Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cb86242-fb48-3794-97f6-50c02e1ba79b.roa
File:                     2cb86242-fb48-3794-97f6-50c02e1ba79b.roa (raw, json)
Hash identifier:          4oKiH6NuV9mtrohWNRpv+bWtETQh3Ir8i5ozBEdgMOA=
Subject key identifier:   E8:F4:21:77:56:11:F1:8C:F8:54:3B:CD:A1:DB:1D:EF:D8:05:E7:9D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B8686A05601CAFCCE8F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cb86242-fb48-3794-97f6-50c02e1ba79b.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33650
IP address blocks:        2001:559:8620::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:86:86:a0:56:01:ca:fc:ce:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=9cbf93b6-a1cd-41bf-8d8b-53a87eee113e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f5:d2:1c:9f:e4:69:04:17:d3:4a:19:98:15:
                    0f:91:de:f4:70:ef:b9:a0:06:de:e2:e5:20:77:46:
                    bd:fa:7f:21:0c:cb:61:1d:5b:b5:48:dd:6f:af:a7:
                    40:88:bb:e4:c3:95:6d:19:c1:59:f9:06:8d:33:f4:
                    c9:12:d5:14:0d:eb:c3:b7:a0:f9:30:bf:c0:08:16:
                    52:50:e3:ca:5d:d5:37:5a:27:c7:a3:92:60:1e:94:
                    a6:9b:1f:68:c3:cc:b7:3f:33:40:74:e2:fa:72:b3:
                    20:18:6d:0d:f9:95:7d:60:40:aa:1c:85:1f:9e:7e:
                    02:21:e2:4b:01:fc:31:13:da:3e:6c:80:f8:eb:86:
                    a7:0a:7e:2e:96:97:e8:fa:fd:d9:78:22:96:78:11:
                    bb:2c:4b:2d:d3:6a:ee:31:2d:04:09:19:0f:4f:fa:
                    1b:de:35:f2:0f:48:1f:aa:ad:50:20:46:4a:ee:f1:
                    eb:fc:9c:96:58:ee:8a:07:f6:f3:d0:7b:bb:01:07:
                    fe:be:b6:7f:be:86:84:eb:39:dc:18:3f:28:1c:d7:
                    27:a9:b1:66:57:0a:fb:52:74:17:c5:37:15:4f:6e:
                    ae:6c:10:9a:ef:30:61:29:61:18:a5:21:42:81:01:
                    fc:67:62:a1:1e:c7:29:45:d9:19:72:a8:2f:05:04:
                    06:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F4:21:77:56:11:F1:8C:F8:54:3B:CD:A1:DB:1D:EF:D8:05:E7:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cb86242-fb48-3794-97f6-50c02e1ba79b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8620::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:0a:45:8c:7d:22:41:6d:d2:a1:40:67:fa:4e:4d:00:53:33:
         c5:c5:15:b9:d9:b6:eb:b6:4c:e4:63:6f:4c:d9:01:fd:25:7b:
         76:da:40:68:c4:bb:9e:ea:46:f3:8f:39:a6:93:83:f5:d0:6d:
         c6:b5:29:35:bf:af:41:53:90:af:33:95:15:86:92:b6:cb:17:
         c9:5a:11:57:5d:8f:32:8e:59:a2:5f:97:8a:f8:ad:bb:26:89:
         aa:bb:25:a0:c1:25:94:45:ce:7c:7d:6e:b0:1d:93:1d:0c:e1:
         4d:d7:85:03:95:36:cd:48:e7:f0:e0:a0:1f:80:b6:fa:8c:0f:
         86:fa:e0:ed:e5:ba:d3:59:3a:5f:be:07:23:c0:e7:b2:3c:34:
         fd:0e:10:bb:9c:8e:57:cf:ca:9f:8d:b9:04:f6:c6:8f:90:86:
         10:52:32:18:9b:6e:e3:5b:2f:7a:ee:e7:bb:4b:8c:cf:38:ea:
         83:d4:84:7f:d1:fc:97:11:64:4d:09:c5:dc:ce:c4:19:18:23:
         26:f1:73:1a:9d:45:4c:cf:0b:7f:43:e4:a2:29:c8:dd:ad:69:
         fe:e1:b1:4a:cf:10:db:26:e2:9f:00:1f:dc:11:b8:8c:fd:41:
         73:45:ff:b4:9b:23:30:fd:a4:d8:52:c6:77:35:96:9d:80:99:
         e6:38:a2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:54:48 2024 by rpki-client on console-ams.rpki-client.org