Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2ae7ad5-22a3-3ba8-aeb9-470bfa1a78dc.roa
File:                     b2ae7ad5-22a3-3ba8-aeb9-470bfa1a78dc.roa (raw, json)
Hash identifier:          5i6oXx/9wuJZvHkQVyJCdFZf84uqXvfckmlENR1PSto=
Subject key identifier:   28:D5:6D:DE:BF:37:7C:C3:8E:4A:40:E4:34:1B:07:6C:75:9F:AB:41
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845C8F8D76B8FC1312452A8C970
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2ae7ad5-22a3-3ba8-aeb9-470bfa1a78dc.roa
Signing time:             Mon 06 May 2024 17:29:08 +0000
ROA not before:           Mon 06 May 2024 17:29:08 +0000
ROA not after:            Sun 04 Aug 2024 17:29:08 +0000
asID:                     7015
IP address blocks:        2001:559:e031::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:f8:d7:6b:8f:c1:31:24:52:a8:c9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May  6 17:29:08 2024 GMT
            Not After : Aug  4 17:29:08 2024 GMT
        Subject: CN=550c2747-9909-4535-ad50-42a4a00fe6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:29:d5:68:06:f9:2a:46:61:48:70:6f:46:cd:
                    aa:20:83:38:ab:9e:b6:9b:5b:9d:2c:d5:37:de:81:
                    3a:fd:04:82:28:6b:44:84:ce:b9:05:22:a7:46:f3:
                    39:28:86:90:65:f1:36:f8:db:84:4a:18:d9:f8:3d:
                    0d:0a:99:5a:6e:3a:4a:f0:1a:31:3f:d6:0f:f5:ed:
                    c2:fb:08:0a:ed:e6:d6:96:72:c7:28:ad:af:5c:cf:
                    2c:71:71:03:06:d8:56:77:e3:e9:58:3c:74:3b:4c:
                    aa:df:6e:7e:5b:35:42:9a:e8:e4:c5:59:d6:90:88:
                    9f:e3:dd:aa:56:55:10:24:49:01:03:c8:b5:b9:f2:
                    3a:60:38:bc:85:d7:dc:c1:7f:04:ec:38:99:05:da:
                    42:13:e9:d0:3e:f5:52:23:6c:3a:85:82:8d:f4:02:
                    e7:ea:23:95:0f:57:bf:8d:9c:3c:f4:a2:0d:df:b6:
                    b4:a0:20:d3:b3:f5:ac:77:e7:77:dd:d1:1e:70:57:
                    32:8c:a4:e7:e6:9a:09:9e:e5:71:15:ee:a6:af:3b:
                    fb:c3:45:f9:95:a8:d9:82:4f:a1:38:4e:fd:f6:2a:
                    04:4f:9c:06:0b:35:09:b6:f8:23:74:79:02:33:a5:
                    00:05:d7:8c:b5:bc:7e:f2:53:52:38:3d:8d:79:63:
                    a4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D5:6D:DE:BF:37:7C:C3:8E:4A:40:E4:34:1B:07:6C:75:9F:AB:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2ae7ad5-22a3-3ba8-aeb9-470bfa1a78dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:e031::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:ad:dd:93:64:bc:fc:b6:b9:5f:69:29:19:45:fe:9f:12:eb:
         e7:73:3e:57:4c:f2:72:54:f4:d3:84:1c:40:6d:a6:61:d7:e5:
         24:29:1d:93:9c:b6:41:47:25:3e:15:ec:fa:40:3a:7c:ab:31:
         13:6d:d9:09:ba:dc:6b:6f:c4:9b:7e:a3:cf:80:01:ad:06:be:
         6f:95:69:14:81:fc:0c:fd:69:37:06:2e:21:e6:b9:75:b8:3e:
         28:9f:4f:80:ad:52:09:bb:56:df:12:93:04:ee:e7:89:17:f2:
         06:a9:0e:01:bc:03:3d:48:1a:f9:ea:d1:14:be:c0:da:70:34:
         3a:be:fc:f3:81:ab:d9:72:5b:8a:1b:3b:30:92:65:6c:ba:9f:
         3c:7d:01:3e:11:9b:ac:b4:33:36:a1:85:8f:6f:ae:3d:5a:78:
         d4:4f:43:67:3e:6e:14:ed:82:8b:cc:47:81:37:f2:b4:76:4b:
         3c:fb:96:c7:82:fe:25:dd:92:01:04:46:fb:9f:65:fb:f0:23:
         61:f7:66:5d:06:81:26:78:43:73:90:24:1d:69:3e:56:97:2f:
         9f:cf:c3:cf:32:f7:24:76:33:b5:98:13:9f:22:ea:4b:2d:c9:
         f4:e0:be:09:2d:bb:68:ff:ef:6f:0b:2b:ee:90:8f:3a:2f:59:
         75:c5:d9:97
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEXI+Ndrj8ExJFKoyXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUwNjE3MjkwOFoXDTI0MDgwNDE3MjkwOFowLzEtMCsGA1UEAxMk
NTUwYzI3NDctOTkwOS00NTM1LWFkNTAtNDJhNGEwMGZlNmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2inVaAb5KkZhSHBvRs2qIIM4q562m1udLNU3
3oE6/QSCKGtEhM65BSKnRvM5KIaQZfE2+NuEShjZ+D0NCplabjpK8BoxP9YP9e3C
+wgK7ebWlnLHKK2vXM8scXEDBthWd+PpWDx0O0yq325+WzVCmujkxVnWkIif492q
VlUQJEkBA8i1ufI6YDi8hdfcwX8E7DiZBdpCE+nQPvVSI2w6hYKN9ALn6iOVD1e/
jZw89KIN37a0oCDTs/Wsd+d33dEecFcyjKTn5poJnuVxFe6mrzv7w0X5lajZgk+h
OE799ioET5wGCzUJtvgjdHkCM6UABdeMtbx+8lNSOD2NeWOktQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCjVbd6/N3zDjkpA5DQbB2x1n6tBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjJhZTdhZDUtMjJhMy0z
YmE4LWFlYjktNDcwYmZhMWE3OGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWeAx
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBANSt3ZNkvPy2uV9pKRlF/p8S6+dzPldM8nJU9NOEHEBtpmHX5SQp
HZOctkFHJT4V7PpAOnyrMRNt2Qm63GtvxJt+o8+AAa0Gvm+VaRSB/Az9aTcGLiHm
uXW4PiifT4CtUgm7Vt8SkwTu54kX8gapDgG8Az1IGvnq0RS+wNpwNDq+/POBq9ly
W4obOzCSZWy6nzx9AT4Rm6y0MzahhY9vrj1aeNRPQ2c+bhTtgovMR4E38rR2Szz7
lseC/iXdkgEERvufZfvwI2H3Zl0GgSZ4Q3OQJB1pPlaXL5/Pw88y9yR2M7WYE58i
6kstyfTgvgktu2j/728LK+6QjzovWXXF2Zc=
-----END CERTIFICATE-----
Generated at Sat Jun 8 01:44:02 2024 by rpki-client on console-fra.rpki-client.org