Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c65eb40a-0260-32bc-84a4-b9a83bb68571.roa
File:                     c65eb40a-0260-32bc-84a4-b9a83bb68571.roa (raw, json)
Hash identifier:          xBWmrCplLbxNlpcDU65L9aonBp9oKTcpZOg/sFU7WTE=
Subject key identifier:   FE:38:76:25:0E:29:5A:21:44:8A:C3:55:D7:61:64:A0:B3:75:A2:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABD6DE00FE362E50E59A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c65eb40a-0260-32bc-84a4-b9a83bb68571.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7015
IP address blocks:        2001:559:863b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:d6:de:00:fe:36:2e:50:e5:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=5e413497-e577-4c5e-93c7-5b362929323a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ef:e8:2d:78:8b:f9:34:07:60:3c:8c:4c:94:
                    6d:5b:28:10:25:a0:99:fd:3b:33:e2:c5:6f:f1:52:
                    80:b2:91:9f:2c:96:b6:34:88:81:1d:90:e2:1f:64:
                    cc:bf:eb:ec:be:a6:72:7c:cb:d9:3e:70:ba:2d:6d:
                    68:bc:2f:ad:a0:c3:fb:e4:60:03:71:54:68:eb:14:
                    ba:be:b3:7d:91:31:0e:8f:db:87:67:a2:24:37:77:
                    c5:b4:37:35:ce:6f:04:dc:08:94:2a:a4:9b:78:ae:
                    07:d6:67:68:02:57:eb:07:bd:97:04:17:83:b0:2f:
                    7d:ef:65:c7:e4:55:69:c2:b9:c1:15:9d:c1:8a:cf:
                    6e:57:43:93:68:89:80:09:3e:a6:2f:cb:35:12:45:
                    d4:a5:78:15:4f:18:33:68:0a:43:a0:ce:da:9b:cb:
                    9d:f0:0b:29:d5:46:09:3d:88:ed:40:61:0d:44:dd:
                    20:36:ac:79:08:13:c5:75:44:6f:6b:99:0e:37:2c:
                    f5:de:99:49:5b:e0:08:15:51:c2:dc:a2:a9:6a:b6:
                    f8:b2:ff:86:ef:5c:14:c1:6f:d9:e2:b8:91:8c:f0:
                    50:24:02:18:c6:f5:63:45:74:cf:94:a5:0b:f6:dc:
                    ac:11:2f:47:e7:1d:0f:65:8a:ff:54:92:ec:ef:3f:
                    6f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:38:76:25:0E:29:5A:21:44:8A:C3:55:D7:61:64:A0:B3:75:A2:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c65eb40a-0260-32bc-84a4-b9a83bb68571.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:863b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:9f:be:8e:97:dc:4a:85:13:c0:f4:ab:3b:4a:e0:b0:2b:c8:
         17:e5:39:61:56:af:04:1a:b8:18:f8:81:ed:4b:c3:b6:51:d5:
         f6:a2:e7:ec:9c:4d:db:5e:30:df:29:10:ae:e8:96:7c:fa:22:
         47:b0:85:9b:27:e3:bb:8b:d6:2b:78:0f:fe:a1:3e:d0:39:be:
         bd:ce:91:03:db:7a:fa:66:04:73:71:9e:b8:e4:f6:8d:76:e2:
         d9:a3:79:a7:22:4b:c1:fa:ff:1c:1d:aa:8b:f3:da:05:27:95:
         e6:9c:d4:69:3c:32:f1:16:16:fd:4e:a2:ff:bc:d8:03:a5:48:
         4d:12:74:f6:45:de:2c:87:96:23:8b:4a:1d:75:85:2c:8a:b1:
         c8:44:0b:46:86:99:6d:ba:52:70:bf:c7:34:11:8a:9e:a0:07:
         f2:6e:f3:12:22:35:f6:14:b2:df:e5:f2:32:1e:e7:4d:67:68:
         4c:39:f0:17:a5:db:3d:66:62:c0:80:7a:f4:e7:95:45:e6:88:
         4c:3a:9a:fd:d1:0a:7c:6c:c3:b2:f4:1f:4d:a4:ed:4b:84:fe:
         a7:41:c5:32:6c:e2:d2:e0:b2:5e:e1:c1:38:24:e3:f0:31:53:
         e1:0a:5f:ad:0e:7f:08:7f:16:23:2b:40:24:f6:dd:d2:0d:cb:
         62:54:01:de
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq9beAP42LlDlmgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
NWU0MTM0OTctZTU3Ny00YzVlLTkzYzctNWIzNjI5MjkzMjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+/oLXiL+TQHYDyMTJRtWygQJaCZ/Tsz4sVv
8VKAspGfLJa2NIiBHZDiH2TMv+vsvqZyfMvZPnC6LW1ovC+toMP75GADcVRo6xS6
vrN9kTEOj9uHZ6IkN3fFtDc1zm8E3AiUKqSbeK4H1mdoAlfrB72XBBeDsC9972XH
5FVpwrnBFZ3Bis9uV0OTaImACT6mL8s1EkXUpXgVTxgzaApDoM7am8ud8Asp1UYJ
PYjtQGENRN0gNqx5CBPFdURva5kONyz13plJW+AIFVHC3KKparb4sv+G71wUwW/Z
4riRjPBQJAIYxvVjRXTPlKUL9tysES9H5x0PZYr/VJLs7z9v4wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP44diUOKVohRIrDVddhZKCzdaLIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzY1ZWI0MGEtMDI2MC0z
MmJjLTg0YTQtYjlhODNiYjY4NTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYY7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACWfvo6X3EqFE8D0qztK4LAryBflOWFWrwQauBj4ge1Lw7ZR1fai
5+ycTdteMN8pEK7olnz6IkewhZsn47uL1it4D/6hPtA5vr3OkQPbevpmBHNxnrjk
9o124tmjeaciS8H6/xwdqovz2gUnleac1Gk8MvEWFv1Oov+82AOlSE0SdPZF3iyH
liOLSh11hSyKschEC0aGmW26UnC/xzQRip6gB/Ju8xIiNfYUst/l8jIe501naEw5
8Bel2z1mYsCAevTnlUXmiEw6mv3RCnxsw7L0H02k7UuE/qdBxTJs4tLgsl7hwTgk
4/AxU+EKX60Ofwh/FiMrQCT23dINy2JUAd4=
-----END CERTIFICATE-----
Generated at Sun May 5 02:46:19 2024 by rpki-client on console-fra.rpki-client.org