Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f2fa164-a292-3c9b-bec2-e9360bc700c0.roa
File:                     0f2fa164-a292-3c9b-bec2-e9360bc700c0.roa (raw, json)
Hash identifier:          ubWEbMHK8CFQnQgDqxYNgdybe8Uzx7BJVDbcgvP9zzk=
Subject key identifier:   33:12:A0:61:57:1A:83:89:9A:B0:ED:BF:DF:CE:02:63:FF:CD:9A:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C2263F2C409DF216B8640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f2fa164-a292-3c9b-bec2-e9360bc700c0.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     13367
IP address blocks:        2001:559:866d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:22:63:f2:c4:09:df:21:6b:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=e37147f5-44df-4407-90cf-cf6b32a52fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fd:ef:e8:bc:45:78:c3:17:30:ac:76:28:6e:
                    28:4f:2a:ae:1e:9d:55:f9:3d:57:07:f4:aa:f6:69:
                    9f:6e:41:1f:14:43:9f:46:88:c0:83:58:2d:70:2c:
                    a0:02:3d:43:6d:5a:72:71:6f:1d:24:72:0c:5c:1a:
                    a8:5a:01:72:15:75:33:aa:b2:00:d5:49:b2:f7:f5:
                    bf:0a:67:d3:df:bd:a4:a1:32:2d:e4:b2:a1:d0:72:
                    72:6e:12:04:c5:00:fd:70:e4:13:6b:c8:45:6e:ba:
                    36:16:0f:c7:dc:f5:57:e2:fd:ca:fb:e7:49:7d:f2:
                    87:f1:38:dd:99:54:1d:74:f7:37:45:da:6d:16:7e:
                    26:bf:e2:b9:2a:38:7e:e3:96:64:db:4c:06:d0:2b:
                    c6:61:8b:87:ff:d4:a6:40:23:ba:4a:bd:82:ac:90:
                    17:08:1e:e9:02:01:a9:45:2e:f6:e0:8a:ff:42:13:
                    20:0d:95:c8:a0:d6:cd:e4:5f:39:67:8b:4c:a3:82:
                    cb:4b:4d:c1:89:61:cb:69:e0:25:5f:68:c5:8a:1f:
                    4a:d9:6d:55:1e:85:4f:f3:94:72:57:b9:06:f4:03:
                    fc:3d:80:64:fc:5d:1b:f5:e3:e1:09:46:0e:9e:10:
                    de:fe:cd:25:60:18:fd:a4:5e:f5:39:52:e8:92:64:
                    0b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:12:A0:61:57:1A:83:89:9A:B0:ED:BF:DF:CE:02:63:FF:CD:9A:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f2fa164-a292-3c9b-bec2-e9360bc700c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:866d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b2:97:58:48:dd:5f:10:ee:34:e1:4b:62:e0:fc:d6:7e:7b:
         4b:a2:f7:16:93:f2:1c:38:ba:1d:09:ca:46:57:41:1c:ce:af:
         42:f5:ed:39:d7:42:11:ee:19:ef:0f:a0:d1:78:60:b5:fe:17:
         9c:44:30:e7:ff:ff:a5:81:e2:67:fa:36:48:a2:88:50:0b:4e:
         b5:ac:1e:9c:45:94:ec:cd:14:92:3d:5c:4f:4b:ca:ea:5e:47:
         70:ee:97:fc:bb:95:54:ce:ee:c7:8d:40:a1:88:78:15:72:d2:
         49:1c:97:76:84:7f:96:bd:d4:3f:fc:1e:1d:c9:1f:f9:59:0b:
         0f:3c:fc:85:32:ca:0b:81:a7:e9:60:6d:46:21:84:ae:ba:d9:
         66:0a:43:c9:65:fb:2a:6a:3e:92:4c:7f:ad:62:75:86:9e:4b:
         27:33:e6:a6:04:e2:af:f0:b8:62:b2:f1:17:42:86:11:83:66:
         53:3c:b3:42:71:8b:fc:a9:2f:2d:87:75:46:83:c4:e5:ca:31:
         21:f0:de:29:a5:39:91:f4:70:ff:3f:ca:00:31:a4:c4:2f:0b:
         2c:a6:a4:3a:e5:c2:da:38:61:8e:1d:a4:e4:9b:bc:f8:42:a3:
         8e:0f:54:08:c1:7c:47:98:52:1d:5f:69:d2:53:01:d5:98:46:
         7c:9d:a9:02
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYATCJj8sQJ3yFrhkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
ZTM3MTQ3ZjUtNDRkZi00NDA3LTkwY2YtY2Y2YjMyYTUyZmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/3v6LxFeMMXMKx2KG4oTyquHp1V+T1XB/Sq
9mmfbkEfFEOfRojAg1gtcCygAj1DbVpycW8dJHIMXBqoWgFyFXUzqrIA1Umy9/W/
CmfT372koTIt5LKh0HJybhIExQD9cOQTa8hFbro2Fg/H3PVX4v3K++dJffKH8Tjd
mVQddPc3RdptFn4mv+K5Kjh+45Zk20wG0CvGYYuH/9SmQCO6Sr2CrJAXCB7pAgGp
RS724Ir/QhMgDZXIoNbN5F85Z4tMo4LLS03BiWHLaeAlX2jFih9K2W1VHoVP85Ry
V7kG9AP8PYBk/F0b9ePhCUYOnhDe/s0lYBj9pF71OVLokmQL7wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDMSoGFXGoOJmrDtv9/OAmP/zZqsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGYyZmExNjQtYTI5Mi0z
YzliLWJlYzItZTkzNjBiYzcwMGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYZt
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH+yl1hI3V8Q7jThS2Lg/NZ+e0ui9xaT8hw4uh0JykZXQRzOr0L1
7TnXQhHuGe8PoNF4YLX+F5xEMOf//6WB4mf6NkiiiFALTrWsHpxFlOzNFJI9XE9L
yupeR3Dul/y7lVTO7seNQKGIeBVy0kkcl3aEf5a91D/8Hh3JH/lZCw88/IUyyguB
p+lgbUYhhK662WYKQ8ll+ypqPpJMf61idYaeSycz5qYE4q/wuGKy8RdChhGDZlM8
s0Jxi/ypLy2HdUaDxOXKMSHw3imlOZH0cP8/ygAxpMQvCyympDrlwto4YY4dpOSb
vPhCo44PVAjBfEeYUh1fadJTAdWYRnydqQI=
-----END CERTIFICATE-----
Generated at Fri Jun 7 15:28:03 2024 by rpki-client on console-fra.rpki-client.org