Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9d707c4-0c29-3365-a427-f6f46cb5cb3d.roa
File:                     f9d707c4-0c29-3365-a427-f6f46cb5cb3d.roa (raw, json)
Hash identifier:          bz9Vgw1Fh8Di+vKNPgP9ao8LrThinUrzdO9vxbcnEIQ=
Subject key identifier:   62:E4:10:58:B1:A9:64:98:FB:2A:50:5D:BD:5D:74:0F:75:89:AB:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABCBE192B1AF39BC159600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9d707c4-0c29-3365-a427-f6f46cb5cb3d.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7015
IP address blocks:        2001:559:2a1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:cb:e1:92:b1:af:39:bc:15:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=63f16bc5-9530-4d7a-881c-76ed905587ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:45:0f:12:41:41:60:b4:e9:5f:ad:ce:66:1c:
                    87:fc:8f:e0:18:38:b0:23:4d:1a:a9:5f:39:f9:a4:
                    84:d9:90:62:d6:6a:ed:cd:c6:68:dc:cd:e8:49:fe:
                    c5:0b:7d:8a:e3:ae:7a:33:7d:70:eb:ae:9d:fe:f0:
                    b8:ff:0c:3c:5a:8c:1e:45:a1:ef:01:06:30:09:fd:
                    ea:bd:69:c9:bc:6b:e6:1d:7e:00:9d:81:91:23:24:
                    14:11:f0:be:6c:3a:c2:61:6e:39:7f:f1:3d:b7:a2:
                    c2:30:d0:9c:94:64:63:f2:1f:1c:d0:f6:cc:0e:9b:
                    8f:e0:b5:96:d1:60:cd:7a:0c:63:08:96:4b:aa:a5:
                    36:b8:49:b3:a1:3f:e0:5b:09:d5:cb:87:82:b5:ae:
                    03:5b:c6:7c:43:99:85:90:ef:43:03:90:c0:65:71:
                    e0:93:4c:8e:d2:04:24:08:5c:05:23:98:29:eb:9b:
                    85:21:76:8b:c4:fc:ab:4c:a5:ee:ad:c2:56:13:6a:
                    1c:79:0c:95:9b:cd:b3:9f:fe:15:e7:cb:97:06:a8:
                    fc:74:52:0a:e6:58:a1:df:60:cc:85:c6:fa:56:89:
                    67:e8:ec:b3:db:55:d0:d7:84:38:31:ca:00:2b:e9:
                    20:6c:c9:fc:06:88:72:55:58:a7:6f:ad:71:d6:e9:
                    fc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E4:10:58:B1:A9:64:98:FB:2A:50:5D:BD:5D:74:0F:75:89:AB:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9d707c4-0c29-3365-a427-f6f46cb5cb3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:dc:83:b1:9d:77:b9:b6:fb:6e:a2:85:d4:2f:b6:15:86:49:
         64:ad:6d:f9:8c:35:e6:0c:63:fe:11:0b:a5:4b:ce:6e:7a:e0:
         5f:0a:78:c8:46:8e:3e:96:67:45:59:42:fc:5b:4a:20:1f:0d:
         6a:72:b7:56:6d:05:0d:1c:26:25:46:fd:21:39:5f:2e:f7:d8:
         7d:96:42:c3:0e:32:53:b0:d0:e9:85:e4:9b:3d:92:6e:1b:7e:
         9a:0c:6a:03:f5:0f:6e:39:34:4b:4b:71:18:3c:9a:fe:52:6b:
         d1:22:89:d4:cd:4d:3b:61:88:a8:ce:af:57:c0:95:11:35:de:
         f1:39:de:b3:d4:6b:77:5b:76:76:8b:8f:b2:40:c3:5e:c9:4c:
         7e:36:2c:6e:62:4b:a3:4b:4f:e0:42:c2:2f:87:7f:0c:d9:03:
         69:4b:d2:8f:87:8b:ca:1b:38:eb:e1:77:11:09:5c:ed:8a:d5:
         ef:24:64:3c:dd:46:28:b2:4a:2c:a3:19:ae:1a:29:b5:93:35:
         88:b1:41:6c:6d:8b:05:a9:0a:84:96:f9:cb:63:fb:06:4f:ca:
         fe:10:52:34:f8:7c:47:9e:54:ad:a9:24:91:6b:7f:2d:ae:0e:
         7a:a4:b4:62:87:a3:e8:ac:14:2c:49:e8:76:17:a9:0c:86:9b:
         4b:91:7a:ef
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq8vhkrGvObwVlgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
NjNmMTZiYzUtOTUzMC00ZDdhLTg4MWMtNzZlZDkwNTU4N2VlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0UPEkFBYLTpX63OZhyH/I/gGDiwI00aqV85
+aSE2ZBi1mrtzcZo3M3oSf7FC32K4656M31w666d/vC4/ww8WoweRaHvAQYwCf3q
vWnJvGvmHX4AnYGRIyQUEfC+bDrCYW45f/E9t6LCMNCclGRj8h8c0PbMDpuP4LWW
0WDNegxjCJZLqqU2uEmzoT/gWwnVy4eCta4DW8Z8Q5mFkO9DA5DAZXHgk0yO0gQk
CFwFI5gp65uFIXaLxPyrTKXurcJWE2oceQyVm82zn/4V58uXBqj8dFIK5lih32DM
hcb6Voln6Oyz21XQ14Q4McoAK+kgbMn8BohyVVinb61x1un8zQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGLkEFixqWSY+ypQXb1ddA91iau3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjlkNzA3YzQtMGMyOS0z
MzY1LWE0MjctZjZmNDZjYjVjYjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQKh
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACjcg7Gdd7m2+26ihdQvthWGSWStbfmMNeYMY/4RC6VLzm564F8K
eMhGjj6WZ0VZQvxbSiAfDWpyt1ZtBQ0cJiVG/SE5Xy732H2WQsMOMlOw0OmF5Js9
km4bfpoMagP1D245NEtLcRg8mv5Sa9EiidTNTTthiKjOr1fAlRE13vE53rPUa3db
dnaLj7JAw17JTH42LG5iS6NLT+BCwi+HfwzZA2lL0o+Hi8obOOvhdxEJXO2K1e8k
ZDzdRiiySiyjGa4aKbWTNYixQWxtiwWpCoSW+ctj+wZPyv4QUjT4fEeeVK2pJJFr
fy2uDnqktGKHo+isFCxJ6HYXqQyGm0uReu8=
-----END CERTIFICATE-----
Generated at Sun May 5 02:49:33 2024 by rpki-client on console-fra.rpki-client.org