Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a470ba34-35d7-3f39-8fe8-09b2be3e5c42.roa
File:                     a470ba34-35d7-3f39-8fe8-09b2be3e5c42.roa (raw, json)
Hash identifier:          nJZiChIcC1GckvZddMl68PY1/sVObZDqJdDM4jfBLf4=
Subject key identifier:   7C:57:38:72:FE:BB:72:B7:07:E0:E5:79:03:1A:99:90:07:0B:0C:3A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAFF29FAE9FB906CAA39E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a470ba34-35d7-3f39-8fe8-09b2be3e5c42.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33287
IP address blocks:        2001:559:8463::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:f2:9f:ae:9f:b9:06:ca:a3:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=1c9df0e5-d188-47eb-91ec-727cf0dd2b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:91:52:a0:3f:f9:d2:7d:ba:47:e9:3d:05:
                    8d:ed:65:be:0e:e3:14:d4:7d:1c:07:0a:47:3b:88:
                    49:b6:01:ee:ea:8d:d5:82:ef:f8:91:36:7e:7a:7c:
                    7f:ca:9a:bc:1f:97:88:f9:1d:c9:68:dc:82:bf:75:
                    97:db:18:fb:66:c5:44:a5:a7:d0:47:ac:18:b8:b4:
                    27:9f:05:f1:71:9e:c1:50:f5:91:38:e6:29:51:6e:
                    be:9c:84:9e:72:c5:fa:cc:d5:d7:dc:2d:ea:7f:98:
                    2f:92:f0:34:19:25:a2:c4:4f:b2:81:64:8c:e9:e1:
                    c4:a8:9b:32:57:bc:c3:a9:66:0a:70:b2:cf:cf:c4:
                    34:f3:61:c2:8c:f7:ef:07:68:94:57:97:7b:b1:3d:
                    8c:96:28:90:4e:2e:b5:8e:b1:9c:34:2b:5b:f3:9b:
                    60:bb:ed:6a:2a:63:21:92:44:5b:46:74:1e:fe:2e:
                    b1:87:58:c8:e8:4e:4f:52:6e:57:b1:75:6e:c7:e2:
                    7a:ec:f7:af:7b:8c:f8:07:34:1c:6e:c7:fb:67:35:
                    5d:af:04:87:9b:b2:08:db:fa:8f:81:71:a3:2d:13:
                    d0:1a:d0:22:f7:7e:41:2c:34:84:6f:b2:47:7a:a0:
                    6d:58:1e:cf:18:94:19:76:9f:18:0e:a5:3a:69:45:
                    b5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:57:38:72:FE:BB:72:B7:07:E0:E5:79:03:1A:99:90:07:0B:0C:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a470ba34-35d7-3f39-8fe8-09b2be3e5c42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8463::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d2:1a:99:db:a9:c0:fa:32:c5:c3:eb:7b:a2:14:59:05:23:
         c2:a1:72:72:53:52:3e:17:ca:ef:1b:89:83:50:20:3d:68:c0:
         b3:6b:7e:c8:c5:a4:4d:61:50:08:40:c8:1d:39:38:75:81:f5:
         8b:56:df:6a:56:e1:73:2b:00:2d:b8:a2:6a:a3:06:b8:c5:bf:
         a4:83:de:8d:1c:d6:e7:91:ea:6c:57:17:6b:2a:5b:b8:cf:76:
         f1:d5:ea:05:b6:e1:b2:fa:c3:7c:f0:f3:27:69:ab:24:ec:6a:
         f8:b5:11:f1:df:74:9f:65:0b:59:b5:24:4c:96:a8:58:57:7f:
         0e:55:09:07:5b:e3:73:b6:53:e9:61:0c:cb:b5:55:ae:ec:48:
         78:89:bf:94:49:f8:5c:80:96:36:19:26:3f:e3:95:cd:41:e0:
         fb:f1:8e:a0:6f:53:b6:d8:5e:b1:e8:ff:59:a4:98:27:04:7c:
         ff:fb:31:9d:b6:6e:44:00:ce:78:2f:84:a9:a7:66:20:23:d5:
         d5:3b:47:62:1b:92:b0:43:72:f5:c3:74:2d:fe:27:cb:41:17:
         f2:c4:fb:31:62:65:3b:33:ca:10:11:de:f4:8d:33:75:fb:76:
         2d:a1:87:24:3c:53:35:17:7e:04:b9:1b:30:94:ac:2b:f5:b5:
         ac:33:cf:d2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfr/Kfrp+5BsqjnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
MWM5ZGYwZTUtZDE4OC00N2ViLTkxZWMtNzI3Y2YwZGQyYjkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpyRUqA/+dJ9ukfpPQWN7WW+DuMU1H0cBwpH
O4hJtgHu6o3Vgu/4kTZ+enx/ypq8H5eI+R3JaNyCv3WX2xj7ZsVEpafQR6wYuLQn
nwXxcZ7BUPWROOYpUW6+nISecsX6zNXX3C3qf5gvkvA0GSWixE+ygWSM6eHEqJsy
V7zDqWYKcLLPz8Q082HCjPfvB2iUV5d7sT2MliiQTi61jrGcNCtb85tgu+1qKmMh
kkRbRnQe/i6xh1jI6E5PUm5XsXVux+J67Peve4z4BzQcbsf7ZzVdrwSHm7II2/qP
gXGjLRPQGtAi935BLDSEb7JHeqBtWB7PGJQZdp8YDqU6aUW1PwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHxXOHL+u3K3B+DleQMamZAHCww6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQ3MGJhMzQtMzVkNy0z
ZjM5LThmZTgtMDliMmJlM2U1YzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYRj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA/SGpnbqcD6MsXD63uiFFkFI8KhcnJTUj4Xyu8biYNQID1owLNr
fsjFpE1hUAhAyB05OHWB9YtW32pW4XMrAC24omqjBrjFv6SD3o0c1ueR6mxXF2sq
W7jPdvHV6gW24bL6w3zw8ydpqyTsavi1EfHfdJ9lC1m1JEyWqFhXfw5VCQdb43O2
U+lhDMu1Va7sSHiJv5RJ+FyAljYZJj/jlc1B4PvxjqBvU7bYXrHo/1mkmCcEfP/7
MZ22bkQAzngvhKmnZiAj1dU7R2IbkrBDcvXDdC3+J8tBF/LE+zFiZTszyhAR3vSN
M3X7di2hhyQ8UzUXfgS5GzCUrCv1tawzz9I=
-----END CERTIFICATE-----
Generated at Sat May 4 14:53:50 2024 by rpki-client on console-fra.rpki-client.org