Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/732e64a6-cbe8-31a0-a51c-beebd40bf616.roa
File:                     732e64a6-cbe8-31a0-a51c-beebd40bf616.roa (raw, json)
Hash identifier:          1DWj2/WOWI7W/tScv4ZBF31qhc8Q+Xo12WJFof1oGW4=
Subject key identifier:   EF:D2:12:13:8E:77:1D:AC:CE:79:D0:3A:75:6F:5F:18:61:46:13:8C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049874A67F398F8E5105600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/732e64a6-cbe8-31a0-a51c-beebd40bf616.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        2601:484:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:87:4a:67:f3:98:f8:e5:10:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=1e9454b9-2147-4e17-94a7-ab51ce09dbb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:81:bf:a7:c4:04:d5:ca:b9:c1:29:07:06:
                    43:22:dc:ca:c9:c0:7b:41:5f:c8:ff:03:e5:de:43:
                    bc:5d:56:6f:c3:d2:53:12:e0:83:11:7f:2c:b0:ee:
                    03:d4:c2:b8:e7:ce:4c:ef:e1:a1:9b:d0:4a:f7:e3:
                    b7:ad:9d:bd:dc:7d:8f:2d:d8:fc:78:76:ab:89:a6:
                    38:c2:9e:b3:b4:3f:64:22:2b:1e:d1:a8:fa:30:90:
                    80:bb:b7:a6:1c:6e:2a:4f:16:83:31:6a:21:1b:5e:
                    2e:b9:56:cf:6b:d6:3c:ed:90:f2:8e:1c:f0:36:b0:
                    da:0d:08:31:58:26:b6:36:d2:bb:e4:ff:57:4d:63:
                    16:25:2f:1f:9a:d9:2e:51:b3:77:a7:27:c4:e0:ff:
                    5e:d1:09:eb:4a:ed:94:43:91:0a:3a:39:2c:a8:fc:
                    01:bc:96:d8:fc:75:d0:ab:6c:81:e5:55:78:1d:9b:
                    34:18:f8:0e:63:ba:17:ac:e1:ac:73:0e:95:b7:6f:
                    c4:29:04:3f:07:e2:1b:b2:2d:eb:da:a0:8d:ef:b0:
                    c8:31:58:ac:7f:d2:b4:94:fe:34:e2:90:9a:45:ae:
                    e6:79:3a:ae:7a:b4:ed:03:c0:96:69:90:ed:e8:49:
                    92:db:3a:38:31:d0:55:78:6b:a8:df:84:7d:17:0c:
                    6d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D2:12:13:8E:77:1D:AC:CE:79:D0:3A:75:6F:5F:18:61:46:13:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/732e64a6-cbe8-31a0-a51c-beebd40bf616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:484:4000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:26:c5:ab:15:8f:90:87:ce:b3:4f:b1:a0:bf:3d:34:53:bb:
         ff:ca:a8:f1:47:1a:ce:98:ff:43:cc:83:de:55:eb:82:18:29:
         77:f7:8c:52:00:7e:6a:07:f5:57:e6:ad:f2:0b:04:cc:88:5c:
         03:2a:4f:06:be:ca:5e:ce:e9:5f:5e:a5:17:48:c7:63:e9:f3:
         22:01:2e:2b:79:ea:a6:f5:be:1c:0a:0f:35:0a:58:e9:ac:f2:
         00:a8:7c:cf:db:41:66:d4:48:c4:48:f3:f6:4f:1c:22:c2:5c:
         eb:a6:90:b7:2a:93:08:07:be:5c:1d:c8:fb:da:b7:cc:4f:6d:
         3b:d0:ea:fc:06:7e:d8:cf:5b:91:8f:fe:0d:e7:f6:ba:9d:0f:
         54:40:5f:f0:21:21:6a:88:f0:cc:d6:98:2a:fa:0c:30:0c:da:
         a6:83:50:86:15:1a:d8:8f:03:c5:28:51:d6:df:37:57:14:82:
         24:d2:db:c4:c0:b5:49:d5:50:9d:9f:69:d7:b9:c5:b5:aa:75:
         aa:f7:4d:dc:93:d8:10:03:42:c0:b7:20:f5:51:37:69:6f:3e:
         71:37:cc:c7:ca:36:4e:cb:65:78:bb:d2:31:7d:17:8f:25:a6:
         8f:b0:fa:64:79:fc:90:75:5d:cc:cb:a7:ba:77:6c:80:44:c0:
         6b:7d:b6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:30:25 2024 by rpki-client on console-fra.rpki-client.org