Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c548df1e-079e-35d7-8eba-d31fbfdf5d64.roa
File:                     c548df1e-079e-35d7-8eba-d31fbfdf5d64.roa (raw, json)
Hash identifier:          3dPHqPlibBnwAEilzhv2WHrD5k6ZBg+utTDLWmCq0K0=
Subject key identifier:   E1:1D:6D:AB:56:38:95:DE:B1:7D:8E:D6:DA:EA:22:73:21:41:63:38
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7EA638020D495A8943E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c548df1e-079e-35d7-8eba-d31fbfdf5d64.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33287
IP address blocks:        2001:559:c3b2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:ea:63:80:20:d4:95:a8:94:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=5c9db3ab-d16d-4d36-a304-26c7ce724183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f3:30:73:ee:ab:35:51:73:d3:71:27:8b:d2:
                    39:71:2f:4d:6c:44:64:64:6c:d9:b7:49:23:63:5f:
                    f9:00:8f:a4:38:3b:4c:ed:7d:46:28:98:f6:54:17:
                    4c:d4:e8:cb:9f:1e:d3:a3:ad:b1:70:9e:7a:50:ce:
                    b0:e3:e8:6d:3a:ff:95:a9:2f:7d:2d:fd:aa:3a:e9:
                    13:1a:39:80:cd:96:99:07:d9:ab:c4:44:2b:71:4b:
                    78:23:3c:ee:ae:2c:a8:89:ac:29:88:97:95:66:64:
                    92:37:c9:ae:f3:89:4e:34:06:e8:90:78:35:d8:1b:
                    67:ae:9c:ba:da:c6:70:7b:a2:14:ba:24:dc:05:bd:
                    da:5d:bc:14:21:2a:fe:b9:d8:3c:ff:f8:64:94:b5:
                    04:ac:e3:0a:f4:57:9c:79:be:31:df:70:51:f6:39:
                    8a:77:ea:21:a2:9d:36:3f:04:8e:27:27:f3:9c:1e:
                    75:aa:86:bd:f3:f1:f7:2d:d4:a0:21:ab:63:a6:2b:
                    f7:7e:ec:ec:7e:be:fe:2d:5e:79:70:26:a7:2a:19:
                    5f:d6:f8:7b:f7:47:45:df:71:90:54:5d:a4:8f:2d:
                    0a:88:0c:f8:4d:7e:97:fe:66:28:05:60:ae:5b:eb:
                    d8:72:0e:94:12:4d:0f:47:c1:ae:92:77:19:63:4b:
                    c0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1D:6D:AB:56:38:95:DE:B1:7D:8E:D6:DA:EA:22:73:21:41:63:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c548df1e-079e-35d7-8eba-d31fbfdf5d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c3b2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:c9:15:90:c7:a9:eb:7d:6d:27:07:8a:f2:76:44:28:6d:a7:
         99:06:95:06:1b:b6:2b:60:b8:e9:9d:a6:7e:67:a3:ba:e8:ce:
         69:ce:43:95:0b:b3:4f:db:34:24:33:62:3c:dd:30:3d:5b:39:
         28:6f:53:83:ac:a8:df:57:f9:c3:6b:b1:fd:03:f0:b5:b2:18:
         a5:07:ba:25:52:65:71:20:be:63:8b:48:03:40:8b:c9:f1:fd:
         6f:ec:5b:c4:99:51:a4:42:ee:31:e4:60:ec:c9:13:6d:1a:82:
         01:d7:27:d4:fd:97:c4:25:21:6d:f8:10:06:9c:ca:a6:1a:af:
         08:2b:6b:e3:e0:8f:ae:3d:3c:91:5f:a8:59:56:ce:88:b5:63:
         65:6d:0d:e9:8d:b8:64:01:6d:69:7f:83:83:99:45:c1:24:e0:
         10:b8:a9:76:55:82:07:09:02:ed:25:a5:f3:74:6e:aa:51:2b:
         65:28:32:b8:b3:77:3f:d2:86:1a:65:dd:12:0c:a6:0d:6e:84:
         37:87:cd:57:60:1d:13:36:75:8f:13:c0:25:29:4e:15:1c:d6:
         59:8c:d3:85:83:d8:3e:af:a2:8a:7b:5b:6c:8a:a6:14:af:a2:
         f4:78:d6:23:fc:e4:52:33:25:fb:7d:b8:50:21:01:c5:ee:07:
         38:23:8f:94
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+9+pjgCDUlaiUPgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
NWM5ZGIzYWItZDE2ZC00ZDM2LWEzMDQtMjZjN2NlNzI0MTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/Mwc+6rNVFz03Eni9I5cS9NbERkZGzZt0kj
Y1/5AI+kODtM7X1GKJj2VBdM1OjLnx7To62xcJ56UM6w4+htOv+VqS99Lf2qOukT
GjmAzZaZB9mrxEQrcUt4IzzuriyoiawpiJeVZmSSN8mu84lONAbokHg12Btnrpy6
2sZwe6IUuiTcBb3aXbwUISr+udg8//hklLUErOMK9Feceb4x33BR9jmKd+ohop02
PwSOJyfznB51qoa98/H3LdSgIatjpiv3fuzsfr7+LV55cCanKhlf1vh790dF33GQ
VF2kjy0KiAz4TX6X/mYoBWCuW+vYcg6UEk0PR8GukncZY0vAuQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOEdbatWOJXesX2O1trqInMhQWM4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzU0OGRmMWUtMDc5ZS0z
NWQ3LThlYmEtZDMxZmJmZGY1ZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcOy
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALXJFZDHqet9bScHivJ2RChtp5kGlQYbtitguOmdpn5no7rozmnO
Q5ULs0/bNCQzYjzdMD1bOShvU4OsqN9X+cNrsf0D8LWyGKUHuiVSZXEgvmOLSANA
i8nx/W/sW8SZUaRC7jHkYOzJE20aggHXJ9T9l8QlIW34EAacyqYarwgra+Pgj649
PJFfqFlWzoi1Y2VtDemNuGQBbWl/g4OZRcEk4BC4qXZVggcJAu0lpfN0bqpRK2Uo
Mrizdz/Shhpl3RIMpg1uhDeHzVdgHRM2dY8TwCUpThUc1lmM04WD2D6voop7W2yK
phSvovR41iP85FIzJft9uFAhAcXuBzgjj5Q=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:05:29 2024 by rpki-client on console-ams.rpki-client.org