Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba7b6711-2a21-321e-be78-4698eaa39c26.roa
File:                     ba7b6711-2a21-321e-be78-4698eaa39c26.roa (raw, json)
Hash identifier:          IAp54ZT47qb3YYU041CK80Ps9JSFzlsB3TySTTM0SLc=
Subject key identifier:   D8:C6:8A:8F:81:D3:C7:DB:32:0D:CE:6A:FA:83:F6:3B:7B:CF:9C:38
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFBD9694DE70081C9095100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba7b6711-2a21-321e-be78-4698eaa39c26.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        2001:559:5a0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:d9:69:4d:e7:00:81:c9:09:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=5ccf72d2-de3a-4a1d-bfad-10def219ca77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:bf:c7:75:6a:dd:17:81:d4:f7:dc:c8:f3:
                    72:40:b5:5e:8a:4e:0f:e9:2f:6a:c8:e7:1f:ff:5a:
                    05:71:2f:11:94:89:c4:80:53:5c:41:79:df:c3:30:
                    95:00:83:e3:32:a6:7f:55:de:20:8d:13:05:99:28:
                    71:b4:12:67:ee:97:6d:5e:d4:f1:9f:42:0e:11:da:
                    fa:9f:a0:21:dc:53:78:1f:c0:0e:2f:23:98:da:42:
                    32:8f:8e:90:d7:55:d5:2f:90:5a:94:ab:bd:11:ce:
                    3b:28:b9:27:38:04:92:60:53:31:a0:18:a1:77:5b:
                    ca:2c:a6:cc:78:d1:a5:90:8b:c4:7b:c0:8b:51:43:
                    b0:c9:14:d5:b7:ee:44:1a:ae:3b:86:f8:36:4b:ae:
                    c5:0e:66:0d:d7:d1:9c:a2:79:6d:d9:6b:a1:19:2e:
                    77:af:c2:ca:dc:fa:f0:a8:c1:f1:ed:99:49:78:92:
                    bf:3c:74:e8:61:23:6d:79:7e:31:ec:08:be:b3:3f:
                    55:dd:31:01:2f:cf:a3:c8:cd:7e:e9:d8:83:26:6d:
                    68:f8:98:0a:6e:65:e3:61:58:ec:ef:ae:ce:5a:3e:
                    86:2b:1f:7a:71:51:45:af:d2:23:b7:df:c6:eb:48:
                    51:bf:1d:c6:5d:d1:85:8b:b0:92:ef:cb:78:79:43:
                    8c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C6:8A:8F:81:D3:C7:DB:32:0D:CE:6A:FA:83:F6:3B:7B:CF:9C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba7b6711-2a21-321e-be78-4698eaa39c26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:5a0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:c7:5e:7e:df:0c:0d:e3:f3:ce:c7:f7:59:10:25:ff:51:ab:
         4e:cc:13:00:4e:3d:20:0e:54:d1:d3:08:56:d2:84:1c:a8:9d:
         bc:c2:9e:95:ba:01:03:f4:e2:86:87:53:d7:b1:0e:ce:18:8c:
         e1:a8:1f:ad:a3:af:8e:9b:2a:0b:3b:e1:8d:2c:c1:9e:59:03:
         85:31:17:cc:46:6f:75:f6:a5:e7:a4:2e:d3:d6:30:d2:ce:6f:
         24:47:df:a6:b1:d8:94:0d:45:d8:0b:f8:bd:2d:b2:25:b9:3d:
         63:07:13:17:76:6a:51:eb:fa:eb:05:58:87:b4:b4:75:be:91:
         33:42:dd:ae:35:89:7d:9f:94:03:d1:59:e6:c4:4f:10:1c:cf:
         ea:37:1a:f7:81:86:87:04:f7:97:25:41:38:96:08:8e:3a:02:
         43:06:fc:44:9a:86:a0:2f:4e:c5:b8:52:80:d9:22:51:e8:0f:
         22:e7:b3:80:b6:a4:b9:0a:17:ea:ac:1a:95:6a:5e:b1:65:93:
         14:cf:e3:d6:f8:35:da:e3:e6:20:54:c3:6d:84:51:49:5c:bf:
         58:fa:cc:51:b3:17:b8:f7:d8:0d:0c:01:45:89:28:a4:59:be:
         14:f8:d2:77:a6:d3:4e:42:78:d1:cc:95:a5:6c:1c:e5:56:17:
         8e:53:43:90
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe++9lpTecAgckJUQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
NWNjZjcyZDItZGUzYS00YTFkLWJmYWQtMTBkZWYyMTljYTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvC/x3Vq3ReB1PfcyPNyQLVeik4P6S9qyOcf
/1oFcS8RlInEgFNcQXnfwzCVAIPjMqZ/Vd4gjRMFmShxtBJn7pdtXtTxn0IOEdr6
n6Ah3FN4H8AOLyOY2kIyj46Q11XVL5BalKu9Ec47KLknOASSYFMxoBihd1vKLKbM
eNGlkIvEe8CLUUOwyRTVt+5EGq47hvg2S67FDmYN19Gconlt2WuhGS53r8LK3Prw
qMHx7ZlJeJK/PHToYSNteX4x7Ai+sz9V3TEBL8+jyM1+6diDJm1o+JgKbmXjYVjs
767OWj6GKx96cVFFr9Ijt9/G60hRvx3GXdGFi7CS78t4eUOMbQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNjGio+B08fbMg3OavqD9jt7z5w4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmE3YjY3MTEtMmEyMS0z
MjFlLWJlNzgtNDY5OGVhYTM5YzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQWg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAInHXn7fDA3j887H91kQJf9Rq07MEwBOPSAOVNHTCFbShByonbzC
npW6AQP04oaHU9exDs4YjOGoH62jr46bKgs74Y0swZ5ZA4UxF8xGb3X2peekLtPW
MNLObyRH36ax2JQNRdgL+L0tsiW5PWMHExd2alHr+usFWIe0tHW+kTNC3a41iX2f
lAPRWebETxAcz+o3GveBhocE95clQTiWCI46AkMG/ESahqAvTsW4UoDZIlHoDyLn
s4C2pLkKF+qsGpVqXrFlkxTP49b4Ndrj5iBUw22EUUlcv1j6zFGzF7j32A0MAUWJ
KKRZvhT40nem005CeNHMlaVsHOVWF45TQ5A=
-----END CERTIFICATE-----
Generated at Sun Dec 22 13:16:17 2024 by rpki-client on console-ams.rpki-client.org