Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09739e64-ba35-303f-988f-c209834a4dae.roa
File:                     09739e64-ba35-303f-988f-c209834a4dae.roa (raw, json)
Hash identifier:          li6TN8yywc27zdQ0wT4diennH3gJyR3AAnwjGCisOlc=
Subject key identifier:   2C:F3:1B:FB:8A:D1:60:C3:36:EA:18:32:0B:8C:FD:4B:BE:9D:5C:8E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004ACB4CB9B9CC00FF0A1C20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09739e64-ba35-303f-988f-c209834a4dae.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33659
IP address blocks:        2001:559:8634::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:cb:4c:b9:b9:cc:00:ff:0a:1c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=7b799df6-637e-479d-9916-9a56721d8b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:b4:1a:a0:3b:83:cd:36:1f:d9:ad:c6:fe:
                    a4:53:58:c8:4b:3c:04:95:d5:2b:62:1a:43:8e:a4:
                    df:43:b0:3a:7d:d9:87:c7:c5:ce:5d:59:52:b0:18:
                    34:2d:5d:c4:ce:fb:b7:11:38:c4:fb:a6:ed:06:d1:
                    39:95:aa:a6:7f:08:e5:e8:68:5d:e1:1d:df:4a:0c:
                    04:b0:19:78:25:5c:9a:9c:30:fe:12:f5:c1:64:ad:
                    78:86:68:4e:8f:70:12:25:85:ae:14:c9:e8:ec:ad:
                    a3:fe:c5:98:e3:cb:20:28:c6:79:50:84:9d:45:4c:
                    c1:16:9e:1d:c1:8f:47:01:77:40:4a:85:90:ef:ab:
                    b4:a8:28:5c:88:e6:1d:b7:03:c9:da:38:91:90:ed:
                    e7:c3:17:f1:7a:c0:9f:8d:2c:36:05:f2:59:85:80:
                    44:ac:b2:f5:eb:e6:8d:c4:4c:4e:a9:3a:4a:b5:98:
                    25:7d:96:88:1c:8d:51:44:e2:84:49:e7:98:31:55:
                    2c:25:2e:2d:c3:ce:dc:24:e2:24:29:7b:de:c9:be:
                    6d:d2:c8:57:5e:74:29:87:cc:d8:bb:db:f3:f2:f8:
                    91:d3:ff:37:60:cc:e8:bc:9e:96:d7:06:eb:6a:cf:
                    85:86:14:8b:2d:4e:d2:13:07:d2:ea:64:c2:c5:0c:
                    04:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F3:1B:FB:8A:D1:60:C3:36:EA:18:32:0B:8C:FD:4B:BE:9D:5C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09739e64-ba35-303f-988f-c209834a4dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8634::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:20:35:18:bf:66:fc:51:38:9e:9e:63:5e:00:d9:d4:94:17:
         4a:92:4b:bb:55:18:e4:3c:bb:78:22:30:f2:b9:a4:ee:d7:4d:
         6b:aa:f6:4b:04:c8:4d:3b:67:96:7c:fe:c7:b3:7f:c0:4f:e8:
         d9:b5:31:48:38:76:0f:b7:2e:d1:2f:9b:1e:be:54:df:75:ca:
         dd:b1:df:79:dc:47:51:3f:a7:ab:a0:0d:65:d2:be:a4:03:93:
         cf:43:b0:b0:e0:b6:08:b7:18:f3:c7:7f:26:0a:e8:81:b8:cf:
         90:11:fb:da:e7:59:38:41:61:5d:76:2f:7f:c1:27:f6:60:1b:
         52:34:3a:06:1d:4f:39:b2:2d:ac:5d:d0:e7:44:e7:c6:20:2c:
         8b:e7:2c:c4:e4:d2:da:31:72:6d:18:bc:ac:a3:aa:b4:0b:13:
         49:80:01:d8:59:43:b0:59:ca:7b:91:6d:f5:19:49:1c:15:58:
         9c:a6:70:5b:cf:9f:59:e9:2c:00:76:80:98:b6:c2:26:ac:16:
         c9:32:00:d6:d3:1e:8d:91:ea:ef:b9:03:ae:16:c6:5c:1e:d0:
         23:b5:2f:9d:c5:17:f7:e4:2f:64:5d:60:b1:98:c4:14:98:58:
         17:0d:fa:71:09:0d:65:67:50:ee:6c:46:68:2e:7b:cb:82:cc:
         a3:97:d2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:39:45 2024 by rpki-client on console-fra.rpki-client.org