Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35589b1a-fc36-38b9-8391-eaf7327f9d11.roa
File:                     35589b1a-fc36-38b9-8391-eaf7327f9d11.roa (raw, json)
Hash identifier:          9KvZ92kgkj0g8wkcCItzz4cvy7wHqXwrmDvx/ru1QF0=
Subject key identifier:   45:CD:FB:50:2D:BF:DA:B2:5F:B1:14:4F:D6:8E:97:32:0C:DB:C3:0B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C4994A0ADFA304E2DC180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35589b1a-fc36-38b9-8391-eaf7327f9d11.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33491
IP address blocks:        2001:559:8051::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:49:94:a0:ad:fa:30:4e:2d:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=874100a7-fb2b-4692-ad6e-347808a4a912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4f:13:95:32:78:03:8d:67:5d:e0:25:e2:f7:
                    9a:bb:ab:af:86:eb:47:11:f1:22:e3:65:a6:0c:ec:
                    57:4f:47:7d:36:bc:8a:91:70:c6:ea:41:69:ad:2d:
                    b9:36:15:e0:08:97:7c:d4:1f:30:44:08:2d:30:be:
                    bd:d9:6e:69:cc:81:9e:e9:39:0a:a0:79:1e:b8:fc:
                    9c:f5:f6:7c:24:fb:79:d7:89:29:0b:10:43:a6:28:
                    f2:ac:44:09:6c:a1:03:d9:bc:ba:99:0b:c2:4f:bd:
                    5e:06:96:a3:44:5f:f1:e1:23:ae:83:54:6f:60:92:
                    33:0b:f4:8d:df:4f:71:66:25:55:95:23:a9:2d:e2:
                    b0:4a:54:0e:7a:44:c1:e7:64:6b:c4:e0:56:29:e2:
                    b4:88:5c:93:7a:6b:46:6a:6a:20:01:e4:20:32:a3:
                    ec:39:87:35:25:38:c2:ba:ec:fb:a1:a3:9c:c6:e4:
                    50:06:fd:72:1b:ec:a9:21:f2:5c:a6:ab:7e:ae:20:
                    d4:d2:d5:ce:69:39:8b:48:22:36:b2:65:26:1d:20:
                    a9:dc:f5:76:19:8e:26:de:4d:29:41:47:41:ab:6b:
                    58:d7:32:f4:b3:c5:24:cc:1c:86:8f:65:e7:42:24:
                    71:4a:34:38:5a:71:c0:a1:f2:05:da:9f:f6:6a:a2:
                    06:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CD:FB:50:2D:BF:DA:B2:5F:B1:14:4F:D6:8E:97:32:0C:DB:C3:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35589b1a-fc36-38b9-8391-eaf7327f9d11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8051::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:3e:ce:cd:ef:d9:7a:20:a6:94:7e:d6:43:0d:b8:c3:cc:58:
         05:ff:41:8f:ed:06:85:a3:81:f8:e5:7c:5f:1e:22:37:32:70:
         26:f8:78:ad:36:b5:69:ad:aa:74:f9:51:d7:ba:6a:f1:b1:c6:
         b0:c7:9c:e9:9b:70:4f:74:9f:27:22:45:e0:39:78:70:64:90:
         85:dd:02:5f:9c:90:2f:df:5b:ec:b6:ec:6e:9a:f4:00:15:fd:
         37:ae:b6:fb:9e:57:7f:62:4d:28:f2:87:04:eb:d3:07:a7:54:
         70:3c:ad:de:19:70:e8:6c:33:f5:2a:8e:66:d1:8b:20:ad:13:
         c4:e2:7f:61:61:2b:8b:61:a4:45:3e:cd:55:1d:7b:6c:4b:ee:
         da:6f:a9:3b:c9:38:00:2e:83:6a:e8:1c:15:92:d4:46:9e:22:
         0b:4f:b9:6c:a8:9d:34:5d:38:de:3a:52:f2:af:8c:11:f0:ee:
         c1:38:2b:99:52:12:b3:d3:c4:3c:15:1f:f2:da:52:d0:57:d6:
         7b:99:4a:24:15:f5:45:92:ee:3d:d4:d1:c3:8a:14:df:27:12:
         19:e1:b4:c5:ca:4a:32:59:ba:a6:79:1d:a0:1f:3c:86:36:35:
         92:85:ed:8b:10:32:d3:0e:a2:80:68:53:4f:86:6c:1a:fd:4d:
         e1:20:14:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:40:39 2024 by rpki-client on console-fra.rpki-client.org