Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5893876f-a5c4-3729-b2e7-23f3f977d2f9.roa
File:                     5893876f-a5c4-3729-b2e7-23f3f977d2f9.roa (raw, json)
Hash identifier:          tjHdLhcPJjA5gupOW8USIOyKaMqKCUVw9S3Cj7dwopA=
Subject key identifier:   4C:D8:8A:59:00:8A:F7:5A:3D:DB:CA:8E:1D:A2:A3:43:E7:63:62:46
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B54B6C12F86123F268EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5893876f-a5c4-3729-b2e7-23f3f977d2f9.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7725
IP address blocks:        2001:559:c355::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:54:b6:c1:2f:86:12:3f:26:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=ac9e47a9-0ab9-4350-a3fd-6de6340d3e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:95:52:12:be:f8:5a:b4:48:af:76:08:50:07:
                    76:10:6d:0e:3b:ca:c7:07:37:5d:68:20:65:bf:02:
                    ee:93:4b:05:f3:0c:7a:60:a2:f8:bf:c5:d5:df:af:
                    93:34:55:57:31:46:07:91:28:41:62:ba:d5:f5:9e:
                    c4:7f:c3:57:8f:58:24:63:fe:b8:af:0d:09:1b:31:
                    1b:92:52:d7:2e:ff:26:e6:80:d0:35:96:27:01:c5:
                    26:81:73:9d:fe:2a:e5:3d:7c:01:f5:5f:57:8c:a5:
                    e2:b2:68:3e:8f:d5:7f:6f:5d:4e:35:34:43:2b:eb:
                    38:5c:94:d8:cf:8e:3f:cb:a6:dc:8a:99:ee:94:27:
                    39:c3:72:eb:23:91:07:65:24:06:e4:9f:c0:c4:0c:
                    f2:8c:44:21:7b:25:88:41:58:a3:c3:38:95:4d:a0:
                    a8:1b:b5:8b:6d:86:a3:73:cc:71:e6:7d:4d:cd:17:
                    46:da:9a:f7:b3:dc:47:db:4e:6b:1e:27:48:0a:aa:
                    9e:06:28:e5:5a:c6:aa:05:7b:9f:9a:7d:da:24:32:
                    63:02:2b:6f:72:04:00:37:86:69:1a:d6:90:cb:87:
                    57:dd:77:cd:33:71:5a:c1:90:07:7c:47:b6:35:9f:
                    08:e9:c0:4c:79:1e:f1:40:a2:f3:e0:ea:5f:61:44:
                    08:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D8:8A:59:00:8A:F7:5A:3D:DB:CA:8E:1D:A2:A3:43:E7:63:62:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5893876f-a5c4-3729-b2e7-23f3f977d2f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c355::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ae:6b:b8:80:59:68:63:2b:7c:da:90:75:cd:83:64:d6:86:
         76:aa:11:dd:55:be:96:24:e4:fe:4b:6d:47:00:c4:92:f5:21:
         d8:60:d2:8f:88:4b:fe:5b:3e:78:b0:fa:28:e8:6a:e7:63:9d:
         63:1e:b6:70:b1:06:72:1e:46:90:56:75:0e:74:75:a2:6c:55:
         9c:7e:b1:75:a7:f9:16:a0:c1:0f:fd:16:44:90:00:00:01:88:
         1a:7c:53:1c:99:9f:0b:30:88:4f:25:c0:7b:cc:24:42:f3:02:
         85:48:97:3b:55:5d:de:87:2f:c0:ec:1d:82:dd:e5:91:18:66:
         01:61:ae:57:9f:cc:c6:fa:4c:30:38:6e:a5:f9:66:22:d4:f2:
         5f:b8:db:ae:a0:d8:bd:77:38:f7:39:7a:5c:f7:02:d5:7b:c4:
         4f:3d:8f:5f:f9:c3:92:78:f2:5a:79:2f:e0:55:ac:19:dd:e7:
         24:cf:14:c4:05:b7:a3:46:04:dc:d5:44:5e:13:9a:08:c7:e5:
         cf:35:b6:ad:fc:a9:d9:d3:81:af:b7:c6:34:7a:6e:73:55:5f:
         97:05:18:d2:e5:dc:9c:2e:bd:19:37:56:a1:ed:f7:e7:eb:3d:
         15:37:73:34:36:f4:1f:7b:80:af:aa:e6:ea:2e:bf:63:93:97:
         ac:47:6e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:43:52 2024 by rpki-client on console-fra.rpki-client.org