Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb88553f-e744-33cc-8d4b-82fc877a5053.roa
File:                     fb88553f-e744-33cc-8d4b-82fc877a5053.roa (raw, json)
Hash identifier:          ekJ1nRmcJTSUHaOg5H/gGa9JLaR9QLWkO4roZCMfIdM=
Subject key identifier:   D1:92:FC:90:09:AF:76:73:51:9D:22:F8:9A:28:C2:0F:17:93:35:18
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABAB146F5914B4E06FE800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb88553f-e744-33cc-8d4b-82fc877a5053.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33660
IP address blocks:        2001:559:c311::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:ab:14:6f:59:14:b4:e0:6f:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=f2826f08-f78d-4f4c-9417-5ab4efef1e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:77:e3:9a:a9:89:68:52:9c:03:6a:2d:5c:
                    53:d8:01:71:24:36:1a:a5:61:34:3d:43:b8:07:27:
                    8c:00:f4:10:55:cc:cf:33:f5:60:42:36:b2:00:b7:
                    a3:15:91:69:93:32:d1:09:cc:d3:50:04:2c:26:26:
                    85:4d:48:f0:82:ac:0f:27:bd:59:fd:4b:97:2c:b0:
                    f7:bc:d2:ec:3a:fd:a4:46:7f:1f:cf:98:55:ba:63:
                    89:96:0c:62:31:c1:47:7c:07:ee:32:5a:7e:d7:b0:
                    b9:2f:50:cc:f1:c1:1b:fe:c4:a4:e2:9c:62:36:74:
                    44:12:81:90:02:c6:92:49:e6:bf:2a:36:33:14:e7:
                    65:76:09:06:71:48:5a:3c:22:48:0a:bb:3f:27:96:
                    f6:9e:e4:74:91:65:ba:ed:8c:f5:43:8c:5e:a9:44:
                    f9:71:3f:22:29:a3:f8:e6:31:ab:30:a7:92:b0:28:
                    8c:b9:20:0e:34:9f:90:80:13:c3:72:5c:29:f2:30:
                    c1:8e:e6:ed:7b:bd:b4:bb:ad:ab:1e:82:4e:83:91:
                    09:50:62:5e:96:6e:72:05:eb:5a:3a:82:14:c1:d9:
                    56:5c:7b:32:05:e3:aa:18:ea:3e:68:ff:7d:28:d2:
                    1b:dc:ed:1e:6b:c8:17:2e:31:9b:89:76:6c:da:97:
                    1d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:92:FC:90:09:AF:76:73:51:9D:22:F8:9A:28:C2:0F:17:93:35:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fb88553f-e744-33cc-8d4b-82fc877a5053.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c311::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:26:4a:26:94:e8:64:70:1a:9b:9c:dc:6a:27:9b:36:12:7d:
         50:81:e8:ca:bf:b3:0c:66:e9:ca:e1:74:c4:5e:ea:ee:af:7f:
         4b:7a:6d:23:c4:81:91:df:38:a7:c0:5b:77:46:f4:5c:b4:67:
         54:c2:2f:47:25:fa:f3:9c:6e:0b:b7:09:0b:b8:f4:d9:f5:0e:
         a5:9a:65:3d:f8:60:00:7d:00:0f:4f:92:91:4c:12:4b:e4:f9:
         e6:7e:f8:93:91:09:8b:46:07:52:8a:15:36:f3:3d:82:f3:7f:
         85:76:be:7c:f0:7b:4b:7e:cf:9d:a4:ce:d0:5e:52:b9:0f:25:
         e4:9d:a5:84:ef:d7:09:5b:7b:7e:75:bf:3b:09:51:62:f4:06:
         b8:d4:2e:c3:7b:7f:4f:f5:ad:c7:0e:4e:d7:34:0a:76:bf:f7:
         63:8c:2b:61:c4:93:36:18:73:eb:12:d1:cf:fe:cc:13:02:4d:
         02:16:2d:cc:6f:ad:ca:d7:ad:17:56:95:6d:9f:72:1a:0f:8e:
         b4:f4:65:ef:45:7a:b2:b5:1d:35:b2:b7:63:e6:9b:e4:b5:50:
         bb:3a:92:50:19:64:72:e8:83:2d:df:13:07:f2:b8:80:f2:ea:
         25:7f:b3:93:21:b0:23:fd:4b:2f:51:cd:ff:6b:2c:02:5e:61:
         67:51:cd:4e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq6sUb1kUtOBv6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
ZjI4MjZmMDgtZjc4ZC00ZjRjLTk0MTctNWFiNGVmZWYxZTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr79345qpiWhSnANqLVxT2AFxJDYapWE0PUO4
ByeMAPQQVczPM/VgQjayALejFZFpkzLRCczTUAQsJiaFTUjwgqwPJ71Z/UuXLLD3
vNLsOv2kRn8fz5hVumOJlgxiMcFHfAfuMlp+17C5L1DM8cEb/sSk4pxiNnREEoGQ
AsaSSea/KjYzFOdldgkGcUhaPCJICrs/J5b2nuR0kWW67Yz1Q4xeqUT5cT8iKaP4
5jGrMKeSsCiMuSAONJ+QgBPDclwp8jDBjubte720u62rHoJOg5EJUGJelm5yBeta
OoIUwdlWXHsyBeOqGOo+aP99KNIb3O0ea8gXLjGbiXZs2pcdkwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNGS/JAJr3ZzUZ0i+Joowg8XkzUYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmI4ODU1M2YtZTc0NC0z
M2NjLThkNGItODJmYzg3N2E1MDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcMR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHwmSiaU6GRwGpuc3GonmzYSfVCB6Mq/swxm6crhdMRe6u6vf0t6
bSPEgZHfOKfAW3dG9Fy0Z1TCL0cl+vOcbgu3CQu49Nn1DqWaZT34YAB9AA9PkpFM
Ekvk+eZ++JORCYtGB1KKFTbzPYLzf4V2vnzwe0t+z52kztBeUrkPJeSdpYTv1wlb
e351vzsJUWL0BrjULsN7f0/1rccOTtc0Cna/92OMK2HEkzYYc+sS0c/+zBMCTQIW
LcxvrcrXrRdWlW2fchoPjrT0Ze9FerK1HTWyt2Pmm+S1ULs6klAZZHLogy3fEwfy
uIDy6iV/s5MhsCP9Sy9Rzf9rLAJeYWdRzU4=
-----END CERTIFICATE-----
Generated at Sat May 4 14:59:11 2024 by rpki-client on console-fra.rpki-client.org