Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b52a002-d8cc-3d0c-bfa4-14d24e913d70.roa
File:                     2b52a002-d8cc-3d0c-bfa4-14d24e913d70.roa (raw, json)
Hash identifier:          0O7eCSb01oGN174qfaywG81Yc20vkPmjp/6kExMOfYI=
Subject key identifier:   20:FE:21:A9:DE:46:B2:06:23:C0:31:70:6B:D2:FC:6E:3D:F9:B9:FB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004AA210F22D35CA05FDA340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b52a002-d8cc-3d0c-bfa4-14d24e913d70.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33491
IP address blocks:        2001:559:4ff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:a2:10:f2:2d:35:ca:05:fd:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=068294f6-9ff6-443f-9628-0d0ece87fa40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5c:30:d9:33:9b:bf:e7:ae:e4:7e:b8:c5:ad:
                    54:28:c2:85:9e:97:2c:b2:90:18:b1:94:6f:4c:69:
                    1f:51:82:43:2f:bf:50:55:3e:d3:ee:05:e1:f4:b8:
                    19:46:43:41:eb:22:bf:c8:84:b9:92:d1:79:8f:30:
                    3e:85:f5:b6:3d:f6:6c:cb:62:46:2b:48:83:4b:db:
                    a9:f9:a2:9a:78:73:14:92:3d:f6:34:1e:8a:66:93:
                    ea:cf:9e:12:98:65:97:8b:94:48:46:00:51:44:41:
                    bf:60:f9:22:55:d8:0e:2c:5a:8d:fe:ac:cc:9b:42:
                    08:b6:5e:a8:bd:3c:50:00:2a:21:a4:15:92:2d:20:
                    25:0f:77:79:b3:84:c2:c4:b0:48:f9:ef:92:ff:78:
                    51:20:ae:72:e4:d4:39:c2:86:06:e3:8a:78:79:04:
                    8c:c6:7c:41:60:d2:61:46:ed:3c:6e:a1:92:e4:b2:
                    a0:bd:2c:d1:e4:f5:96:fe:ee:4e:de:66:0c:de:bb:
                    60:a3:79:bc:05:f5:18:23:e3:b0:4d:56:16:ba:2c:
                    06:1a:28:3d:ec:06:3a:58:38:d6:49:bf:aa:2e:40:
                    9b:ee:fd:9a:64:04:97:55:00:b1:ae:54:7d:ad:18:
                    ff:50:34:a4:22:a2:ff:52:a1:61:89:8d:82:1f:6c:
                    c8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FE:21:A9:DE:46:B2:06:23:C0:31:70:6B:D2:FC:6E:3D:F9:B9:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b52a002-d8cc-3d0c-bfa4-14d24e913d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:4ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:13:1d:8f:ac:19:24:95:aa:7a:d9:58:41:8f:c8:38:39:cc:
         4f:82:e1:fb:7e:f4:60:82:e3:75:79:dd:8d:c5:48:61:4f:f1:
         e3:71:fe:2e:a2:9b:df:a9:cb:98:b7:59:13:fa:cf:d6:94:58:
         37:be:f8:f2:db:70:26:c5:5b:88:8f:0f:29:ab:7f:07:da:68:
         26:92:a2:27:2f:a8:a2:b0:09:5f:21:4e:3a:bc:c1:2e:32:1e:
         db:9c:e8:25:e7:a7:93:7d:34:5d:7c:67:c5:41:a6:d8:39:2f:
         0e:ca:65:97:6b:fa:38:d6:f3:36:51:e8:ec:4f:ed:6d:ec:2c:
         b5:e3:aa:d5:aa:da:21:07:7d:19:f6:b7:a8:38:d2:5e:95:04:
         59:16:e2:95:bb:60:c7:ed:c1:8a:3d:1c:73:8c:9c:a5:c1:d6:
         d6:5a:26:08:70:23:06:56:38:b6:10:59:cc:04:fe:94:e1:0a:
         47:cf:f5:c0:43:8b:8c:c4:ee:2e:fb:cd:70:14:d1:67:4e:be:
         6d:0f:f6:d4:51:1e:38:b0:1f:02:39:68:34:4a:a4:be:c7:26:
         6e:2b:f3:c8:44:5a:bd:e7:24:35:f6:40:b6:50:c3:d0:24:7e:
         88:93:6e:a4:e5:b9:26:25:7a:d5:84:76:b4:b0:54:83:9f:51:
         8d:d6:a7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:28:33 2024 by rpki-client on console-fra.rpki-client.org