Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86aacfe5-c384-3f65-8c1d-16203bf6d4e2.roa
File:                     86aacfe5-c384-3f65-8c1d-16203bf6d4e2.roa (raw, json)
Hash identifier:          6za569itTqgaEvpK4ShAyb7zSUl2kqcMLKCIVprIao0=
Subject key identifier:   61:91:69:39:BD:1B:24:1D:2E:C4:07:1D:22:41:E9:48:A3:B3:13:9A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004AC7B4C4D1606E2674D390
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86aacfe5-c384-3f65-8c1d-16203bf6d4e2.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33659
IP address blocks:        2001:559:80a4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:c7:b4:c4:d1:60:6e:26:74:d3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=d48b2cf0-9921-4ecc-8424-ed5579435e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:ba:fd:e4:f7:bb:b2:d9:6d:0d:37:34:0e:
                    62:eb:1e:79:03:62:a7:2c:07:29:c2:d1:4d:bc:fc:
                    21:92:a0:71:76:c5:ba:7c:2f:f0:4d:f0:61:6c:05:
                    63:c0:44:53:25:09:92:e7:82:ed:e8:10:95:68:09:
                    79:98:cf:c4:14:35:6f:8c:fb:55:19:86:02:24:40:
                    21:1d:a7:42:03:9c:d3:14:ea:da:b1:b5:4c:f6:32:
                    14:b1:95:81:aa:97:ee:7a:ce:a0:5c:0f:75:e6:ca:
                    59:8d:56:07:5c:ec:f8:62:08:fc:07:32:fe:4f:f3:
                    40:80:00:4a:1d:68:dd:6f:6a:7d:a0:f9:c1:56:dd:
                    ae:6f:f6:61:1f:69:cd:44:e4:65:96:e6:94:6a:d6:
                    d7:f7:a6:9e:2e:f7:14:9a:48:22:36:90:5c:13:fa:
                    44:94:64:ee:25:68:bd:f1:cd:6e:40:6f:ac:fc:bf:
                    e7:da:81:20:9b:01:bc:af:d2:5a:f3:fb:cb:8a:6a:
                    b7:5a:17:d6:b3:20:cc:18:af:73:8e:11:8b:c5:2b:
                    b1:72:d8:88:56:fd:3b:95:d4:35:30:97:ed:6d:05:
                    1d:34:76:4f:80:06:b0:dc:47:db:9d:d7:d4:19:55:
                    fe:53:fb:e9:2b:f0:01:69:67:e9:e4:cf:2d:15:40:
                    0a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:91:69:39:BD:1B:24:1D:2E:C4:07:1D:22:41:E9:48:A3:B3:13:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86aacfe5-c384-3f65-8c1d-16203bf6d4e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:80a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:a4:e6:8f:85:35:5f:ba:01:62:9f:6e:73:2c:77:f0:30:a8:
         32:42:f1:cf:12:b0:53:a1:f3:5c:ae:be:74:3a:d2:80:1f:f5:
         ff:41:35:10:22:b5:16:b1:e8:78:8a:93:a6:34:cf:d6:06:54:
         b2:02:ea:e2:17:65:db:50:1a:09:64:46:c5:b5:41:2d:ff:b8:
         ee:85:2f:4f:c4:73:e9:f7:2e:39:1b:b3:23:82:62:e8:d5:e4:
         9e:08:84:f1:ce:bd:62:9b:7d:42:1f:f6:cc:ff:49:44:80:b3:
         86:0b:4b:fc:b2:df:e1:bc:64:46:db:1a:06:f3:02:2b:de:95:
         fd:af:c0:33:e6:c2:fa:06:38:fa:c4:82:e4:cf:22:dd:f0:25:
         16:3d:1b:da:dd:a9:d5:8d:c7:9a:a9:5c:e7:b9:76:55:6d:aa:
         91:c6:60:9f:19:62:f1:ca:7a:0c:7b:13:68:33:b7:df:33:fb:
         06:0a:37:bb:47:8b:ea:31:7e:c5:99:35:c0:80:e5:1d:78:87:
         52:db:7a:46:6f:2f:ac:75:97:32:19:f2:dc:f8:f3:50:7a:7b:
         03:d9:3f:4e:a2:c4:22:9d:27:23:9d:93:6d:a0:49:06:4c:94:
         87:f5:ea:ad:20:eb:a1:16:8e:03:1a:88:72:ad:a2:11:90:13:
         a1:21:66:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:42:50 2024 by rpki-client on console-fra.rpki-client.org