Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4889dcdd-7a74-3481-9aa0-3a39771a3db6.roa
File:                     4889dcdd-7a74-3481-9aa0-3a39771a3db6.roa (raw, json)
Hash identifier:          7NjJl6W+kH4yK6RoOYWL8gMDyeljnnMnCi724vG5q34=
Subject key identifier:   5C:D6:1F:34:4D:4A:B6:5A:9E:4A:0D:63:D3:E3:EE:AB:4C:F6:46:3B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049C00F1017ADAFED7F3180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4889dcdd-7a74-3481-9aa0-3a39771a3db6.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     20214
IP address blocks:        2001:559:8150::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:c0:0f:10:17:ad:af:ed:7f:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=6ca33227-93a0-4ed8-9909-8fecc19a16b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:06:31:67:b1:11:50:3b:f9:f4:3d:da:63:16:
                    41:0c:08:82:7c:78:48:1a:f6:0b:5b:58:b4:36:1a:
                    78:6e:27:b6:06:0b:21:05:3e:82:87:a2:20:e4:b3:
                    7e:0d:25:ab:38:0e:68:48:77:31:a0:28:07:ae:21:
                    8a:18:ca:ca:9d:dc:4e:dd:ec:69:63:83:e6:25:02:
                    4a:b1:84:1f:ce:58:e7:38:c1:c6:d4:82:b6:07:c4:
                    60:ce:a9:75:c4:c4:2b:bd:d8:0c:01:bd:88:c7:54:
                    3e:5e:78:f5:d1:8d:9e:89:22:1e:88:96:3a:4f:ff:
                    79:74:de:33:42:43:7b:2e:21:7c:4c:e9:c8:08:00:
                    a1:d1:53:14:69:41:77:7a:82:9a:04:19:7a:44:75:
                    20:07:18:a8:d0:50:c3:18:fa:72:f6:38:07:a4:19:
                    5c:93:f6:f5:3b:2d:7e:48:df:76:1c:1b:eb:40:9a:
                    ec:40:ad:0e:9b:b3:3b:7b:aa:f9:fb:97:6e:9b:67:
                    98:7f:74:3f:b2:75:2e:4d:dc:df:2c:6d:40:0b:4b:
                    87:7e:f0:8c:c5:e6:86:c5:61:2d:79:d1:91:e4:a0:
                    ae:02:23:cc:03:15:36:2b:45:d6:94:27:9c:ef:84:
                    c9:44:a5:b0:d7:a7:53:f7:8b:f2:29:8d:49:94:87:
                    d6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D6:1F:34:4D:4A:B6:5A:9E:4A:0D:63:D3:E3:EE:AB:4C:F6:46:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4889dcdd-7a74-3481-9aa0-3a39771a3db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8150::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:52:b6:d0:e3:4a:c9:ce:17:84:82:50:7e:54:19:43:22:13:
         72:17:56:43:aa:c6:51:af:66:65:06:e1:f3:2a:8f:ab:90:dc:
         32:fa:63:ca:28:48:4b:d7:af:c1:ca:c2:bb:77:63:93:dd:80:
         a7:cf:0c:2f:74:8d:c2:d8:6a:ba:6f:7d:af:20:44:ca:1c:81:
         b3:5e:b8:32:2d:a0:99:b2:00:77:0c:cd:29:46:1f:4c:19:6f:
         84:05:79:ed:83:6a:e9:3d:be:cc:46:36:99:d7:1f:f5:b6:6c:
         a0:d7:68:b8:62:f8:3b:fe:bd:97:4f:62:ee:d7:11:0e:1e:1a:
         79:7d:bf:0c:30:02:00:f4:77:f1:5b:ed:79:69:c4:f0:e5:c3:
         d0:2e:35:4f:12:c6:36:90:71:89:51:38:89:f0:04:3d:a5:ec:
         e3:ac:19:a1:f6:77:46:ce:d5:ce:56:ac:b9:72:a9:01:58:6e:
         8e:4b:05:53:c1:09:9f:68:7a:37:55:c8:ac:d5:cf:14:a5:9a:
         aa:f6:95:af:2f:db:ed:7f:55:38:fc:41:bb:ac:8d:4d:60:e1:
         3f:18:6a:af:3f:68:1f:7c:99:b8:2e:1e:70:cf:f0:0c:88:31:
         b3:c1:b8:48:0a:59:de:3d:37:97:9b:ea:93:65:8e:40:d0:0e:
         5a:47:d9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:08:15 2024 by rpki-client on console-ams.rpki-client.org