Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c98b796-c51f-3b04-b369-031461a70efd.roa
File:                     5c98b796-c51f-3b04-b369-031461a70efd.roa (raw, json)
Hash identifier:          nVdmGZDMJMkZ+NS4Z71qnKaFicvCQLDbtYypjb5GPbQ=
Subject key identifier:   4C:FD:95:96:B7:92:AA:4A:8F:EB:93:2E:41:E7:32:D5:07:1D:28:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A8534AAAC10C1F7EE6900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c98b796-c51f-3b04-b369-031461a70efd.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33287
IP address blocks:        2001:559:460::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:85:34:aa:ac:10:c1:f7:ee:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=6cee9099-e3ab-4625-8398-0def5f0f18ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:34:48:b4:15:ab:bc:45:3a:ba:7c:bb:2d:
                    89:e6:0b:22:30:9d:ff:f0:5b:a5:66:de:c7:00:d7:
                    b0:a4:ae:3d:cb:4f:69:04:04:96:d5:42:c6:30:76:
                    9d:ae:12:56:bc:85:9a:a5:fc:a0:9f:fe:62:9f:62:
                    b0:f8:0a:73:c2:10:64:ce:fc:6a:43:f4:ac:88:15:
                    07:c1:f6:08:88:34:4f:56:47:7f:9e:e1:d0:43:a3:
                    74:8f:5d:27:a4:60:d4:a2:0d:e6:7d:af:67:bf:2d:
                    34:30:49:d2:44:85:b5:30:82:fa:ea:b5:ba:e2:38:
                    39:6c:16:3a:06:af:7f:09:a5:aa:b5:0c:f2:57:56:
                    1a:ab:4b:71:d3:ac:8c:07:82:70:72:64:45:31:3d:
                    43:de:f0:17:51:cd:ec:f2:70:a4:5b:ad:95:a9:c0:
                    08:80:59:91:ca:01:dd:91:b2:c5:18:7d:e7:d1:25:
                    f8:72:86:af:4a:82:f7:a6:ad:88:05:10:4d:48:6d:
                    c0:d5:e8:df:9d:89:3a:b5:44:5d:c6:f7:ab:81:e2:
                    14:b4:46:55:57:79:03:50:f2:36:d9:fd:de:9a:6b:
                    36:9e:50:f4:c2:5f:43:3d:39:a1:3f:6c:c4:82:16:
                    c3:9b:8c:8b:42:13:c1:93:2a:f7:47:5c:d5:1b:3a:
                    64:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FD:95:96:B7:92:AA:4A:8F:EB:93:2E:41:E7:32:D5:07:1D:28:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c98b796-c51f-3b04-b369-031461a70efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:460::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:46:d7:7d:a4:cd:24:51:8f:a6:49:e9:bf:6c:33:29:87:48:
         35:0f:06:9e:a4:3e:47:82:0b:d4:22:7f:53:41:6b:5a:90:1b:
         cb:02:a5:d0:d6:b9:c3:cd:39:66:23:ac:f5:9a:48:fc:c6:44:
         ab:23:c7:d0:21:d1:4b:55:b0:24:01:6c:2a:8d:54:9a:ff:1e:
         a6:31:6a:02:98:06:8a:ba:f0:fd:91:9e:03:64:21:c7:ea:44:
         fb:67:6f:21:b5:8a:bb:a5:50:92:98:2b:ee:24:c9:eb:e9:29:
         04:dc:be:77:2f:b1:16:7b:33:bc:65:d8:34:7b:b6:12:4c:1a:
         b6:d3:1e:8e:ee:c9:04:52:4f:2b:43:18:bc:b7:2b:15:65:74:
         4f:9e:4d:3f:df:9e:a9:2c:78:ba:d6:e7:b7:cb:b7:65:ee:24:
         09:f0:a9:3e:b5:f9:74:6d:49:a1:1e:1d:95:ec:73:2a:92:12:
         b7:70:2f:ef:ba:3e:f2:5c:bf:9d:2f:41:72:5c:1f:e0:68:14:
         d2:72:17:b5:f5:00:a9:dc:b2:4b:a6:cd:83:b5:a7:16:44:db:
         3e:42:17:1c:77:d0:08:88:dc:e7:1b:87:dd:b2:1d:83:3b:75:
         80:c3:8e:73:11:ed:75:c3:e4:60:28:be:1a:01:71:7b:42:bd:
         3f:07:fb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:00:00 2024 by rpki-client on console-ams.rpki-client.org