Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bdfbacc-0e0d-3f94-b042-b436285fc3a9.roa
File:                     0bdfbacc-0e0d-3f94-b042-b436285fc3a9.roa (raw, json)
Hash identifier:          zT1DDvgbOXn80OBP3BqnB51WBARRu5e9cWQ9wUyX43I=
Subject key identifier:   BE:99:8D:95:AC:0A:64:7C:E0:E0:45:3B:93:AA:25:42:FB:17:E5:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B5E94F87FB934A4F03600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bdfbacc-0e0d-3f94-b042-b436285fc3a9.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     20214
IP address blocks:        2001:559:8077::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:5e:94:f8:7f:b9:34:a4:f0:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=51e15d30-c7ad-408d-987c-0024d0e5d239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:81:58:2d:f0:57:a7:58:c8:46:9a:77:de:55:
                    76:7a:01:dd:ba:67:b9:c1:eb:c9:09:56:af:38:dc:
                    35:b5:b7:8d:e5:48:09:ff:35:5b:65:73:f1:7e:39:
                    99:02:43:0d:77:f7:ef:4f:72:3c:21:2c:ef:1e:99:
                    9b:7e:26:48:24:8e:95:6f:6c:d5:35:7a:69:41:bb:
                    89:75:b9:db:95:9b:dc:34:5d:30:6d:e3:c1:a9:90:
                    e0:6b:83:90:25:84:9f:1e:7f:7a:fa:a1:a5:de:be:
                    35:e8:f3:d5:b4:b6:d1:57:23:cb:16:93:74:fe:52:
                    cc:6d:ca:a9:01:0e:d2:82:b2:55:fb:38:00:e6:af:
                    e7:3b:f9:2f:b0:78:e4:40:86:d3:dc:ab:b9:00:fb:
                    d7:88:00:11:0d:01:44:f2:0c:2c:36:9c:af:f5:dc:
                    38:b5:c5:b9:46:d2:05:93:56:cf:04:c4:a3:aa:b3:
                    1e:48:5b:a5:53:95:28:0f:d4:12:12:1c:55:8e:78:
                    c9:4c:9d:3b:4e:e1:13:95:37:4b:29:e4:e4:74:0b:
                    38:b6:7a:d2:95:e8:3b:5b:aa:49:35:6b:fe:ae:78:
                    3f:ac:5c:21:ca:cb:d3:04:ec:17:a3:e7:05:d8:12:
                    33:60:38:08:cd:e4:e6:1b:9b:cd:95:32:97:6d:11:
                    e0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:99:8D:95:AC:0A:64:7C:E0:E0:45:3B:93:AA:25:42:FB:17:E5:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0bdfbacc-0e0d-3f94-b042-b436285fc3a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8077::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:8d:0b:76:37:00:01:48:a9:30:9a:95:96:cd:09:16:a4:b8:
         ac:3c:e5:a1:b4:89:78:e8:d0:e4:33:5d:d4:8e:84:05:db:b4:
         04:fa:87:fa:32:39:03:be:5a:2b:78:1b:8f:14:05:80:75:08:
         89:1d:eb:b5:f0:72:94:8c:cd:6e:42:02:5a:a4:d6:cd:f2:f9:
         33:b7:54:cc:62:4e:e0:bb:51:2e:9a:6b:f9:63:ef:e2:91:10:
         44:93:08:95:98:b0:ab:91:4e:4e:65:1f:30:aa:6f:b0:fd:b4:
         3a:a2:72:56:14:e3:45:21:98:33:94:ab:cd:b3:72:ec:3c:46:
         0a:74:7d:89:da:93:28:32:ab:9c:fd:00:e7:6c:d7:7b:ae:bd:
         07:45:18:c7:67:33:66:00:d1:ab:18:c4:35:c5:6f:ad:91:7a:
         5e:f6:ce:cf:7c:b4:4c:b8:f2:ef:fc:fe:53:f0:cc:39:2d:b7:
         a6:5c:2b:de:d2:91:7b:31:1e:a5:70:58:6a:bd:ae:ac:0e:91:
         76:b8:3d:13:39:47:bb:93:67:80:e5:e3:8f:8c:fa:e3:b2:52:
         59:a8:b9:ad:ca:ef:03:90:67:35:f1:95:4d:07:a6:23:eb:ee:
         75:04:2a:6d:7a:7d:f5:a8:c9:8e:57:e6:07:d3:e5:53:57:88:
         6b:84:38:4e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYAS16U+H+5NKTwNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
NTFlMTVkMzAtYzdhZC00MDhkLTk4N2MtMDAyNGQwZTVkMjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4FYLfBXp1jIRpp33lV2egHdume5wevJCVav
ONw1tbeN5UgJ/zVbZXPxfjmZAkMNd/fvT3I8ISzvHpmbfiZIJI6Vb2zVNXppQbuJ
dbnblZvcNF0wbePBqZDga4OQJYSfHn96+qGl3r416PPVtLbRVyPLFpN0/lLMbcqp
AQ7SgrJV+zgA5q/nO/kvsHjkQIbT3Ku5APvXiAARDQFE8gwsNpyv9dw4tcW5RtIF
k1bPBMSjqrMeSFulU5UoD9QSEhxVjnjJTJ07TuETlTdLKeTkdAs4tnrSleg7W6pJ
NWv+rng/rFwhysvTBOwXo+cF2BIzYDgIzeTmG5vNlTKXbRHgdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL6ZjZWsCmR84OBFO5OqJUL7F+XiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGJkZmJhY2MtMGUwZC0z
Zjk0LWIwNDItYjQzNjI4NWZjM2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYB3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADqNC3Y3AAFIqTCalZbNCRakuKw85aG0iXjo0OQzXdSOhAXbtAT6
h/oyOQO+Wit4G48UBYB1CIkd67XwcpSMzW5CAlqk1s3y+TO3VMxiTuC7US6aa/lj
7+KREESTCJWYsKuRTk5lHzCqb7D9tDqiclYU40UhmDOUq82zcuw8Rgp0fYnakygy
q5z9AOds13uuvQdFGMdnM2YA0asYxDXFb62Rel72zs98tEy48u/8/lPwzDktt6Zc
K97SkXsxHqVwWGq9rqwOkXa4PRM5R7uTZ4Dl44+M+uOyUlmoua3K7wOQZzXxlU0H
piPr7nUEKm16ffWoyY5X5gfT5VNXiGuEOE4=
-----END CERTIFICATE-----
Generated at Fri Jun 7 15:28:00 2024 by rpki-client on console-fra.rpki-client.org