Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6589b6cf-7bfc-368c-bc5c-ab50c4da2a8d.roa
File:                     6589b6cf-7bfc-368c-bc5c-ab50c4da2a8d.roa (raw, json)
Hash identifier:          rmbpWNTfTyx8SWIub3dyaBFLOmkn+c7fwfhvR8rHvdQ=
Subject key identifier:   82:2E:F8:DA:0B:32:04:7F:D5:5F:D1:12:A4:D5:F6:91:75:65:B5:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A40310D45FB5638779000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6589b6cf-7bfc-368c-bc5c-ab50c4da2a8d.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7015
IP address blocks:        2001:559:e011::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:40:31:0d:45:fb:56:38:77:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=f40e8e03-a643-498a-a5a7-bc8876832d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:02:07:63:73:8a:72:15:b9:cf:52:72:a8:0f:
                    39:23:8b:3c:82:1a:33:ae:35:02:89:6f:7d:a3:9a:
                    db:dd:2f:97:c4:f3:5c:21:e4:2c:87:e1:f1:34:a3:
                    75:a5:ba:91:65:67:20:47:92:0d:e1:63:9a:55:7e:
                    2e:08:cd:44:f0:ca:75:ae:1c:6e:3f:a3:28:bf:1a:
                    cf:13:c6:00:5c:18:af:4c:9a:f1:fe:50:b9:01:be:
                    3b:0c:13:b0:c3:89:34:e7:93:33:73:02:27:fd:d4:
                    4d:dc:11:48:f3:97:7e:43:ac:c6:9e:98:2e:74:d6:
                    55:ed:02:61:91:dd:35:60:13:1f:25:1c:b8:5a:0a:
                    95:34:c4:0f:ec:3f:61:62:82:fc:c6:ef:41:e5:7a:
                    46:a5:46:c5:99:5f:24:41:14:d2:c2:cc:fa:1f:a3:
                    11:b9:84:09:c1:36:f7:df:40:f8:a9:e4:7d:03:35:
                    fc:cc:e6:35:07:b4:e1:a8:65:e6:62:41:a1:27:e7:
                    50:d7:63:c9:49:10:90:dd:50:30:5a:8e:28:99:1c:
                    bc:b6:60:bd:1b:37:0a:25:c3:da:90:70:9e:ae:af:
                    b2:a7:5c:68:0a:1f:00:25:97:36:ab:d1:20:ff:93:
                    b2:5f:4d:db:d6:bd:39:ca:81:70:33:6f:10:15:c0:
                    25:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2E:F8:DA:0B:32:04:7F:D5:5F:D1:12:A4:D5:F6:91:75:65:B5:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6589b6cf-7bfc-368c-bc5c-ab50c4da2a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:e011::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:df:fd:16:00:1d:c3:52:1f:a8:6f:b7:f3:46:73:80:10:3f:
         a3:be:c2:28:53:11:94:94:c9:99:6c:ca:fe:a6:a0:22:f5:c4:
         fc:13:58:1d:52:16:f8:61:07:7d:d5:c1:e9:84:13:e5:bc:4d:
         0a:ac:0b:bc:79:8b:5e:fb:ec:b2:88:47:ea:30:6e:dc:0a:56:
         6b:70:3e:85:9b:2d:33:55:29:45:b9:84:55:24:e8:f2:90:ae:
         ec:1f:e5:4e:18:42:99:38:ee:82:e9:83:5a:c7:da:7f:e0:49:
         81:65:f9:5f:3d:d0:a6:7d:e3:47:3d:f4:81:7c:d0:1d:8a:11:
         94:79:45:7e:e6:85:99:19:59:37:4e:fa:a5:61:6d:c4:92:40:
         7e:cb:68:81:4c:02:9e:21:cd:e0:37:28:04:a2:c3:c7:5e:59:
         fc:27:93:e4:17:a3:8c:9d:6d:96:a6:70:eb:d7:2c:12:49:4e:
         70:d2:39:94:ef:5b:d1:7c:49:b7:c8:8c:95:69:bb:d6:c7:e5:
         0c:57:89:17:78:e3:8e:30:52:d5:57:83:69:1a:d1:50:bc:0b:
         5a:02:6e:a9:bb:31:55:ce:09:46:5d:48:25:a0:22:c4:dc:11:
         bb:1e:bd:dc:e3:91:77:53:59:63:a8:96:68:73:db:fe:66:c6:
         4c:1a:4f:4c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYASkAxDUX7Vjh3kAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
ZjQwZThlMDMtYTY0My00OThhLWE1YTctYmM4ODc2ODMyZDRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AIHY3OKchW5z1JyqA85I4s8ghozrjUCiW99
o5rb3S+XxPNcIeQsh+HxNKN1pbqRZWcgR5IN4WOaVX4uCM1E8Mp1rhxuP6MovxrP
E8YAXBivTJrx/lC5Ab47DBOww4k055MzcwIn/dRN3BFI85d+Q6zGnpgudNZV7QJh
kd01YBMfJRy4WgqVNMQP7D9hYoL8xu9B5XpGpUbFmV8kQRTSwsz6H6MRuYQJwTb3
30D4qeR9AzX8zOY1B7ThqGXmYkGhJ+dQ12PJSRCQ3VAwWo4omRy8tmC9GzcKJcPa
kHCerq+yp1xoCh8AJZc2q9Eg/5OyX03b1r05yoFwM28QFcAlGwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIIu+NoLMgR/1V/REqTV9pF1ZbW1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjU4OWI2Y2YtN2JmYy0z
NjhjLWJjNWMtYWI1MGM0ZGEyYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWeAR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGjf/RYAHcNSH6hvt/NGc4AQP6O+wihTEZSUyZlsyv6moCL1xPwT
WB1SFvhhB33VwemEE+W8TQqsC7x5i1777LKIR+owbtwKVmtwPoWbLTNVKUW5hFUk
6PKQruwf5U4YQpk47oLpg1rH2n/gSYFl+V890KZ940c99IF80B2KEZR5RX7mhZkZ
WTdO+qVhbcSSQH7LaIFMAp4hzeA3KASiw8deWfwnk+QXo4ydbZamcOvXLBJJTnDS
OZTvW9F8SbfIjJVpu9bH5QxXiRd4444wUtVXg2ka0VC8C1oCbqm7MVXOCUZdSCWg
IsTcEbsevdzjkXdTWWOolmhz2/5mxkwaT0w=
-----END CERTIFICATE-----
Generated at Fri Jun 7 16:00:20 2024 by rpki-client on console-ams.rpki-client.org