23:8e:4f:
                    31:31:30:dd:f9:82:1e:b2:e9:c0:17:5f:a3:76:ca:
                    23:02:51:f8:c4:cd:59:d8:b8:bb:ee:8c:1c:1a:af:
                    d5:00:4c:65:32:94:8c:27:85:5c:20:60:31:b5:c2:
                    55:80:4e:41:8e:48:1c:d4:8b:5a:7e:83:79:e4:8a:
                    cd:d6:ea:46:05:e3:7e:50:04:e2:2f:db:d9:bc:da:
                    56:39:81:11:ca:8b:c1:a6:e3:ed:c7:78:15:52:f9:
                    d8:e9:fa:10:11:bc:13:12:dc:01:18:92:3d:18:dd:
                    15:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C5:28:7E:E9:F6:D5:22:01:1C:D1:82:00:51:80:52:14:4B:E7:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b486102-07d8-3303-983b-69afa7ef59a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c1bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:4e:ba:a6:4e:8c:1e:3b:15:5a:5a:95:70:1e:ec:66:34:c5:
         ed:b7:fc:c8:32:41:e5:22:68:45:52:15:eb:62:2b:fe:9a:88:
         41:59:98:0e:d6:63:33:cd:82:87:ba:dd:8f:63:f0:10:55:66:
         56:f2:d5:da:d1:76:ee:d4:65:bc:5d:45:d8:18:17:06:d1:ea:
         22:3e:cf:2e:aa:bb:bf:2f:db:53:21:4a:3c:ba:6c:a5:4e:a4:
         58:06:e4:e0:37:3c:4e:75:b7:01:7f:1b:7c:9c:8d:85:ce:63:
         c1:59:b5:ea:73:95:ae:42:61:46:ef:70:c6:06:f7:97:ed:70:
         1a:92:9b:da:ad:9f:a9:fd:45:50:60:64:16:48:83:97:7b:ef:
         95:03:49:53:65:ea:5b:a7:72:60:fc:c6:32:fe:02:0b:f3:25:
         fb:e2:14:c9:66:02:22:21:c1:a0:cd:fa:41:c3:36:3a:8f:41:
         01:f6:68:32:65:e7:33:f2:9b:5d:4a:a3:9f:c0:3a:42:12:ae:
         7e:90:ea:55:bd:9f:a6:e7:3f:60:20:16:4b:23:80:62:b2:8a:
         7b:01:00:90:b3:1b:83:56:ed:84:f5:fa:05:2e:f0:17:0e:da:
         e0:db:07:f8:09:c0:7a:c4:6d:12:e0:2f:86:f8:34:56:6b:e6:
         e1:8e:d6:b3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+9ztFVGqDW8tv1UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
MTE4MjZjZjItYjUzYy00ZmU2LWJmMGUtNWQ0NzQ0MWNjMTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoha72VgkmvSJGlgBQJ1BZRdBMkLdbyJk8YQz
sPzUlUCSqmduZcT7ESD4STXy+IumDle2XVuOeU235ACmdBrhqq26c9TlHav7tAJe
ZFlUFiiAM8dEINz7NYroJbU9AFG3+SGDidEVgXG8CO2am7uQgX7VNDvJB4HfBSUP
fxjGQs7ZIgryRW8BT83EcMs2DViHTkwjjk8xMTDd+YIesunAF1+jdsojAlH4xM1Z
2Li77owcGq/VAExlMpSMJ4VcIGAxtcJVgE5Bjkgc1ItafoN55IrN1upGBeN+UATi
L9vZvNpWOYERyovBpuPtx3gVUvnY6foQEbwTEtwBGJI9GN0VywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHvFKH7p9tUiARzRggBRgFIUS+fWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGI0ODYxMDItMDdkOC0z
MzAzLTk4M2ItNjlhZmE3ZWY1OWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcG9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJBOuqZOjB47FVpalXAe7GY0xe23/MgyQeUiaEVSFetiK/6aiEFZ
mA7WYzPNgoe63Y9j8BBVZlby1drRdu7UZbxdRdgYFwbR6iI+zy6qu78v21MhSjy6
bKVOpFgG5OA3PE51twF/G3ycjYXOY8FZtepzla5CYUbvcMYG95ftcBqSm9qtn6n9
RVBgZBZIg5d775UDSVNl6luncmD8xjL+AgvzJfviFMlmAiIhwaDN+kHDNjqPQQH2
aDJl5zPym11Ko5/AOkISrn6Q6lW9n6bnP2AgFksjgGKyinsBAJCzG4NW7YT1+gUu
8BcO2uDbB/gJwHrEbRLgL4b4NFZr5uGO1rM=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:09:37 2024 by rpki-client on console-fra.rpki-client.org