Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe1d285b-82c4-35e3-97ba-9a7f9e6185d8.roa
File:                     fe1d285b-82c4-35e3-97ba-9a7f9e6185d8.roa (raw, json)
Hash identifier:          HXWDVAZ+u/dp8aVq9xvTNEd3mB6Q6/vgNzO/C3Lg6UU=
Subject key identifier:   E9:39:3F:51:41:F2:8E:41:17:E9:37:01:80:B6:BC:82:37:9E:74:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584235CCC2A1EA8D81602B7FE980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe1d285b-82c4-35e3-97ba-9a7f9e6185d8.roa
Signing time:             Mon 12 Jun 2023 12:00:00 +0000
ROA not before:           Mon 12 Jun 2023 12:00:00 +0000
ROA not after:            Sun 10 Nov 2024 05:00:00 +0000
asID:                     33662
IP address blocks:        2001:559:8772::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:35:cc:c2:a1:ea:8d:81:60:2b:7f:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 12 12:00:00 2023 GMT
            Not After : Nov 10 05:00:00 2024 GMT
        Subject: CN=e6740dc1-41d4-44f9-82b1-48526e073b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:f7:fc:7c:c7:eb:63:cb:c7:c0:54:51:4e:
                    2b:b5:a6:4c:6b:17:a1:3d:0f:6c:a6:b2:e8:20:19:
                    3e:70:1e:23:4a:a8:73:8e:7c:c7:f8:54:49:85:c4:
                    bc:94:51:8c:bf:71:51:01:95:50:f4:85:f1:c7:1e:
                    15:7e:0d:2b:d3:c4:d8:cd:ca:67:54:b2:6b:bb:50:
                    33:ed:9c:62:eb:34:04:69:1f:59:17:1f:b3:a2:82:
                    47:74:27:a3:e6:2f:58:89:78:4a:f1:b4:40:01:52:
                    ee:b8:08:f3:e2:e5:cc:8e:55:20:e0:99:7f:50:c5:
                    7f:a7:ea:2d:f5:17:9e:55:f3:64:fc:08:a5:75:9e:
                    78:58:d1:47:22:14:3d:ee:60:c3:b9:e0:15:d6:56:
                    4d:fa:58:e4:5c:b3:94:4c:72:b3:ac:23:b4:bb:ba:
                    b8:87:7a:25:5f:1e:9a:62:29:fb:16:03:2a:e4:8d:
                    e6:1a:8d:13:51:56:9b:cf:f2:28:5f:96:ac:2e:a1:
                    1d:5a:62:98:9a:0e:93:f7:6f:f2:6d:96:7d:29:2a:
                    54:dd:03:6e:5a:66:2c:33:6c:b7:32:dc:ba:15:42:
                    0f:6d:c5:bb:bb:f1:bd:48:99:01:a8:da:7d:20:57:
                    d4:d8:ca:b4:ff:d6:4d:c5:79:41:8b:28:12:cd:8f:
                    c5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:39:3F:51:41:F2:8E:41:17:E9:37:01:80:B6:BC:82:37:9E:74:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fe1d285b-82c4-35e3-97ba-9a7f9e6185d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8772::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f6:c2:93:b8:5a:4e:5b:a0:6b:61:82:9e:f0:c6:43:58:14:
         f2:1e:85:d8:69:d3:58:02:ff:ec:ab:c5:d4:19:98:bc:c6:0e:
         c1:3d:f2:2e:5a:1f:bc:bf:15:4b:4a:5f:06:79:cb:f8:4e:c8:
         a9:a7:5b:50:15:b5:bf:e9:17:26:cd:b5:89:a4:bd:9a:eb:cc:
         95:97:c0:50:48:10:5c:c5:a6:1d:c1:c9:e2:d1:1b:71:6b:3f:
         9d:e9:08:8c:0a:d9:53:05:49:55:cd:84:9b:16:a4:1f:7c:7b:
         e3:40:a2:ba:2b:e3:f3:76:62:4d:4b:96:72:d1:bc:ad:12:c7:
         7e:be:ab:1c:db:3c:5c:15:50:9a:6c:fa:f8:df:1a:f6:65:22:
         2b:3a:09:5a:25:67:80:09:94:6f:09:6f:82:6b:13:0a:74:0f:
         5b:69:77:42:96:44:43:bb:41:73:9a:4b:8b:93:bf:35:55:5b:
         47:c7:87:e8:00:1d:07:6a:f5:89:3a:e1:78:28:64:e2:db:5a:
         7c:4e:31:5f:9b:7e:a9:b1:dc:93:91:45:47:9f:ea:9f:ea:b6:
         e6:e1:cf:78:2f:62:9b:de:4c:b5:c2:ad:83:0b:22:17:77:40:
         d7:6f:2d:c3:d4:8d:7d:9a:d9:5b:29:0e:cc:18:bc:6d:e5:95:
         01:79:d9:5e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEI1zMKh6o2BYCt/6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTIzMDYxMjEyMDAwMFoXDTI0MTExMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZTY3NDBkYzEtNDFkNC00NGY5LTgyYjEtNDg1MjZlMDczYjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthH3/HzH62PLx8BUUU4rtaZMaxehPQ9sprLo
IBk+cB4jSqhzjnzH+FRJhcS8lFGMv3FRAZVQ9IXxxx4Vfg0r08TYzcpnVLJru1Az
7Zxi6zQEaR9ZFx+zooJHdCej5i9YiXhK8bRAAVLuuAjz4uXMjlUg4Jl/UMV/p+ot
9ReeVfNk/AildZ54WNFHIhQ97mDDueAV1lZN+ljkXLOUTHKzrCO0u7q4h3olXx6a
Yin7FgMq5I3mGo0TUVabz/IoX5asLqEdWmKYmg6T92/ybZZ9KSpU3QNuWmYsM2y3
Mty6FUIPbcW7u/G9SJkBqNp9IFfU2Mq0/9ZNxXlBiygSzY/F9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOk5P1FB8o5BF+k3AYC2vII3nnShMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmUxZDI4NWItODJjNC0z
NWUzLTk3YmEtOWE3ZjllNjE4NWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYdy
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHz2wpO4Wk5boGthgp7wxkNYFPIehdhp01gC/+yrxdQZmLzGDsE9
8i5aH7y/FUtKXwZ5y/hOyKmnW1AVtb/pFybNtYmkvZrrzJWXwFBIEFzFph3ByeLR
G3FrP53pCIwK2VMFSVXNhJsWpB98e+NAoror4/N2Yk1LlnLRvK0Sx36+qxzbPFwV
UJps+vjfGvZlIis6CVolZ4AJlG8Jb4JrEwp0D1tpd0KWREO7QXOaS4uTvzVVW0fH
h+gAHQdq9Yk64XgoZOLbWnxOMV+bfqmx3JORRUef6p/qtubhz3gvYpveTLXCrYML
Ihd3QNdvLcPUjX2a2VspDswYvG3llQF52V4=
-----END CERTIFICATE-----
Generated at Sat May 4 14:59:20 2024 by rpki-client on console-fra.rpki-client.org