Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ea1d78e-d2e9-30dc-a2c5-50174330c370.roa
File:                     8ea1d78e-d2e9-30dc-a2c5-50174330c370.roa (raw, json)
Hash identifier:          ljiUlJ2STuCR0IoaNqGQ0QzxL9y4t7v0rSBrN4z5J/M=
Subject key identifier:   BC:BC:DB:F6:8D:07:1B:CF:47:AC:8C:02:46:A3:AD:19:B3:4A:D1:B6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A1816B2B997F1C1A93B90
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ea1d78e-d2e9-30dc-a2c5-50174330c370.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33667
IP address blocks:        2001:559:d0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:18:16:b2:b9:97:f1:c1:a9:3b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=10b682ef-4e42-4660-bcb1-aabec90632d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:56:25:a4:fa:30:46:c9:d0:91:4b:85:31:27:
                    47:de:79:2f:b1:5f:8b:0d:a2:93:98:19:77:6d:63:
                    e0:88:66:e5:a3:77:bd:5d:10:fd:f6:50:f5:16:c7:
                    8d:5a:d0:e3:a8:da:7b:1c:07:7b:5a:ab:96:5f:66:
                    d0:9d:7b:cf:b5:9f:85:07:fc:1a:bd:37:c3:b7:2d:
                    ec:0a:51:0b:36:71:80:0e:76:f6:a8:3e:49:92:f7:
                    ca:26:b7:15:c0:ee:4c:e6:e0:36:65:23:c2:3e:2d:
                    3b:7f:3f:d2:a1:2b:53:f9:f2:63:19:aa:62:10:74:
                    88:3b:ca:2a:83:73:81:4e:c9:67:a3:ec:a3:01:18:
                    6b:b3:bd:c2:75:6e:eb:ac:fe:56:b7:48:38:40:fe:
                    57:e6:8d:32:4d:7e:ad:d8:f7:a5:3b:cd:96:2b:e2:
                    4f:fd:d2:28:a8:5e:3d:c4:e1:ef:48:87:03:2a:be:
                    ae:7e:2a:26:76:0f:f2:32:41:84:e9:fc:52:93:36:
                    da:d2:46:e1:4b:cc:a3:f5:ec:80:1e:28:bf:c0:5f:
                    bb:e1:06:b8:77:7c:ab:7b:fa:e1:3d:f4:ab:5d:28:
                    56:57:aa:23:71:d5:8e:1c:23:b3:61:26:1f:b7:cf:
                    3e:6f:89:15:1e:df:21:11:db:9c:80:ec:22:aa:a2:
                    cc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BC:DB:F6:8D:07:1B:CF:47:AC:8C:02:46:A3:AD:19:B3:4A:D1:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ea1d78e-d2e9-30dc-a2c5-50174330c370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:d0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:f0:a7:67:d2:34:81:14:4b:8d:cf:09:8e:ee:6d:c7:86:75:
         19:5b:e5:f0:11:09:4c:50:ce:56:7a:f7:e4:2b:ba:f5:69:bf:
         c6:92:c7:a3:96:e1:8d:05:a9:99:3d:f3:63:e3:14:22:da:8c:
         c5:bf:9d:d1:e8:3d:ea:b1:7d:b9:b0:ba:1e:23:93:b6:5b:72:
         bb:61:6a:d7:55:9c:4c:57:a7:f4:db:d3:0a:e1:27:20:ce:02:
         53:55:96:e1:43:89:50:a9:46:1c:27:bd:a0:fa:25:47:d3:86:
         7d:80:db:b7:76:b3:40:33:79:09:21:52:76:07:f8:90:1d:0e:
         35:a7:e5:16:24:4d:98:25:8c:6b:d3:83:ff:d8:76:f3:c2:b9:
         72:66:d0:2d:49:3e:d3:b7:94:75:5f:09:61:c7:97:b9:bc:cf:
         47:e5:cc:3a:f5:fd:a0:5d:5f:2b:43:b5:53:b2:6a:54:db:66:
         ca:c9:dc:d5:2d:13:9f:fb:77:d9:3f:1c:c8:e0:76:ea:77:75:
         a8:2c:6f:93:65:0f:fe:e0:25:c6:6d:96:66:7e:00:b7:c0:d5:
         d1:fb:73:72:4a:d1:54:6e:60:95:22:28:de:30:32:60:62:1c:
         10:e6:c2:6c:9f:f7:c8:6b:27:2a:ce:d2:52:14:e2:e5:53:31:
         c8:99:d1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:07:17 2024 by rpki-client on console-ams.rpki-client.org