Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/805759e8-a6ef-3865-8207-214d202e26e9.roa
File:                     805759e8-a6ef-3865-8207-214d202e26e9.roa (raw, json)
Hash identifier:          Do5SYx9HG25Czx+611QoHl9JjbWgFEs81ysXXrdQZBc=
Subject key identifier:   24:1F:B4:D0:96:0D:FB:C0:FB:2D:BB:5C:02:AF:AE:6F:F9:E4:58:85
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847A6A7EADFAE15100142C43BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/805759e8-a6ef-3865-8207-214d202e26e9.roa
Signing time:             Thu 24 Oct 2024 20:02:28 +0000
ROA not before:           Thu 24 Oct 2024 20:02:28 +0000
ROA not after:            Wed 22 Jan 2025 21:02:28 +0000
asID:                     36040
IP address blocks:        2001:559:0:75::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:a7:ea:df:ae:15:10:01:42:c4:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 24 20:02:28 2024 GMT
            Not After : Jan 22 21:02:28 2025 GMT
        Subject: CN=53bada5d-2708-4124-9c38-5d6fc66264a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:c9:ca:1d:a1:4d:fb:9e:e3:70:47:15:6b:
                    4b:a3:39:f1:ae:1a:34:af:78:d5:43:93:0b:a8:35:
                    f8:9d:08:98:ee:5e:d5:d5:ad:44:77:49:c9:2a:0a:
                    d7:83:ba:5f:1c:71:ed:d8:c0:02:39:81:fb:2a:0c:
                    76:6a:af:5d:6a:82:d6:9d:a5:e2:46:08:d1:6d:6a:
                    c8:2e:df:60:8e:df:60:a5:35:fe:f2:df:a9:93:61:
                    b4:4b:1d:b1:b2:a4:49:28:61:b7:7f:83:a5:24:2d:
                    85:9d:6d:3c:c5:bd:3a:22:be:8e:16:70:e3:68:3f:
                    82:5d:a9:e5:29:e5:6f:80:51:3f:f6:c6:e1:d0:71:
                    32:ee:dc:d2:a4:a1:c7:ae:2a:59:3d:70:40:d6:c8:
                    92:ac:06:db:e3:29:75:3e:76:43:09:66:3f:66:cd:
                    f0:c4:75:56:38:29:10:44:1d:94:01:65:6a:3d:ed:
                    c8:72:6a:a2:22:0a:91:8e:c0:ab:af:31:34:b6:a0:
                    63:31:4a:02:ec:8c:40:fa:b7:19:63:40:6a:4b:0f:
                    25:c1:03:49:ce:bd:e7:0d:a3:f7:6e:3d:e8:bc:42:
                    78:32:5f:ed:be:c3:d5:92:8a:b6:50:0e:86:a5:93:
                    7c:6f:b7:26:07:09:89:d2:93:d2:ca:00:05:ac:42:
                    98:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1F:B4:D0:96:0D:FB:C0:FB:2D:BB:5C:02:AF:AE:6F:F9:E4:58:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/805759e8-a6ef-3865-8207-214d202e26e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:0:75::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:70:ef:b6:2f:a6:ce:d0:06:11:f7:f6:4f:6f:48:05:92:1e:
         ee:f7:41:d0:3e:66:ce:12:77:34:d5:07:ee:2f:a6:ba:7e:b5:
         cd:74:e2:2c:3d:93:b1:ca:fa:e2:ed:79:f3:e1:50:59:1a:52:
         e6:9b:cc:95:57:39:24:51:8b:3b:4d:45:a4:a8:e6:da:c4:2f:
         5a:a5:4a:c3:03:e7:2e:66:ab:d5:bd:b5:9e:5c:a9:57:d2:00:
         fa:fc:8d:8c:df:ff:6a:52:0d:12:25:1e:3b:b8:b8:89:15:31:
         c6:52:f5:6f:e1:04:39:76:55:00:26:d6:80:05:0d:69:1c:61:
         e8:e2:c1:77:ec:d7:9f:e8:65:97:1d:c1:11:5d:cd:4d:b9:c3:
         65:91:0d:e8:57:57:42:ad:08:31:e0:4d:a4:19:54:1a:8c:a4:
         64:6d:5f:fc:e8:74:6e:a0:0b:55:c9:b0:53:b4:a1:f6:88:49:
         14:02:91:1f:9e:f2:a4:2a:3c:b5:a3:1b:35:71:02:83:28:f1:
         69:d8:63:e5:12:db:d6:48:6e:42:fc:f7:79:45:e9:a9:17:18:
         34:62:45:ad:44:b2:59:17:f0:a4:49:c7:ed:07:bc:51:f2:7b:
         83:a1:1a:24:76:13:e0:4c:e9:ca:87:fa:ab:6b:3c:49:33:66:
         a5:89:6e:f3
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEemp+rfrhUQAULEO8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTAyNDIwMDIyOFoXDTI1MDEyMjIxMDIyOFowLzEtMCsGA1UEAxMk
NTNiYWRhNWQtMjcwOC00MTI0LTljMzgtNWQ2ZmM2NjI2NGE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutPJyh2hTfue43BHFWtLoznxrho0r3jVQ5ML
qDX4nQiY7l7V1a1Ed0nJKgrXg7pfHHHt2MACOYH7Kgx2aq9daoLWnaXiRgjRbWrI
Lt9gjt9gpTX+8t+pk2G0Sx2xsqRJKGG3f4OlJC2FnW08xb06Ir6OFnDjaD+CXanl
KeVvgFE/9sbh0HEy7tzSpKHHripZPXBA1siSrAbb4yl1PnZDCWY/Zs3wxHVWOCkQ
RB2UAWVqPe3IcmqiIgqRjsCrrzE0tqBjMUoC7IxA+rcZY0BqSw8lwQNJzr3nDaP3
bj3ovEJ4Ml/tvsPVkoq2UA6GpZN8b7cmBwmJ0pPSygAFrEKYCQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFCQftNCWDfvA+y27XAKvrm/55FiFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODA1NzU5ZTgtYTZlZi0z
ODY1LTgyMDctMjE0ZDIwMmUyNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFWQAA
AHUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAB3Dvti+mztAGEff2T29IBZIe7vdB0D5mzhJ3NNUH7i+mun61
zXTiLD2Tscr64u158+FQWRpS5pvMlVc5JFGLO01FpKjm2sQvWqVKwwPnLmar1b21
nlypV9IA+vyNjN//alINEiUeO7i4iRUxxlL1b+EEOXZVACbWgAUNaRxh6OLBd+zX
n+hllx3BEV3NTbnDZZEN6FdXQq0IMeBNpBlUGoykZG1f/Oh0bqALVcmwU7Sh9ohJ
FAKRH57ypCo8taMbNXECgyjxadhj5RLb1khuQvz3eUXpqRcYNGJFrUSyWRfwpEnH
7Qe8UfJ7g6EaJHYT4Ezpyof6q2s8STNmpYlu8w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:06:58 2024 by rpki-client on console-fra.rpki-client.org