Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a84ab33-9fc0-334d-b909-d7695fcbe6e4.roa
File:                     6a84ab33-9fc0-334d-b909-d7695fcbe6e4.roa (raw, json)
Hash identifier:          vGbasowZNSaR68z7vFLZogHdeyYfF9GUg/VlTal05sY=
Subject key identifier:   DE:3E:15:8D:31:4B:DA:29:29:C4:E0:AB:77:A4:F8:8D:AC:BE:96:5F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF72944F7B91E8F3F9FA900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a84ab33-9fc0-334d-b909-d7695fcbe6e4.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7016
IP address blocks:        2001:559:8591::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:29:44:f7:b9:1e:8f:3f:9f:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=afc709ed-49b3-42a2-812b-63403810c779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:9c:7d:de:b9:f0:68:62:4d:73:8f:b8:fa:
                    80:2e:ad:76:9e:2f:e8:42:b2:9b:5c:ce:f8:f6:e7:
                    07:19:e9:d5:f8:3d:1f:aa:0a:3e:89:d5:1c:d3:44:
                    df:02:af:c9:a6:ac:da:11:ce:62:a3:fe:e1:8b:34:
                    8d:a4:49:5d:4a:56:33:8c:f2:fe:9c:ee:8b:11:51:
                    a9:d1:fb:25:78:ba:c3:74:6c:8a:ba:73:82:7f:12:
                    06:5a:e2:38:87:f9:23:a4:d9:9f:75:46:b4:ac:6f:
                    6e:14:f7:98:35:b6:1b:59:00:07:55:7a:53:68:8f:
                    4a:70:30:e7:75:b4:6b:6d:f4:bf:a8:7b:de:a5:a9:
                    49:bc:89:cd:fe:67:ed:4c:37:e8:54:6a:49:09:6e:
                    22:bb:1c:dc:69:61:73:3b:39:b8:65:c0:a4:ef:2d:
                    15:ed:35:f7:07:8a:63:74:23:9f:09:dc:a9:34:a1:
                    8b:69:84:90:79:a3:52:35:80:da:c3:a3:5b:ef:32:
                    a6:4c:0f:87:33:95:11:95:cb:32:87:70:ec:ce:ea:
                    c0:e2:cf:54:d9:9b:36:5a:24:6b:e1:4a:cb:aa:8c:
                    4d:21:d8:60:0b:05:39:47:18:c7:a4:79:dc:6e:b9:
                    25:98:09:a0:c5:dc:26:ac:89:a2:74:02:68:4a:7a:
                    aa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3E:15:8D:31:4B:DA:29:29:C4:E0:AB:77:A4:F8:8D:AC:BE:96:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a84ab33-9fc0-334d-b909-d7695fcbe6e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8591::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:5f:1f:6d:12:c6:ce:05:8c:2e:de:3a:34:5a:79:7e:ae:f4:
         ad:eb:d2:31:c3:69:60:61:28:70:a3:94:43:8c:d0:fb:d8:ca:
         e8:bb:56:74:20:fb:ff:20:ec:73:8a:79:da:c4:d3:0d:48:71:
         9b:62:ce:73:54:90:24:4e:93:bc:f9:9d:b2:fe:71:fa:95:58:
         92:ba:27:bd:c9:e6:e4:7e:c9:4d:8a:41:a5:a8:9e:d8:2c:fe:
         d4:50:c9:81:7b:92:14:fe:0c:54:4d:82:1a:ff:46:c4:1d:a7:
         7a:7e:a2:1b:33:e3:a8:e7:83:24:48:33:c9:0d:bc:88:ac:20:
         ab:85:dc:e5:a8:1e:1f:25:03:88:bb:fe:af:62:bc:1b:f6:e2:
         5c:8d:33:37:e6:bf:ad:fb:a6:ce:3a:a3:85:16:d8:50:32:b9:
         7f:15:78:6e:3a:af:69:c9:b4:3e:b8:bb:d9:b2:de:a7:09:f3:
         45:35:81:7b:fb:ad:18:07:f1:f7:f8:a5:5e:16:dc:c0:cb:ef:
         8e:25:12:0b:a3:ee:16:df:5b:bb:7a:85:98:6b:de:d4:dc:73:
         9c:b0:95:49:93:d5:88:81:30:29:a9:ea:4b:bf:99:b3:6f:d9:
         f6:71:2b:f4:3a:7e:75:76:a1:b3:08:3a:3d:e6:86:9c:61:dd:
         c3:26:8a:d3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+9ylE97kejz+fqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
YWZjNzA5ZWQtNDliMy00MmEyLTgxMmItNjM0MDM4MTBjNzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Ccfd658GhiTXOPuPqALq12ni/oQrKbXM74
9ucHGenV+D0fqgo+idUc00TfAq/JpqzaEc5io/7hizSNpEldSlYzjPL+nO6LEVGp
0fsleLrDdGyKunOCfxIGWuI4h/kjpNmfdUa0rG9uFPeYNbYbWQAHVXpTaI9KcDDn
dbRrbfS/qHvepalJvInN/mftTDfoVGpJCW4iuxzcaWFzOzm4ZcCk7y0V7TX3B4pj
dCOfCdypNKGLaYSQeaNSNYDaw6Nb7zKmTA+HM5URlcsyh3DszurA4s9U2Zs2WiRr
4UrLqoxNIdhgCwU5RxjHpHncbrklmAmgxdwmrImidAJoSnqqiwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFN4+FY0xS9opKcTgq3ek+I2svpZfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmE4NGFiMzMtOWZjMC0z
MzRkLWI5MDktZDc2OTVmY2JlNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYWR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMNfH20Sxs4FjC7eOjRaeX6u9K3r0jHDaWBhKHCjlEOM0PvYyui7
VnQg+/8g7HOKedrE0w1IcZtiznNUkCROk7z5nbL+cfqVWJK6J73J5uR+yU2KQaWo
ntgs/tRQyYF7khT+DFRNghr/RsQdp3p+ohsz46jngyRIM8kNvIisIKuF3OWoHh8l
A4i7/q9ivBv24lyNMzfmv637ps46o4UW2FAyuX8VeG46r2nJtD64u9my3qcJ80U1
gXv7rRgH8ff4pV4W3MDL744lEguj7hbfW7t6hZhr3tTcc5ywlUmT1YiBMCmp6ku/
mbNv2fZxK/Q6fnV2obMIOj3mhpxh3cMmitM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:37:52 2024 by rpki-client on console-fra.rpki-client.org