Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd24ecbd-f213-3f11-944b-c5b5e17db143.roa
File:                     fd24ecbd-f213-3f11-944b-c5b5e17db143.roa (raw, json)
Hash identifier:          UzZLrLY7xLytRpDWLcO3AgpaHj4S28p9D8c35mBWiuk=
Subject key identifier:   A1:D2:19:0C:07:8B:6E:44:13:D1:07:6E:FA:D7:8E:0F:B9:76:BD:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB4B2371534BFA213AA0C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd24ecbd-f213-3f11-944b-c5b5e17db143.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7016
IP address blocks:        2001:559:c339::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:4b:23:71:53:4b:fa:21:3a:a0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=4bbc63d8-c80f-483a-ac57-31bd7dd19c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b2:5a:af:80:f9:4d:29:18:ce:11:0d:01:97:
                    ed:b9:6b:27:c6:40:60:60:ef:f5:c7:d6:c7:c5:0a:
                    87:5e:85:a8:5d:e5:8c:f3:49:d5:5d:a4:3f:d4:8e:
                    54:f9:33:99:58:5c:cf:dc:3b:00:08:3c:a1:07:ba:
                    21:ce:78:f4:6b:18:14:f3:2d:a6:43:a4:ae:96:69:
                    9d:e9:b4:dc:86:ce:e6:fa:63:f9:e3:d7:55:00:21:
                    a0:8f:e3:a6:cc:1a:fc:3a:c2:51:dc:cb:3f:bd:f1:
                    aa:6b:f7:e3:e7:58:41:af:ac:5f:d2:49:6d:57:b3:
                    6d:14:ff:3d:5d:d9:ee:82:6c:30:b2:16:70:2e:aa:
                    c7:a2:e2:67:ff:f6:21:e0:16:5a:d9:fb:2a:3b:7b:
                    e0:b4:b1:6c:e1:8c:0f:b7:61:0a:07:7a:16:6c:86:
                    54:18:b4:41:f7:d1:fd:95:9b:89:b8:30:3b:c0:ef:
                    a8:fe:59:17:56:04:33:80:e3:41:e6:bd:91:9b:8a:
                    34:b8:8b:61:e0:fc:c9:03:25:ff:b7:2a:bf:6b:fc:
                    d9:9c:7e:45:5b:64:00:61:9e:ff:7e:cf:43:c6:87:
                    e8:62:ef:0b:94:bb:32:33:69:cb:6b:fc:34:a2:76:
                    33:12:6f:fa:bc:fb:2e:54:db:d0:58:69:85:83:a7:
                    a1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D2:19:0C:07:8B:6E:44:13:D1:07:6E:FA:D7:8E:0F:B9:76:BD:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd24ecbd-f213-3f11-944b-c5b5e17db143.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c339::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:86:9c:fc:4e:76:99:e5:a5:38:c3:a4:8b:37:dd:8d:01:ea:
         25:95:cb:1f:22:96:39:fe:a7:73:a3:93:e4:5e:a2:cc:7a:ae:
         e6:d9:ed:de:b6:f8:18:91:1b:cd:7c:d8:65:39:6f:ed:1f:0d:
         45:09:56:37:a8:5f:d9:f8:f5:13:17:94:8f:5d:4c:64:a0:5e:
         94:5b:e1:82:c4:cc:e6:3e:24:fd:b2:2a:ce:bd:6e:66:9c:81:
         80:a7:e6:07:a3:4f:c9:8e:5a:34:2e:34:ce:1a:9b:6e:5a:59:
         c2:c6:92:28:bf:d7:0f:b5:ea:8b:02:78:bc:0b:d3:19:d5:75:
         0b:e8:7e:ca:4a:d9:d5:5e:d4:4d:ae:0a:74:b4:98:48:08:3c:
         a9:e9:6f:ce:6d:96:1f:6e:d3:4e:71:0f:08:8f:da:9d:ec:e9:
         ba:39:9f:60:00:25:7f:5d:32:f3:0e:0c:c5:3c:de:ed:61:15:
         f8:50:5d:de:73:50:ae:b8:ab:0c:66:50:63:33:46:31:00:d7:
         1d:44:a1:1f:5c:20:ee:1b:e1:b0:54:78:02:d3:7c:66:e7:98:
         a0:f9:6c:89:59:84:ff:76:eb:65:02:c2:f9:1c:45:87:ad:9a:
         9c:21:00:4e:30:56:19:0b:53:4b:c7:ae:cd:e4:11:34:14:0a:
         7f:99:ca:40
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEUfq0sjcVNL+iE6oMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
NGJiYzYzZDgtYzgwZi00ODNhLWFjNTctMzFiZDdkZDE5YzJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rJar4D5TSkYzhENAZftuWsnxkBgYO/1x9bH
xQqHXoWoXeWM80nVXaQ/1I5U+TOZWFzP3DsACDyhB7ohznj0axgU8y2mQ6Sulmmd
6bTchs7m+mP549dVACGgj+OmzBr8OsJR3Ms/vfGqa/fj51hBr6xf0kltV7NtFP89
XdnugmwwshZwLqrHouJn//Yh4BZa2fsqO3vgtLFs4YwPt2EKB3oWbIZUGLRB99H9
lZuJuDA7wO+o/lkXVgQzgONB5r2Rm4o0uIth4PzJAyX/tyq/a/zZnH5FW2QAYZ7/
fs9DxofoYu8LlLsyM2nLa/w0onYzEm/6vPsuVNvQWGmFg6ehxwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKHSGQwHi25EE9EHbvrXjg+5dr3oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmQyNGVjYmQtZjIxMy0z
ZjExLTk0NGItYzViNWUxN2RiMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcM5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAmGnPxOdpnlpTjDpIs33Y0B6iWVyx8iljn+p3Ojk+Reosx6rubZ
7d62+BiRG8182GU5b+0fDUUJVjeoX9n49RMXlI9dTGSgXpRb4YLEzOY+JP2yKs69
bmacgYCn5gejT8mOWjQuNM4am25aWcLGkii/1w+16osCeLwL0xnVdQvofspK2dVe
1E2uCnS0mEgIPKnpb85tlh9u005xDwiP2p3s6bo5n2AAJX9dMvMODMU83u1hFfhQ
Xd5zUK64qwxmUGMzRjEA1x1EoR9cIO4b4bBUeALTfGbnmKD5bIlZhP9262UCwvkc
RYetmpwhAE4wVhkLU0vHrs3kETQUCn+ZykA=
-----END CERTIFICATE-----
Generated at Sat May 4 14:59:16 2024 by rpki-client on console-fra.rpki-client.org