Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80a1227d-cb10-3395-a77b-e25a37e7b33e.roa
File:                     80a1227d-cb10-3395-a77b-e25a37e7b33e.roa (raw, json)
Hash identifier:          mTi28rrW4PLLEInZAEUrz9O46VsEDUgDF1soXSCWbNI=
Subject key identifier:   2A:57:CB:E5:9D:88:DD:67:9C:53:6B:81:F3:C9:AF:E6:DB:B9:41:DB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA58EC9AD8C10446EBFD780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80a1227d-cb10-3395-a77b-e25a37e7b33e.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     33657
IP address blocks:        2001:559:424::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a5:8e:c9:ad:8c:10:44:6e:bf:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=a6ac33f0-df20-4d31-b388-013cd6ee413a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:64:df:6a:78:71:49:d1:44:43:b9:17:6e:59:
                    ff:20:e6:e6:59:7e:2f:1d:41:45:a4:42:68:74:ae:
                    5d:6e:cb:12:88:e8:be:1a:09:f1:0d:ac:f1:2e:22:
                    df:62:44:17:f5:24:63:9f:4d:7c:75:e0:e8:ad:8d:
                    e6:f3:7b:05:a3:dd:53:c8:85:09:c3:7a:40:72:f4:
                    6b:7d:dc:e7:25:f8:71:85:78:05:f8:e4:3e:b9:e9:
                    ae:c6:48:16:f4:50:4a:51:e7:12:94:1d:dc:13:e3:
                    b8:ec:27:ca:8f:63:16:fc:c6:6d:26:0f:20:62:d1:
                    8a:2b:09:67:e4:be:0c:d5:d9:59:0b:4f:6d:75:db:
                    9f:59:5d:5a:03:cb:b2:81:e9:be:22:a7:27:57:5a:
                    05:35:96:14:96:80:b4:33:e3:94:3a:6f:e8:d8:f6:
                    bc:b9:ba:23:ea:8d:7c:b6:18:39:ec:63:a1:f2:c8:
                    fd:f8:40:e8:16:18:7e:57:19:8f:25:d5:3c:97:20:
                    a8:49:87:5a:67:6f:60:83:99:23:13:02:f1:09:d7:
                    ff:08:d5:24:b2:2d:d6:4e:4c:d1:ac:bd:72:cd:39:
                    85:e5:85:20:e4:e5:dd:32:db:6e:12:5d:94:06:49:
                    a3:aa:b3:32:2f:9e:d3:ac:19:1f:4a:88:80:69:cb:
                    b4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:57:CB:E5:9D:88:DD:67:9C:53:6B:81:F3:C9:AF:E6:DB:B9:41:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/80a1227d-cb10-3395-a77b-e25a37e7b33e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:424::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:2e:53:e3:0a:b4:f8:80:c6:f2:3c:e6:c2:e5:72:bb:a3:d6:
         45:e4:e2:8f:26:f6:1a:f0:32:8d:0a:4e:ec:80:d6:26:20:4f:
         db:73:1d:76:db:01:71:79:76:b9:9e:82:99:7e:46:fb:b0:a6:
         28:72:19:2c:c2:3e:70:c3:13:91:b3:d9:11:57:c1:f3:89:80:
         c6:10:db:6c:ef:14:86:5e:83:da:3d:99:fa:59:1b:c5:c0:5c:
         f0:80:99:80:2b:b4:f4:fc:f0:24:76:cd:eb:24:81:78:04:43:
         77:b0:89:ad:32:51:59:34:9a:98:19:d3:b6:ed:53:5f:48:35:
         f3:7e:df:62:1e:c1:32:99:55:f3:34:46:07:fd:5f:6d:e6:bb:
         2c:29:b3:f9:21:92:d8:ce:d7:5e:98:98:58:d1:33:01:07:2e:
         fa:a7:b4:38:ad:c3:07:37:57:fc:6a:4d:78:83:da:f6:7f:a1:
         96:d6:d7:cc:88:8f:b3:5c:ed:db:37:f6:06:fd:11:6f:6b:8e:
         27:4f:1a:d7:1b:47:20:d9:df:31:fc:ba:04:b6:ea:11:d9:ea:
         3c:2c:43:34:be:62:cc:97:9a:7f:90:38:6c:8f:77:16:2c:01:
         88:61:6c:f1:06:5d:57:09:b4:d9:f9:5e:82:4d:79:2c:78:38:
         d4:c4:13:56
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pY7JrYwQRG6/14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
YTZhYzMzZjAtZGYyMC00ZDMxLWIzODgtMDEzY2Q2ZWU0MTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmTfanhxSdFEQ7kXbln/IObmWX4vHUFFpEJo
dK5dbssSiOi+GgnxDazxLiLfYkQX9SRjn018deDorY3m83sFo91TyIUJw3pAcvRr
fdznJfhxhXgF+OQ+uemuxkgW9FBKUecSlB3cE+O47CfKj2MW/MZtJg8gYtGKKwln
5L4M1dlZC09tddufWV1aA8uygem+IqcnV1oFNZYUloC0M+OUOm/o2Pa8uboj6o18
thg57GOh8sj9+EDoFhh+VxmPJdU8lyCoSYdaZ29gg5kjEwLxCdf/CNUksi3WTkzR
rL1yzTmF5YUg5OXdMttuEl2UBkmjqrMyL57TrBkfSoiAacu02QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCpXy+WdiN1nnFNrgfPJr+bbuUHbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODBhMTIyN2QtY2IxMC0z
Mzk1LWE3N2ItZTI1YTM3ZTdiMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQQk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALkuU+MKtPiAxvI85sLlcruj1kXk4o8m9hrwMo0KTuyA1iYgT9tz
HXbbAXF5drmegpl+RvuwpihyGSzCPnDDE5Gz2RFXwfOJgMYQ22zvFIZeg9o9mfpZ
G8XAXPCAmYArtPT88CR2zeskgXgEQ3ewia0yUVk0mpgZ07btU19INfN+32IewTKZ
VfM0Rgf9X23muywps/khktjO116YmFjRMwEHLvqntDitwwc3V/xqTXiD2vZ/oZbW
18yIj7Nc7ds39gb9EW9rjidPGtcbRyDZ3zH8ugS26hHZ6jwsQzS+YsyXmn+QOGyP
dxYsAYhhbPEGXVcJtNn5XoJNeSx4ONTEE1Y=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:21:33 2025 by rpki-client