Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/314becd1-d9d0-32d2-955f-f7ca39cfa1e6.roa
File:                     314becd1-d9d0-32d2-955f-f7ca39cfa1e6.roa (raw, json)
Hash identifier:          C7IDhTejlbqa7Am7YyboRsuzJZ2OxQknUSZUO/MXiyg=
Subject key identifier:   ED:FC:AC:1A:F4:1B:CC:7D:72:6F:6B:E3:68:45:EF:91:65:BA:C5:94
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846126EA0E80F5070037031BC60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/314becd1-d9d0-32d2-955f-f7ca39cfa1e6.roa
Signing time:             Sun 02 Jun 2024 01:00:26 +0000
ROA not before:           Sun 02 Jun 2024 01:00:26 +0000
ROA not after:            Sat 31 Aug 2024 01:00:26 +0000
asID:                     33667
IP address blocks:        2001:559:f008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:12:6e:a0:e8:0f:50:70:03:70:31:bc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  2 01:00:26 2024 GMT
            Not After : Aug 31 01:00:26 2024 GMT
        Subject: CN=4f2c6675-acac-4f7f-bd89-532d8a820c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:22:4f:66:dd:94:d0:a9:b2:bd:09:e0:76:d5:
                    3f:4d:27:13:13:f3:36:41:0a:84:ab:78:4e:f0:27:
                    15:d1:1f:e1:22:73:57:c0:d4:46:13:7d:c2:ae:f7:
                    84:c6:85:c6:6a:37:b6:43:82:98:0e:e2:52:51:45:
                    98:38:6b:51:7c:c6:54:3c:21:c6:7b:55:94:16:34:
                    5e:47:e2:70:33:0a:0d:cd:51:e3:a0:14:0d:7b:0c:
                    73:e0:44:9d:29:6c:93:3a:59:17:3e:f7:7a:b6:d5:
                    cc:e6:f6:6e:3d:ae:92:69:23:11:2f:84:a6:d0:31:
                    71:c4:2b:98:74:53:d1:f6:06:06:14:a2:65:42:90:
                    12:7e:3f:b3:56:c2:e5:69:ff:75:1e:6f:f7:d5:0d:
                    fe:de:6c:0f:b4:cc:a6:d2:29:12:d3:38:f6:ae:f8:
                    63:33:c6:ea:0c:53:91:b8:27:95:88:ae:0c:9d:1d:
                    5e:66:f8:87:5f:73:83:a7:0b:31:04:c7:4a:61:55:
                    7d:ce:3e:3b:7e:9f:75:ee:2c:48:19:ed:9e:ea:2a:
                    52:4e:f3:dc:06:2f:77:cd:81:bf:b5:a0:d1:a2:d3:
                    ee:bb:15:77:eb:3a:bb:c1:8b:a4:cf:3a:d1:55:94:
                    39:52:ef:4f:bb:c4:1b:bb:08:3b:9c:2f:97:f3:4b:
                    ce:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FC:AC:1A:F4:1B:CC:7D:72:6F:6B:E3:68:45:EF:91:65:BA:C5:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/314becd1-d9d0-32d2-955f-f7ca39cfa1e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:f008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:44:15:a1:76:db:8b:e3:d4:60:ab:49:2e:ee:6e:d3:8b:ec:
         48:86:e3:28:1f:f5:b2:0c:2d:71:4c:f4:ab:8c:e5:df:a1:c5:
         2b:a9:15:c0:49:df:5c:35:73:9d:06:88:4e:7a:57:1c:72:a2:
         f7:17:14:c3:9d:00:3c:13:d4:b2:67:c8:4b:ec:d5:67:5c:f6:
         bb:19:ce:7f:04:ea:8f:1e:a6:d8:d7:d9:48:c8:8b:9e:2b:53:
         6a:46:ec:95:f0:c9:4f:48:c3:ea:25:ca:76:df:d6:5f:56:8d:
         8f:3a:7e:ed:bb:db:de:c0:19:05:2f:d7:16:58:f2:da:c1:ef:
         bc:02:4d:58:f9:a7:17:c6:92:d9:44:ca:31:7f:24:78:3c:48:
         58:6d:e9:88:66:2b:82:1e:22:f0:d7:04:80:41:c4:f6:86:f5:
         41:53:39:b3:ed:aa:dc:d2:38:85:2e:8b:2f:19:80:07:0b:5e:
         a4:ae:4c:5a:a3:ed:a7:8b:c5:01:62:ce:e8:cc:8d:6a:0b:46:
         20:e3:90:47:a5:aa:c2:95:bb:22:ac:11:e5:57:3c:25:7e:79:
         3f:db:c2:a2:6c:74:f3:1c:aa:15:28:60:6a:28:2f:da:d5:ff:
         f0:b7:b4:69:92:b2:d9:5d:86:4f:78:f0:fb:d0:3d:fe:a2:99:
         1b:ac:0e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:28:42 2024 by rpki-client on console-fra.rpki-client.org