Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c7590a0-05a8-3226-962b-1d0ae5d4fbaf.roa
File:                     5c7590a0-05a8-3226-962b-1d0ae5d4fbaf.roa (raw, json)
Hash identifier:          0j3KjgmtYalyfvdRK5ASN67E+rAnJDer0Ax5sRgNjjE=
Subject key identifier:   FD:E4:2D:2C:F4:80:CA:3D:90:07:F4:A0:7B:95:86:BB:B9:42:92:68
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF813853D89536B83788300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c7590a0-05a8-3226-962b-1d0ae5d4fbaf.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33657
IP address blocks:        2001:559:c334::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:13:85:3d:89:53:6b:83:78:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=a231c41b-0302-4ce6-babf-b266783eaccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:a2:97:0f:ce:78:b4:ff:f2:7d:f9:cc:ae:
                    a1:66:35:ff:5b:cd:c6:d5:95:9b:fd:28:15:76:31:
                    f1:47:59:2b:b7:e1:cd:4d:b2:3a:c1:3b:09:90:3d:
                    db:9f:66:ed:98:6d:4d:8c:34:c4:1d:0a:fb:ba:64:
                    fa:64:f7:48:fc:a2:87:aa:fd:0d:68:23:77:d1:47:
                    ef:ee:35:af:23:38:7a:91:ac:89:20:1a:d0:9a:2a:
                    84:1a:85:d9:2d:8e:95:06:48:0d:8e:d2:89:e2:cf:
                    c8:6b:26:7a:da:8c:a7:36:cb:c2:fa:36:75:91:e8:
                    14:54:71:29:a3:f1:9e:93:38:87:f2:fd:90:69:bf:
                    17:7b:9e:aa:25:96:69:64:98:0e:52:cc:6a:99:c9:
                    ac:06:67:93:03:1e:2e:32:ea:2a:36:66:9e:97:f5:
                    a7:8a:7e:49:5c:09:27:a0:c9:25:62:3f:93:50:ca:
                    1d:2b:d6:dd:4a:fd:2d:7c:25:c2:04:29:73:20:fd:
                    63:9a:db:1e:98:16:7b:1b:c9:d9:41:53:87:85:e1:
                    36:5b:f7:04:e9:d9:d1:91:25:16:e2:73:96:fd:e6:
                    0c:8e:87:47:1f:6e:bf:8f:e5:06:8d:2d:31:1d:9e:
                    fc:54:23:30:5f:68:a3:83:86:34:04:13:9f:a0:65:
                    44:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E4:2D:2C:F4:80:CA:3D:90:07:F4:A0:7B:95:86:BB:B9:42:92:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c7590a0-05a8-3226-962b-1d0ae5d4fbaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c334::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:65:e7:93:81:5f:78:19:3c:ca:c4:b2:89:94:7a:c9:87:40:
         55:7a:4e:7b:de:97:57:6e:61:a1:ee:59:54:f7:c3:1e:6e:a1:
         3f:2c:8e:67:33:33:a7:92:83:1b:2e:70:a2:db:ff:a1:b6:c1:
         49:da:1f:cd:33:4d:01:44:13:c4:6e:bd:58:12:ed:e9:51:6e:
         f3:e6:f4:97:38:23:43:8a:7a:ef:0a:44:16:1e:c6:e0:de:81:
         91:2f:6b:4d:2d:d8:ed:10:44:2a:60:cf:17:19:ed:21:f2:4a:
         44:ea:f5:cc:3a:85:82:8f:3d:29:97:5a:88:3c:71:99:c7:66:
         78:5b:9a:4f:74:e7:67:65:24:5e:80:94:b7:6e:77:41:dc:98:
         04:65:4a:6c:02:7b:a1:94:7e:2f:36:d7:73:46:a2:2f:2b:bd:
         b9:9f:15:68:2b:a9:05:1a:c2:69:96:07:d5:f8:e3:fa:6f:32:
         81:d4:32:03:e7:99:ee:ed:0a:28:73:cc:5e:24:4c:df:a5:07:
         95:c5:2b:bc:5e:e5:d7:1a:b4:e6:e3:14:91:2c:69:b1:9b:d6:
         71:3c:c8:a4:e7:47:9e:1a:95:cb:b7:0e:92:c6:2f:4e:ad:2a:
         82:a4:0a:72:6f:4e:77:f9:c1:d0:83:78:70:44:70:0d:4e:2d:
         55:c7:95:c7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++BOFPYlTa4N4gwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
YTIzMWM0MWItMDMwMi00Y2U2LWJhYmYtYjI2Njc4M2VhY2NjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWmilw/OeLT/8n35zK6hZjX/W83G1ZWb/SgV
djHxR1krt+HNTbI6wTsJkD3bn2btmG1NjDTEHQr7umT6ZPdI/KKHqv0NaCN30Ufv
7jWvIzh6kayJIBrQmiqEGoXZLY6VBkgNjtKJ4s/IayZ62oynNsvC+jZ1kegUVHEp
o/GekziH8v2Qab8Xe56qJZZpZJgOUsxqmcmsBmeTAx4uMuoqNmael/Wnin5JXAkn
oMklYj+TUModK9bdSv0tfCXCBClzIP1jmtsemBZ7G8nZQVOHheE2W/cE6dnRkSUW
4nOW/eYMjodHH26/j+UGjS0xHZ78VCMwX2ijg4Y0BBOfoGVEfQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP3kLSz0gMo9kAf0oHuVhru5QpJoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWM3NTkwYTAtMDVhOC0z
MjI2LTk2MmItMWQwYWU1ZDRmYmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcM0
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADBl55OBX3gZPMrEsomUesmHQFV6Tnvel1duYaHuWVT3wx5uoT8s
jmczM6eSgxsucKLb/6G2wUnaH80zTQFEE8RuvVgS7elRbvPm9Jc4I0OKeu8KRBYe
xuDegZEva00t2O0QRCpgzxcZ7SHySkTq9cw6hYKPPSmXWog8cZnHZnhbmk9052dl
JF6AlLdud0HcmARlSmwCe6GUfi8213NGoi8rvbmfFWgrqQUawmmWB9X44/pvMoHU
MgPnme7tCihzzF4kTN+lB5XFK7xe5dcatObjFJEsabGb1nE8yKTnR54alcu3DpLG
L06tKoKkCnJvTnf5wdCDeHBEcA1OLVXHlcc=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:01:15 2024 by rpki-client on console-ams.rpki-client.org