Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d920a26e-e8ba-3e79-a3b8-aa738576c422.roa
File:                     d920a26e-e8ba-3e79-a3b8-aa738576c422.roa (raw, json)
Hash identifier:          mRwFsavBnorAzi765Nqv3nU4FILbjlXB2HwJ1FqXjnk=
Subject key identifier:   D0:7A:C8:B7:E4:D3:66:94:EB:F9:8F:55:86:19:11:6C:87:92:C1:4A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7380055A219950C132940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d920a26e-e8ba-3e79-a3b8-aa738576c422.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        2001:559:fe::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:38:00:55:a2:19:95:0c:13:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=f6cd0b96-b933-4d16-8a05-4e48d400775d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:41:33:35:1a:37:9d:3b:30:cf:e0:62:a4:9e:
                    ee:8f:55:f2:45:51:cb:2b:24:ba:1a:01:7c:1d:1c:
                    5d:22:09:fe:30:99:f4:76:63:93:28:c6:bc:4a:35:
                    f2:6c:ce:8c:af:ef:3f:27:77:44:fa:2d:70:23:30:
                    dc:fc:07:3c:e8:47:11:b4:fa:d2:70:d4:e8:63:59:
                    ea:3b:90:8e:c4:43:98:d3:01:82:40:4d:41:bb:a7:
                    6a:c1:cb:68:2e:e5:55:c4:30:11:ea:fc:e6:14:20:
                    c7:ab:b1:b9:5e:2b:fb:31:12:c2:c3:4f:33:15:34:
                    d7:ec:29:99:36:c3:4c:c0:1b:5c:f4:eb:9c:7d:36:
                    88:9c:d5:89:9a:e7:6b:83:ff:0a:39:c6:6b:9b:f7:
                    6f:83:62:11:d2:fb:01:ee:60:91:0d:ba:29:27:72:
                    44:67:7f:d5:3b:63:43:d6:66:53:9f:82:5b:c5:ee:
                    bb:16:78:0c:ea:42:d4:d0:0d:82:c8:3a:06:6f:d3:
                    e7:5a:c6:94:8e:46:c8:6f:81:83:e9:31:73:02:0a:
                    2d:68:84:90:c7:cc:75:23:3f:56:27:fa:fe:c0:27:
                    92:d5:16:6f:b9:3b:f8:a3:b5:09:8e:a4:23:eb:6d:
                    fc:a7:18:30:23:bc:8d:4e:ed:8a:5b:65:ff:46:d3:
                    cf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7A:C8:B7:E4:D3:66:94:EB:F9:8F:55:86:19:11:6C:87:92:C1:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d920a26e-e8ba-3e79-a3b8-aa738576c422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:85:46:3d:3e:3c:a5:d5:f3:82:22:ba:a4:12:7c:30:7a:3a:
         0a:21:a2:1d:ec:20:2f:dc:df:28:cf:62:d1:8c:9e:90:39:1f:
         78:7f:89:6d:be:0e:50:60:75:9d:d1:0f:79:b4:a4:61:5b:62:
         0f:2b:86:62:81:36:bb:2a:ac:35:06:08:d8:07:b2:cd:2b:a3:
         d5:9d:31:92:7d:c1:ab:59:6a:80:e2:c2:5d:66:79:95:f8:08:
         2d:b3:41:46:22:f6:c1:ae:0b:94:6e:6b:85:fc:93:aa:54:f4:
         34:af:aa:21:ed:1e:e3:96:97:07:ee:71:bf:14:db:ed:99:92:
         73:fc:9f:4b:87:f3:75:37:ab:fc:31:54:20:4c:33:28:93:c0:
         cb:79:08:13:ca:48:de:37:65:92:74:2b:5c:11:16:7f:62:f4:
         9b:2d:17:e8:48:dc:3e:36:b3:e7:8a:19:d6:21:99:33:a2:cd:
         20:ab:3d:33:f6:05:03:4d:2b:6c:64:82:6e:f5:00:48:41:a5:
         74:81:81:ac:b6:cb:0b:15:4c:0e:b4:40:27:44:ea:af:39:82:
         1a:2e:a6:7f:d0:d3:5e:83:ed:d8:28:50:fa:5e:9a:1f:e4:75:
         06:14:e5:f9:8e:50:10:f3:52:3e:54:46:12:c9:8c:46:28:a9:
         4d:91:0b:60
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEe+9zgAVaIZlQwTKUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk
ZjZjZDBiOTYtYjkzMy00ZDE2LThhMDUtNGU0OGQ0MDA3NzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEEzNRo3nTswz+BipJ7uj1XyRVHLKyS6GgF8
HRxdIgn+MJn0dmOTKMa8SjXybM6Mr+8/J3dE+i1wIzDc/Ac86EcRtPrScNToY1nq
O5COxEOY0wGCQE1Bu6dqwctoLuVVxDAR6vzmFCDHq7G5Xiv7MRLCw08zFTTX7CmZ
NsNMwBtc9OucfTaInNWJmudrg/8KOcZrm/dvg2IR0vsB7mCRDbopJ3JEZ3/VO2ND
1mZTn4Jbxe67FngM6kLU0A2CyDoGb9PnWsaUjkbIb4GD6TFzAgotaISQx8x1Iz9W
J/r+wCeS1RZvuTv4o7UJjqQj6238pxgwI7yNTu2KW2X/RtPP1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNB6yLfk02aU6/mPVYYZEWyHksFKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDkyMGEyNmUtZThiYS0z
ZTc5LWEzYjgtYWE3Mzg1NzZjNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQD+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE+FRj0+PKXV84IiuqQSfDB6Ogohoh3sIC/c3yjPYtGMnpA5H3h/
iW2+DlBgdZ3RD3m0pGFbYg8rhmKBNrsqrDUGCNgHss0ro9WdMZJ9watZaoDiwl1m
eZX4CC2zQUYi9sGuC5Rua4X8k6pU9DSvqiHtHuOWlwfucb8U2+2ZknP8n0uH83U3
q/wxVCBMMyiTwMt5CBPKSN43ZZJ0K1wRFn9i9JstF+hI3D42s+eKGdYhmTOizSCr
PTP2BQNNK2xkgm71AEhBpXSBgay2ywsVTA60QCdE6q85ghoupn/Q016D7dgoUPpe
mh/kdQYU5fmOUBDzUj5URhLJjEYoqU2RC2A=
-----END CERTIFICATE-----
Generated at Sun Dec 22 13:20:33 2024 by rpki-client on console-ams.rpki-client.org