Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23d86d8a-f24b-373d-a169-f42f377b56b1.roa
File:                     23d86d8a-f24b-373d-a169-f42f377b56b1.roa (raw, json)
Hash identifier:          p7pvg4JT4sQg1vbue7ekcuMUbr7T2TSg+26hEHZ/ov8=
Subject key identifier:   D5:A4:5A:A6:F0:48:A8:A9:A7:EB:B0:6B:A6:08:F8:4A:CE:CE:09:0E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A890F4689BC4E0A0A9A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23d86d8a-f24b-373d-a169-f42f377b56b1.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33287
IP address blocks:        2001:559:781::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:89:0f:46:89:bc:4e:0a:0a:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=605061dd-7146-4ae5-9824-ef6a36dad9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:b1:9f:84:fb:ad:5f:5f:c4:ea:8e:17:37:
                    90:a4:6a:9b:62:ac:d6:78:d7:31:92:99:a7:45:a3:
                    5f:02:45:76:87:09:cb:2d:74:b1:a6:c9:d2:1c:b0:
                    fb:3a:21:ba:e6:47:e4:6b:44:73:62:42:e5:ba:90:
                    64:58:e0:3c:ea:c4:5b:df:8e:6c:66:a4:3a:f7:1f:
                    65:dd:1c:9c:99:b5:9f:01:81:7e:82:67:fa:92:c5:
                    93:c9:5c:3c:1d:25:d6:e4:19:05:21:a3:e4:3b:2f:
                    05:65:1f:06:b8:69:33:0c:8f:dd:44:28:63:87:d2:
                    c3:44:e8:09:fa:cf:90:8a:43:78:2f:3c:f0:20:9e:
                    da:a3:79:e7:e2:34:a7:af:fc:4a:2d:b8:53:63:97:
                    0b:0c:39:ff:c6:2d:a0:ff:b0:da:91:93:46:c1:4c:
                    bd:0f:f0:44:80:d9:04:2f:be:ce:7b:e5:da:e2:dc:
                    67:e8:47:b3:31:53:7e:ac:d0:e3:33:16:39:88:8b:
                    9a:ab:52:90:ed:fc:5d:d2:e8:0e:4a:d4:61:ba:e0:
                    21:4e:9a:d5:5a:43:a4:c2:b4:3b:59:ff:e8:f9:e1:
                    9f:6d:6f:53:88:78:72:f5:91:96:07:76:88:07:25:
                    a5:0b:27:65:95:86:e3:8f:ea:f7:49:31:13:b7:e1:
                    85:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A4:5A:A6:F0:48:A8:A9:A7:EB:B0:6B:A6:08:F8:4A:CE:CE:09:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23d86d8a-f24b-373d-a169-f42f377b56b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:781::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:e4:d4:4c:e6:c8:08:a6:a2:cb:05:6f:84:15:61:86:f7:3c:
         0b:aa:34:90:38:37:b3:77:97:21:ec:22:76:c1:68:76:19:68:
         6b:d5:f0:75:da:4e:15:91:23:00:49:be:d0:22:75:53:db:96:
         73:41:33:b3:74:39:f4:41:82:70:be:4f:56:21:da:96:8b:f1:
         60:69:4b:ec:54:d6:4d:25:6b:17:52:c0:69:9a:a1:fb:a7:6c:
         80:1e:5e:dc:f4:ba:6c:28:28:8c:c1:1b:56:2a:0c:0a:61:3e:
         9a:14:59:f4:98:5f:84:52:60:77:64:b7:02:1b:d5:ee:ed:fa:
         64:87:f5:ef:87:35:cb:23:05:f7:d1:3b:98:68:93:70:80:d4:
         88:47:b4:60:d1:91:1f:fe:74:32:5e:75:c1:78:79:f0:8e:9f:
         4d:0d:80:65:1d:38:74:3d:68:d0:53:2d:9a:e9:d3:47:ba:bb:
         a0:6e:fa:9c:61:6e:a1:33:13:7f:5c:4c:bc:15:e9:f5:69:64:
         01:3e:2f:a0:03:e9:1c:65:73:5f:8d:8c:cc:5f:69:2e:8a:a0:
         c3:11:f1:8a:55:ce:a6:1b:d3:ca:c2:19:d8:fa:84:ac:c6:01:
         14:dd:3b:84:dd:20:c7:5f:9f:49:f6:59:7e:53:e6:59:69:5b:
         a8:54:24:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:39:32 2024 by rpki-client on console-fra.rpki-client.org