Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/161a7ccf-f15e-3036-be58-88e0c3725d26.roa
File:                     161a7ccf-f15e-3036-be58-88e0c3725d26.roa (raw, json)
Hash identifier:          stgV5uwlHE1hat0d/o4KvVNYx0ep+WRC3Wh4SbaaPVk=
Subject key identifier:   A0:BD:68:9F:2B:7E:C5:CD:A1:98:51:2F:87:60:4E:A0:BB:AF:AE:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C5CC6CA9E5E9E2A59E580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/161a7ccf-f15e-3036-be58-88e0c3725d26.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33657
IP address blocks:        2001:559:84f5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:5c:c6:ca:9e:5e:9e:2a:59:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=f5a75e12-4704-4a4c-8ebd-ea65b75997a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:14:87:77:d2:26:ae:a7:ba:44:9c:12:56:
                    4e:d3:e8:fd:0e:5c:eb:6a:5e:0d:3b:e1:87:45:96:
                    a0:41:8b:80:89:08:97:d0:79:5b:8f:1b:50:d8:78:
                    0c:9a:84:c6:e6:6d:96:4f:a8:97:f7:de:99:3b:15:
                    e5:37:79:f5:79:3d:f8:8f:b6:6f:0b:41:70:97:0e:
                    45:8d:39:60:fe:1a:05:ab:70:4f:5f:33:89:d0:8d:
                    d3:3c:bb:77:23:cd:d1:da:ca:a0:21:63:01:e4:68:
                    ad:5b:62:00:42:2d:69:38:d0:2e:62:63:5b:d7:44:
                    25:57:13:7f:ff:b2:2c:60:cb:06:c3:93:63:3c:0c:
                    57:58:9d:76:3f:4d:6c:ab:e4:fe:1e:0a:a4:58:b4:
                    81:c8:d8:b5:03:c7:e9:16:31:ef:77:f4:56:34:38:
                    48:47:48:ae:32:c0:d4:12:72:ac:74:e7:ff:15:1c:
                    84:f8:8e:9a:41:4c:13:06:27:2f:0d:06:6c:f5:d9:
                    5e:7c:ca:7f:59:26:cf:33:a5:6b:a0:a4:b4:85:15:
                    38:5c:8e:a0:3d:5c:bf:6d:84:3f:1a:43:4a:5c:eb:
                    44:52:6d:6a:89:28:d8:43:3d:fd:5f:0f:43:10:c5:
                    10:c4:5d:cf:a4:3c:f8:57:93:78:3f:3a:a7:66:54:
                    f1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BD:68:9F:2B:7E:C5:CD:A1:98:51:2F:87:60:4E:A0:BB:AF:AE:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/161a7ccf-f15e-3036-be58-88e0c3725d26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:84f5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:65:d1:c4:7e:b9:76:64:53:71:7f:eb:f2:3a:ae:43:96:e6:
         d1:b6:e2:71:79:d1:78:9d:76:be:85:71:aa:28:0a:52:a7:78:
         aa:06:c8:c1:df:55:ed:96:d4:76:25:ad:10:97:48:74:19:27:
         a6:d3:2e:7d:9e:5b:bc:dd:0d:f0:1e:07:63:60:9e:9a:54:32:
         e1:5f:f3:66:57:85:b7:c6:03:4c:70:ed:d3:84:64:a3:bc:00:
         50:13:e1:4e:4f:bc:9d:21:b8:0f:a7:c4:cf:9b:ca:d0:b3:67:
         64:84:74:60:f7:4c:8e:b7:73:fb:ad:10:7f:0f:f1:72:ca:9b:
         3c:59:dd:81:dd:8c:a4:99:87:06:3c:5f:cf:42:c7:9b:68:08:
         04:25:b7:b0:ff:6c:90:c5:65:95:27:b6:5a:70:93:48:be:32:
         e6:56:b7:e2:0e:0d:37:6c:7d:0b:dc:d9:0a:f5:9a:c8:cc:59:
         18:8f:06:ac:18:60:b6:93:13:62:87:58:0e:01:fc:3f:16:04:
         b7:49:2e:0c:4f:33:72:01:a4:4e:83:92:a7:be:e9:f6:f1:22:
         54:65:63:10:dc:77:ec:62:38:d3:89:88:d2:07:42:67:ba:bc:
         c0:d4:ba:5c:f3:bc:1a:cc:e7:ab:80:e4:23:66:01:92:23:d7:
         09:cc:61:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:28:48 2024 by rpki-client on console-ams.rpki-client.org