Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5becfb-e1ce-3285-9ef6-a8f625ce0590.roa
File:                     4b5becfb-e1ce-3285-9ef6-a8f625ce0590.roa (raw, json)
Hash identifier:          Qj/I733Um+HTwuGXT3Tmr10r9rpFekfiTodVhSIy3JY=
Subject key identifier:   7A:D7:B8:FA:08:DF:A5:86:97:2E:62:A6:BA:FD:31:16:F3:0C:B5:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C34645E6BD74CFCCAB300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5becfb-e1ce-3285-9ef6-a8f625ce0590.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33287
IP address blocks:        2001:559:c21b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:34:64:5e:6b:d7:4c:fc:ca:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=74da3555-e95e-4ca0-a8af-c7362599189c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:92:b6:c8:b9:f7:7d:f4:4c:26:20:42:84:5a:
                    f8:cb:50:7e:ff:cb:a6:4e:0d:3a:ab:b5:71:12:d4:
                    df:f1:5a:14:25:5f:3b:26:76:92:28:e4:0f:09:e6:
                    ba:ce:ac:2b:8c:02:a7:52:7a:3c:5d:94:e1:c0:75:
                    14:a7:15:12:5f:6e:df:db:64:f9:a4:f9:7e:c3:ed:
                    ca:d0:66:48:3f:81:36:c1:d3:60:e3:75:c9:e7:17:
                    bf:35:6f:99:2a:71:9b:7a:21:f2:d6:bc:ad:a3:3a:
                    2e:53:b0:5b:8b:56:c0:b7:73:8f:d5:41:02:ba:8c:
                    54:ef:1f:cb:fd:c6:c1:9a:b9:17:a3:0a:e9:36:49:
                    aa:63:44:30:9c:bd:c5:dc:3c:c3:64:28:e2:07:55:
                    43:07:52:87:d8:7b:77:8b:1a:23:7b:0b:f8:66:a4:
                    c8:1b:18:14:1f:7e:5d:14:f9:bd:9f:9a:e5:41:4a:
                    95:dd:8f:b8:0b:f7:85:71:2b:10:39:f0:cf:38:5a:
                    06:ce:38:2a:6b:5d:bd:b3:da:af:63:07:e4:80:46:
                    ce:0d:f3:db:61:42:ab:cc:8d:92:9a:fa:d9:ef:9c:
                    87:7a:d1:25:5a:6f:09:37:37:35:42:cc:c1:14:33:
                    8f:4b:4d:76:32:4a:62:7f:50:53:ee:48:76:af:3b:
                    b4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D7:B8:FA:08:DF:A5:86:97:2E:62:A6:BA:FD:31:16:F3:0C:B5:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5becfb-e1ce-3285-9ef6-a8f625ce0590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c21b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:d5:fd:e9:2d:d1:a6:4f:2f:83:ca:64:d0:41:fe:6b:d4:bf:
         59:c7:3c:46:51:c2:e1:9f:4d:4b:78:e5:fe:00:b4:98:ef:fc:
         72:41:f5:08:84:f6:a4:4c:82:be:cc:64:3f:7d:a6:e1:87:87:
         ae:58:ba:f1:35:ac:ee:27:73:1f:b0:4f:65:84:f5:23:c7:0c:
         5e:3b:0c:e6:34:37:77:cd:6d:1b:4b:ac:ed:49:fa:12:9b:a0:
         fd:63:b6:49:ae:2f:75:fe:0c:41:7b:c6:3d:8c:76:44:6b:42:
         e4:9a:f4:0a:4a:63:b5:80:74:a0:a8:b9:a6:a8:e9:99:7a:fe:
         0c:d1:6b:1e:06:7f:e2:79:06:e5:bc:84:c3:a7:c5:19:29:ea:
         f7:79:04:f8:c7:2d:8f:40:0d:f2:7a:15:01:84:91:e1:e1:19:
         f6:0a:25:23:1c:ac:65:bc:b7:66:f4:a5:ce:78:a2:6c:e8:ae:
         9f:7a:8d:8e:d3:c2:ec:b6:59:23:4e:63:56:61:40:d7:3d:8e:
         73:d3:37:5a:de:1c:3d:aa:82:81:75:67:43:51:c3:59:e0:7f:
         9e:f2:89:7b:ef:e3:3c:c5:3b:ee:91:7d:d1:30:88:ef:0c:d0:
         84:93:82:25:37:61:9a:e8:6f:73:a6:6d:ef:d7:e1:e6:82:5e:
         da:df:13:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:59:10 2024 by rpki-client on console-ams.rpki-client.org