Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86ede52a-464e-37c5-be82-ef5b20734a85.roa
File:                     86ede52a-464e-37c5-be82-ef5b20734a85.roa (raw, json)
Hash identifier:          S4G2MvjQUPO5Xvk2EuD8r8wZbpgKSrzsN3mYeoojrtE=
Subject key identifier:   DC:BE:FF:5B:EF:64:D5:00:D0:E2:1A:11:55:FE:33:B5:08:1E:EA:86
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF80EA54F75393997DF6820
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86ede52a-464e-37c5-be82-ef5b20734a85.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33657
IP address blocks:        2001:559:794::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:0e:a5:4f:75:39:39:97:df:68:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=9c6c66c2-8919-4d3a-a1f7-5a1a7d4dee27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:55:e3:f2:1e:95:93:2a:16:f5:91:29:8d:
                    af:57:5b:77:2e:e8:2f:1b:91:db:fc:92:9d:69:f5:
                    45:a4:33:6c:90:21:0f:2f:04:66:1e:be:3c:21:7f:
                    fe:b6:9d:35:51:fe:1a:73:d1:12:d5:6e:57:bf:d2:
                    9e:d3:46:f4:37:f0:cd:6a:1b:86:2e:cd:d1:0f:62:
                    44:2f:f3:ed:34:5e:5d:9b:ae:9d:84:60:7e:da:aa:
                    00:40:13:c7:82:44:98:ab:da:e7:1e:d7:91:27:ff:
                    74:de:3e:3e:70:a6:6f:80:53:24:16:79:95:21:9c:
                    f7:3d:a7:70:47:a0:e5:04:3b:8d:28:20:8e:50:97:
                    29:35:f4:4e:50:e5:fd:7d:d1:76:30:71:23:c1:01:
                    a0:2d:8a:43:e2:57:83:67:9f:55:5f:4a:c1:67:a1:
                    c3:d7:01:6c:d2:c1:1a:3f:d9:65:d2:0c:e9:e0:9e:
                    e6:3d:1b:fe:22:5d:7a:cc:25:c3:62:d4:69:0b:3d:
                    53:7c:fa:94:7b:a0:07:1c:46:39:42:4a:9c:24:c1:
                    54:e7:e5:14:ef:e6:6c:2b:db:d2:17:38:cc:88:b4:
                    b8:61:77:08:8e:44:28:51:92:ca:76:31:7a:6c:53:
                    21:f9:c9:06:d5:e0:e9:2e:6a:f1:3e:b6:87:15:5e:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BE:FF:5B:EF:64:D5:00:D0:E2:1A:11:55:FE:33:B5:08:1E:EA:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86ede52a-464e-37c5-be82-ef5b20734a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:794::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:21:14:ed:7f:d5:ec:67:de:d4:c6:38:ca:db:48:e2:fb:da:
         46:9a:31:5e:30:d3:44:8d:7c:c8:b0:14:d9:ed:87:af:48:09:
         3c:0d:9e:24:57:16:ab:12:8a:ef:c2:af:e9:3c:78:46:53:c6:
         15:c8:22:32:18:1c:62:f9:72:4f:ee:f8:dd:e1:c5:ee:f2:c6:
         e1:b8:01:6e:72:d2:b6:62:d3:09:1a:ac:e3:11:d9:9c:c0:8b:
         1c:89:30:f5:78:b4:5e:0a:61:49:e0:b5:05:3a:8b:74:c4:f0:
         a4:01:52:59:a8:78:f6:e4:3e:56:7a:45:99:8d:4f:03:22:93:
         32:d7:5a:ef:8c:49:92:50:24:08:e5:c4:f1:f0:43:c9:8e:57:
         cf:ba:ee:a4:c3:5a:ba:0c:32:e9:88:d5:f1:7e:55:72:47:4e:
         6c:cc:e4:dd:21:70:66:51:c7:d2:08:46:1a:0f:33:89:84:68:
         f1:ae:db:98:58:ab:8f:e7:87:83:8d:ed:0e:2b:49:1a:5a:ba:
         a0:f1:fb:44:12:c3:88:2f:13:04:a9:c9:29:ef:b8:29:11:ad:
         d2:61:60:d0:64:3f:92:00:73:71:99:5a:f2:a3:1f:41:3f:7c:
         98:2b:29:72:a0:4c:71:03:f7:2f:bc:10:b8:05:4f:a1:29:2b:
         6e:f8:7c:f7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++A6lT3U5OZffaCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
OWM2YzY2YzItODkxOS00ZDNhLWExZjctNWExYTdkNGRlZTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll5V4/IelZMqFvWRKY2vV1t3LugvG5Hb/JKd
afVFpDNskCEPLwRmHr48IX/+tp01Uf4ac9ES1W5Xv9Ke00b0N/DNahuGLs3RD2JE
L/PtNF5dm66dhGB+2qoAQBPHgkSYq9rnHteRJ/903j4+cKZvgFMkFnmVIZz3Padw
R6DlBDuNKCCOUJcpNfROUOX9fdF2MHEjwQGgLYpD4leDZ59VX0rBZ6HD1wFs0sEa
P9ll0gzp4J7mPRv+Il16zCXDYtRpCz1TfPqUe6AHHEY5QkqcJMFU5+UU7+ZsK9vS
FzjMiLS4YXcIjkQoUZLKdjF6bFMh+ckG1eDpLmrxPraHFV7nBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNy+/1vvZNUA0OIaEVX+M7UIHuqGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODZlZGU1MmEtNDY0ZS0z
N2M1LWJlODItZWY1YjIwNzM0YTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQeU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHIhFO1/1exn3tTGOMrbSOL72kaaMV4w00SNfMiwFNnth69ICTwN
niRXFqsSiu/Cr+k8eEZTxhXIIjIYHGL5ck/u+N3hxe7yxuG4AW5y0rZi0wkarOMR
2ZzAixyJMPV4tF4KYUngtQU6i3TE8KQBUlmoePbkPlZ6RZmNTwMikzLXWu+MSZJQ
JAjlxPHwQ8mOV8+67qTDWroMMumI1fF+VXJHTmzM5N0hcGZRx9IIRhoPM4mEaPGu
25hYq4/nh4ON7Q4rSRpauqDx+0QSw4gvEwSpySnvuCkRrdJhYNBkP5IAc3GZWvKj
H0E/fJgrKXKgTHED9y+8ELgFT6EpK274fPc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:29:19 2024 by rpki-client on console-fra.rpki-client.org