Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4065c46f-eca0-3398-b1f6-ceec54942664.roa
File:                     4065c46f-eca0-3398-b1f6-ceec54942664.roa (raw, json)
Hash identifier:          u88uKT0WhjCxekIu2aiV0QHiBUcrRuXMzwNV6xfr5Mo=
Subject key identifier:   13:47:70:87:63:95:01:DF:1F:50:B0:AF:05:AA:7B:BB:14:F5:90:EE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B67BA42D6528B49066A94
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4065c46f-eca0-3398-b1f6-ceec54942664.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     21508
IP address blocks:        2001:559:82b7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:67:ba:42:d6:52:8b:49:06:6a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=e47f6992-4b5d-4daa-8feb-8b507291bb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a7:e5:a1:ff:4c:ac:25:3c:4c:1c:b6:1a:e7:
                    be:f9:13:70:be:7d:a0:29:02:84:ce:a9:3d:bf:d7:
                    a7:fb:e2:92:64:87:21:5a:f9:54:81:2a:3e:42:eb:
                    81:3d:91:07:42:dd:fc:71:3a:e5:af:8a:41:7d:ad:
                    5b:19:ca:48:d2:9f:35:a8:3b:ad:91:57:56:40:a9:
                    a3:bf:f8:11:a6:90:23:f6:dc:53:17:39:3e:c9:98:
                    65:17:ff:61:12:bb:5a:14:36:75:86:a3:6f:4a:62:
                    20:e0:85:09:d6:0a:da:bb:cf:57:2e:6c:ac:28:6a:
                    1f:b1:7d:d2:e9:80:af:a1:b1:01:72:1d:1b:76:1d:
                    98:30:3f:c9:ab:91:78:f3:e2:e5:ab:04:0a:ea:4d:
                    7a:72:17:cc:76:fa:58:3b:a9:e6:38:8d:48:7b:cb:
                    03:ac:9f:28:aa:90:e3:0e:27:cb:78:95:fd:4d:40:
                    72:cb:53:8e:7e:b4:53:ae:b8:77:f7:0e:92:6b:17:
                    c6:87:cd:ed:88:a4:9e:7a:0e:46:63:43:92:b6:67:
                    07:b0:e1:bc:7f:2d:67:e3:52:c0:bb:ec:2c:a8:71:
                    bb:fc:23:47:91:69:fd:2b:f8:a0:3c:87:9a:8b:69:
                    e2:0d:7c:f0:ca:ca:bd:63:c1:56:45:4e:76:f6:6f:
                    a9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:47:70:87:63:95:01:DF:1F:50:B0:AF:05:AA:7B:BB:14:F5:90:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4065c46f-eca0-3398-b1f6-ceec54942664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:82b7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:e6:50:3d:71:e5:22:89:45:eb:52:f1:75:d0:80:63:79:be:
         59:b8:15:42:fa:99:0c:a3:a9:d5:af:4d:6d:39:7a:b1:e0:dd:
         ba:6b:ce:91:e6:04:f8:07:c8:1b:7f:51:64:58:43:b9:e1:a4:
         16:67:56:4c:a7:76:1b:cd:59:2e:7d:36:27:17:d0:6f:6b:5e:
         ce:8a:f9:19:0e:30:19:80:82:84:26:76:d3:09:13:cc:98:52:
         3b:38:e6:9f:65:41:f3:c0:62:fc:4b:64:f0:4a:fe:eb:83:da:
         9a:b2:12:2a:c7:f1:86:22:ea:0b:a0:19:38:d6:1c:be:8a:42:
         d6:42:5c:85:8b:41:6e:19:c6:f7:25:98:ff:3a:2d:ad:5f:72:
         33:88:35:f9:fe:68:de:30:6e:3f:ba:2a:32:90:12:6a:f9:a5:
         40:f5:6f:2d:22:31:5d:b1:d1:40:36:c5:2c:e1:3d:68:4d:10:
         b8:0d:59:1f:5c:b6:31:76:97:da:c6:b3:20:44:b3:d9:c0:cc:
         fa:f4:be:10:ff:8b:52:9b:76:60:62:cb:dc:e7:ce:6b:31:4a:
         30:f9:3b:21:fd:c5:ac:8c:3c:51:d9:e5:63:19:8a:42:e3:38:
         b6:9d:10:a0:57:b6:59:49:78:dd:4b:ed:93:8a:ef:bc:e6:ec:
         7a:38:02:32
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYAS2e6QtZSi0kGapQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
ZTQ3ZjY5OTItNGI1ZC00ZGFhLThmZWItOGI1MDcyOTFiYjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6flof9MrCU8TBy2Gue++RNwvn2gKQKEzqk9
v9en++KSZIchWvlUgSo+QuuBPZEHQt38cTrlr4pBfa1bGcpI0p81qDutkVdWQKmj
v/gRppAj9txTFzk+yZhlF/9hErtaFDZ1hqNvSmIg4IUJ1grau89XLmysKGofsX3S
6YCvobEBch0bdh2YMD/Jq5F48+LlqwQK6k16chfMdvpYO6nmOI1Ie8sDrJ8oqpDj
DifLeJX9TUByy1OOfrRTrrh39w6SaxfGh83tiKSeeg5GY0OStmcHsOG8fy1n41LA
u+wsqHG7/CNHkWn9K/igPIeai2niDXzwysq9Y8FWRU529m+pTQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBNHcIdjlQHfH1CwrwWqe7sU9ZDuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDA2NWM0NmYtZWNhMC0z
Mzk4LWIxZjYtY2VlYzU0OTQyNjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYK3
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALHmUD1x5SKJRetS8XXQgGN5vlm4FUL6mQyjqdWvTW05erHg3bpr
zpHmBPgHyBt/UWRYQ7nhpBZnVkyndhvNWS59NicX0G9rXs6K+RkOMBmAgoQmdtMJ
E8yYUjs45p9lQfPAYvxLZPBK/uuD2pqyEirH8YYi6gugGTjWHL6KQtZCXIWLQW4Z
xvclmP86La1fcjOINfn+aN4wbj+6KjKQEmr5pUD1by0iMV2x0UA2xSzhPWhNELgN
WR9ctjF2l9rGsyBEs9nAzPr0vhD/i1KbdmBiy9znzmsxSjD5OyH9xayMPFHZ5WMZ
ikLjOLadEKBXtllJeN1L7ZOK77zm7Ho4AjI=
-----END CERTIFICATE-----
Generated at Sat Jun 8 01:40:57 2024 by rpki-client on console-fra.rpki-client.org