Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d827d7fd-d9e0-39e7-b402-2f30a4f0f957.roa
File:                     d827d7fd-d9e0-39e7-b402-2f30a4f0f957.roa (raw, json)
Hash identifier:          9WipGJJlD/CYiulr0U21WikNu08S1aP0p27nx1TOrOU=
Subject key identifier:   F8:68:AB:13:A1:05:A2:D8:AF:E0:94:B5:69:E7:F4:B3:44:D3:8C:DC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC1B3985236D26AA570A3C
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d827d7fd-d9e0-39e7-b402-2f30a4f0f957.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33287
IP address blocks:        2001:559:80a4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:1b:39:85:23:6d:26:aa:57:0a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=8d236ca1-830b-4ad7-ad3e-cf498ce882fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:e6:1c:6a:19:66:ca:67:e7:e0:29:73:05:
                    25:df:bb:3e:c5:01:7e:eb:f5:34:ed:a7:47:a8:fc:
                    54:bd:3a:47:bd:01:28:97:26:ab:bb:a0:c8:a5:d6:
                    a1:32:83:07:93:d1:3d:3c:05:d2:de:71:33:c1:e4:
                    0f:b6:ba:b7:0e:3d:07:c2:e4:84:c8:c7:73:60:bd:
                    ce:a0:5d:68:a5:b9:24:db:40:22:2c:a9:f6:d5:24:
                    67:06:61:e1:24:4c:0b:14:a1:e3:8b:49:17:09:5a:
                    b0:11:b0:b6:80:6e:4c:ab:df:f3:56:78:3e:d2:ca:
                    78:96:ad:f0:62:22:2a:80:a7:50:6c:55:9c:4f:8a:
                    bd:1c:47:e0:b8:1a:b0:35:c9:91:97:79:ac:01:ab:
                    26:1c:d1:62:42:be:1c:32:ec:57:dd:d9:0e:82:ce:
                    6c:32:c0:62:ee:84:37:39:28:15:2b:f8:4c:e1:5f:
                    3a:51:df:9f:5d:06:07:45:a0:8c:9f:5d:53:a1:de:
                    d5:2c:ff:d6:be:46:1a:13:27:7f:d6:c4:c9:1b:00:
                    11:81:a3:e8:cc:0b:95:ec:10:dc:3a:ab:a5:c0:3b:
                    f1:5d:eb:d9:e6:14:7c:aa:d6:5e:10:c4:55:3a:1e:
                    e8:7c:c3:04:fe:1d:4d:2e:0b:22:c9:39:85:92:d5:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:68:AB:13:A1:05:A2:D8:AF:E0:94:B5:69:E7:F4:B3:44:D3:8C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d827d7fd-d9e0-39e7-b402-2f30a4f0f957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:80a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:34:31:50:7b:1f:42:ea:96:ab:fd:8d:29:68:9e:a0:24:13:
         14:db:c7:bb:09:0d:9e:64:be:b8:43:76:98:1f:06:7d:65:e7:
         5c:40:be:a2:05:74:e3:1a:29:71:ec:b3:a8:4f:df:32:4d:03:
         91:4d:b9:a0:9f:42:d8:6f:62:bf:ff:16:1c:1d:19:13:43:30:
         6d:1f:ae:24:c0:43:59:3e:7c:8d:5d:34:c2:93:95:a5:f3:89:
         39:63:5b:5e:76:d3:29:c0:c0:64:5b:a5:ad:a1:7c:a8:28:51:
         67:c5:32:79:21:37:15:12:12:3d:5e:16:85:b8:22:0e:23:3d:
         b2:a3:52:3e:1d:67:4e:2b:fb:e7:e7:bb:8d:b8:e2:37:60:6f:
         f8:1a:92:9b:d9:98:8e:1e:d9:08:0e:68:67:f9:b2:03:e0:cc:
         f6:67:53:a9:82:2d:b7:9e:2e:cc:ea:09:ed:cf:ee:fc:a2:a5:
         d0:e9:68:99:30:15:cb:52:bd:4a:88:16:dd:fe:94:6d:b7:64:
         f9:ab:e9:a7:9c:2b:fe:ae:97:da:f0:1b:10:e1:6a:c1:1f:03:
         0a:9f:7f:f1:53:e9:ed:ac:ec:02:b4:1f:41:86:8d:ea:d0:ac:
         53:43:90:f5:c3:8d:0d:77:82:58:0b:c0:ad:67:28:75:9f:3f:
         b2:5f:80:31
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfrBs5hSNtJqpXCjwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
OGQyMzZjYTEtODMwYi00YWQ3LWFkM2UtY2Y0OThjZTg4MmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcTmHGoZZspn5+ApcwUl37s+xQF+6/U07adH
qPxUvTpHvQEolyaru6DIpdahMoMHk9E9PAXS3nEzweQPtrq3Dj0HwuSEyMdzYL3O
oF1opbkk20AiLKn21SRnBmHhJEwLFKHji0kXCVqwEbC2gG5Mq9/zVng+0sp4lq3w
YiIqgKdQbFWcT4q9HEfguBqwNcmRl3msAasmHNFiQr4cMuxX3dkOgs5sMsBi7oQ3
OSgVK/hM4V86Ud+fXQYHRaCMn11Tod7VLP/WvkYaEyd/1sTJGwARgaPozAuV7BDc
OqulwDvxXevZ5hR8qtZeEMRVOh7ofMME/h1NLgsiyTmFktUlvwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPhoqxOhBaLYr+CUtWnn9LNE04zcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDgyN2Q3ZmQtZDllMC0z
OWU3LWI0MDItMmYzMGE0ZjBmOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYCk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACU0MVB7H0Lqlqv9jSlonqAkExTbx7sJDZ5kvrhDdpgfBn1l51xA
vqIFdOMaKXHss6hP3zJNA5FNuaCfQthvYr//FhwdGRNDMG0friTAQ1k+fI1dNMKT
laXziTljW1520ynAwGRbpa2hfKgoUWfFMnkhNxUSEj1eFoW4Ig4jPbKjUj4dZ04r
++fnu4244jdgb/gakpvZmI4e2QgOaGf5sgPgzPZnU6mCLbeeLszqCe3P7vyipdDp
aJkwFctSvUqIFt3+lG23ZPmr6aecK/6ul9rwGxDhasEfAwqff/FT6e2s7AK0H0GG
jerQrFNDkPXDjQ13glgLwK1nKHWfP7JfgDE=
-----END CERTIFICATE-----
Generated at Sun May 5 02:47:28 2024 by rpki-client on console-fra.rpki-client.org