Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88bdf4aa-f69e-3e93-a08e-ff3b28f7ac2e.roa
File:                     88bdf4aa-f69e-3e93-a08e-ff3b28f7ac2e.roa (raw, json)
Hash identifier:          GPSvUXNcpWWGmht9i/j8y2n7TVw9hDWJXlKankW0+7w=
Subject key identifier:   B2:FC:AB:3C:36:71:A2:FB:F6:5B:E5:84:8B:54:F6:50:80:D6:0B:9A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D6E6713041672098E29E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88bdf4aa-f69e-3e93-a08e-ff3b28f7ac2e.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33651
IP address blocks:        2001:559:832e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:6e:67:13:04:16:72:09:8e:29:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=d87863b5-950f-463a-bc49-e28ac5664bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:24:99:a7:41:54:03:68:f9:b5:24:f4:c4:
                    c6:11:a5:c1:89:22:0b:0c:0d:87:99:20:0e:af:bf:
                    b6:71:b6:1f:e8:bd:e3:8e:6d:67:74:6a:cb:fb:eb:
                    bc:9f:45:fd:49:db:3c:1e:ff:82:9c:89:45:7e:a4:
                    85:d1:3c:02:37:ed:a5:9a:34:d4:b8:43:1f:6e:6a:
                    bb:16:d5:9e:ea:55:ab:49:30:f9:32:c6:29:d5:fa:
                    8f:ef:00:32:a1:0a:3e:0f:4e:68:d2:69:e5:b9:bd:
                    c1:73:0d:04:04:40:03:7f:3c:0d:59:44:95:37:34:
                    0d:62:e8:e9:89:03:fc:ea:bd:7a:17:66:81:ca:63:
                    7f:e8:55:6a:61:e6:ed:6e:37:e4:59:bb:d3:cb:93:
                    80:ba:6b:dd:9e:ba:0a:fa:a8:5e:f4:54:2e:3e:61:
                    fd:c5:4a:f2:33:16:49:57:36:1a:08:95:7f:35:91:
                    67:a6:7e:1c:26:3d:8a:32:a2:c3:55:5b:f4:4b:dd:
                    30:4f:60:a2:1b:ee:c7:8c:56:5d:e9:e0:32:59:02:
                    73:4c:f6:fb:4a:a6:aa:b4:5d:96:36:1f:1f:52:e9:
                    f8:00:39:ab:9c:df:76:11:4b:b0:2e:af:1e:18:89:
                    12:68:0b:e3:be:d4:77:1b:58:a5:94:ed:01:89:a5:
                    67:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FC:AB:3C:36:71:A2:FB:F6:5B:E5:84:8B:54:F6:50:80:D6:0B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88bdf4aa-f69e-3e93-a08e-ff3b28f7ac2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:832e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:10:23:eb:c2:35:77:07:ab:dc:78:43:19:a3:ec:a1:16:f9:
         86:37:a4:4f:2c:a5:7b:fa:72:db:6e:e0:ea:0a:ce:ea:25:bd:
         42:ad:d0:3f:80:45:56:d5:4d:c9:e5:31:38:be:99:d6:35:59:
         4f:e4:96:0a:81:aa:53:bd:7c:62:dc:ad:fd:a1:f0:fa:95:79:
         6d:fb:24:6b:c6:db:ba:5b:92:2a:92:73:7f:69:8e:6b:ae:77:
         bc:80:71:ba:fa:fd:7c:20:b5:c9:81:ce:94:b9:d6:97:4d:b3:
         ce:43:59:79:92:49:6e:67:dd:89:89:9a:8a:ff:6d:55:7d:72:
         f7:59:a0:2f:c9:3a:84:34:52:32:ff:c9:73:a2:1b:be:99:ca:
         f6:b1:88:d2:d8:59:61:c9:fd:29:ab:76:5b:9f:13:78:c0:e1:
         c1:45:63:1a:86:75:7b:44:59:e2:04:d0:02:55:61:fe:f3:f4:
         0c:b9:7d:8f:46:58:4f:16:a8:5d:42:12:3e:1c:e7:8f:26:18:
         84:51:65:bc:8c:43:86:96:c2:02:d4:3c:93:51:7e:79:93:c8:
         3a:18:00:58:b7:73:6e:f8:31:25:55:23:e9:d1:c5:95:ed:b3:
         2a:05:2c:65:3c:2f:9c:87:2c:8d:90:f4:c6:a7:77:54:c4:83:
         83:c7:86:1b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebW5nEwQWcgmOKeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZDg3ODYzYjUtOTUwZi00NjNhLWJjNDktZTI4YWM1NjY0YmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE8kmadBVANo+bUk9MTGEaXBiSILDA2HmSAO
r7+2cbYf6L3jjm1ndGrL++u8n0X9Sds8Hv+CnIlFfqSF0TwCN+2lmjTUuEMfbmq7
FtWe6lWrSTD5MsYp1fqP7wAyoQo+D05o0mnlub3Bcw0EBEADfzwNWUSVNzQNYujp
iQP86r16F2aBymN/6FVqYebtbjfkWbvTy5OAumvdnroK+qhe9FQuPmH9xUryMxZJ
VzYaCJV/NZFnpn4cJj2KMqLDVVv0S90wT2CiG+7HjFZd6eAyWQJzTPb7SqaqtF2W
Nh8fUun4ADmrnN92EUuwLq8eGIkSaAvjvtR3G1illO0BiaVn4QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLL8qzw2caL79lvlhItU9lCA1guaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODhiZGY0YWEtZjY5ZS0z
ZTkzLWEwOGUtZmYzYjI4ZjdhYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYMu
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACsQI+vCNXcHq9x4Qxmj7KEW+YY3pE8spXv6cttu4OoKzuolvUKt
0D+ARVbVTcnlMTi+mdY1WU/klgqBqlO9fGLcrf2h8PqVeW37JGvG27pbkiqSc39p
jmuud7yAcbr6/XwgtcmBzpS51pdNs85DWXmSSW5n3YmJmor/bVV9cvdZoC/JOoQ0
UjL/yXOiG76ZyvaxiNLYWWHJ/SmrdlufE3jA4cFFYxqGdXtEWeIE0AJVYf7z9Ay5
fY9GWE8WqF1CEj4c548mGIRRZbyMQ4aWwgLUPJNRfnmTyDoYAFi3c274MSVVI+nR
xZXtsyoFLGU8L5yHLI2Q9Mand1TEg4PHhhs=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:57:12 2025 by rpki-client