Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66643565-b2e2-3dde-bd8d-9163542dd3db.roa
File:                     66643565-b2e2-3dde-bd8d-9163542dd3db.roa (raw, json)
Hash identifier:          t1ldST8mAhQn1tUj7I18PFvosU7hk1nI1yIRYJ9LY+Y=
Subject key identifier:   7A:FF:02:7D:8C:BD:EB:E5:FD:7C:74:FC:13:65:50:55:B1:EC:38:60
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF8020F9F350F598011AD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66643565-b2e2-3dde-bd8d-9163542dd3db.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        2001:559:85b9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:02:0f:9f:35:0f:59:80:11:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=238ddbdf-a7c4-4d31-a055-a6d824719cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1a:10:6b:d5:08:80:71:89:14:b1:e0:bf:3c:
                    d6:a4:f1:4e:8f:17:5a:97:ef:3d:a5:ea:4a:9e:44:
                    56:94:da:ee:a7:6f:f1:ae:ab:66:e5:cd:96:00:b1:
                    62:a8:27:71:64:06:a5:f2:32:8d:83:43:c5:cd:bd:
                    f2:21:a1:24:80:46:0b:53:25:32:c3:c8:22:85:2c:
                    85:e0:bf:b8:9d:89:f5:50:c7:b0:14:ed:4e:1b:86:
                    2e:c7:c5:ed:87:8e:ce:66:ea:4c:34:46:70:6d:86:
                    03:71:0c:37:7a:eb:f0:0a:f1:6a:ce:93:45:6d:1c:
                    b1:a3:f1:e8:94:42:58:fd:45:89:38:e0:e4:b5:b6:
                    21:7f:28:3c:43:08:bf:1f:85:9d:9f:7a:ff:c8:a7:
                    25:e4:b4:a6:06:af:ac:a9:91:11:26:70:90:40:86:
                    16:05:4c:d5:67:15:a9:ab:88:80:48:da:27:bc:ba:
                    60:c2:5e:ea:39:b0:2b:ec:06:9f:4d:80:1e:8f:af:
                    e4:4f:8a:1e:aa:b9:3c:9d:9b:b3:e4:c1:81:ff:12:
                    89:83:95:7b:06:2a:bd:a2:0a:87:1f:08:00:c1:3e:
                    29:9c:2a:3c:1a:93:90:fd:65:a1:15:82:5f:f4:a2:
                    36:90:fb:a3:ba:20:b2:2a:d4:f0:79:ba:75:cd:54:
                    4b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FF:02:7D:8C:BD:EB:E5:FD:7C:74:FC:13:65:50:55:B1:EC:38:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66643565-b2e2-3dde-bd8d-9163542dd3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:85b9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:1b:52:96:3e:e0:b2:3b:ff:1d:01:17:63:a3:d5:60:d8:93:
         5a:f6:33:38:0a:1b:18:68:fa:48:5b:b5:53:e8:6f:a6:56:10:
         2f:b3:3a:b6:c6:7b:10:a9:76:ce:a4:c2:56:8b:a4:be:e7:09:
         d9:23:ee:37:a8:62:14:42:6b:21:74:f2:38:04:62:35:5e:b6:
         21:d1:2e:50:29:21:3e:57:2c:66:3c:16:54:77:8c:7e:bd:e2:
         ab:3e:56:b0:30:fd:90:6a:06:06:7c:e0:09:55:73:fd:b1:5f:
         a7:79:0b:b6:07:83:c8:27:6a:92:2f:25:3a:82:6f:10:d0:07:
         3b:6a:1c:8c:ec:7a:27:02:55:88:89:a9:bd:de:eb:65:d2:4c:
         66:6c:2e:ac:43:6b:50:6f:f1:b8:d5:9b:cc:8f:54:7d:88:b7:
         77:3c:bd:61:4b:38:2a:41:33:24:ce:19:f6:9f:a6:9e:dc:21:
         6a:e9:94:cd:ab:c1:fe:71:88:d0:49:ed:23:33:ac:f6:7c:5f:
         83:7c:06:27:4e:ca:6c:32:ed:ba:71:8d:5b:4c:b4:1a:6f:64:
         e3:cf:c0:8b:51:c4:87:ab:90:fb:e6:48:85:e8:9e:3b:f1:d6:
         84:74:20:6a:24:b7:2d:35:8f:7f:c1:42:85:e7:99:ab:23:b1:
         22:d6:ff:f7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++AIPnzUPWYARrUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
MjM4ZGRiZGYtYTdjNC00ZDMxLWEwNTUtYTZkODI0NzE5Y2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxoQa9UIgHGJFLHgvzzWpPFOjxdal+89pepK
nkRWlNrup2/xrqtm5c2WALFiqCdxZAal8jKNg0PFzb3yIaEkgEYLUyUyw8gihSyF
4L+4nYn1UMewFO1OG4Yux8Xth47OZupMNEZwbYYDcQw3euvwCvFqzpNFbRyxo/Ho
lEJY/UWJOODktbYhfyg8Qwi/H4Wdn3r/yKcl5LSmBq+sqZERJnCQQIYWBUzVZxWp
q4iASNonvLpgwl7qObAr7AafTYAej6/kT4oeqrk8nZuz5MGB/xKJg5V7Biq9ogqH
HwgAwT4pnCo8GpOQ/WWhFYJf9KI2kPujuiCyKtTwebp1zVRLXQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHr/An2Mvevl/Xx0/BNlUFWx7DhgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjY2NDM1NjUtYjJlMi0z
ZGRlLWJkOGQtOTE2MzU0MmRkM2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYW5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHQbUpY+4LI7/x0BF2Oj1WDYk1r2MzgKGxho+khbtVPob6ZWEC+z
OrbGexCpds6kwlaLpL7nCdkj7jeoYhRCayF08jgEYjVetiHRLlApIT5XLGY8FlR3
jH694qs+VrAw/ZBqBgZ84AlVc/2xX6d5C7YHg8gnapIvJTqCbxDQBztqHIzseicC
VYiJqb3e62XSTGZsLqxDa1Bv8bjVm8yPVH2It3c8vWFLOCpBMyTOGfafpp7cIWrp
lM2rwf5xiNBJ7SMzrPZ8X4N8BidOymwy7bpxjVtMtBpvZOPPwItRxIerkPvmSIXo
njvx1oR0IGokty01j3/BQoXnmasjsSLW//c=
-----END CERTIFICATE-----
Generated at Sun Dec 22 15:14:16 2024 by rpki-client on console-fra.rpki-client.org