Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/910327da-2b65-3db6-b709-e6c255a3063c.roa
File:                     910327da-2b65-3db6-b709-e6c255a3063c.roa (raw, json)
Hash identifier:          7LNXKFzd6CgSafLc57sm+UWZn6TNyVGYdR/ZG7PFTh0=
Subject key identifier:   F5:06:CF:87:97:0B:01:03:42:83:D2:41:D5:3E:ED:20:87:D2:CC:94
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004BAA4319FF6B20E4772DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/910327da-2b65-3db6-b709-e6c255a3063c.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33652
IP address blocks:        2001:559:83a2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:aa:43:19:ff:6b:20:e4:77:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=0561f122-30a8-4eaa-a29b-8719e5a68052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6b:0e:fe:92:1c:84:e6:42:d2:ff:64:6c:33:
                    a0:80:c6:05:5a:93:63:1b:f2:0a:45:a9:5f:14:56:
                    0d:06:db:01:74:29:0a:87:18:f1:5f:c0:b5:57:b9:
                    01:54:05:c0:9d:eb:c6:c7:0e:d9:54:0a:9c:ea:32:
                    26:c9:bb:33:d0:48:b1:42:90:97:f6:c5:a3:03:4b:
                    52:c5:20:c8:9f:bd:49:a7:8d:1b:0b:d0:bc:49:76:
                    f6:c2:6a:2e:ec:db:91:c9:ae:16:59:96:b3:26:61:
                    af:25:8e:68:99:24:c0:38:82:39:19:b5:a5:fa:0a:
                    2f:ac:cd:57:b2:01:30:f3:32:35:53:f4:63:33:a8:
                    e6:62:92:1e:a6:39:e1:b2:87:d6:44:a3:f9:2c:7f:
                    44:52:7f:c6:e9:f6:28:11:9f:f0:2f:8d:72:c6:ae:
                    b2:fe:84:d0:23:8f:6d:e6:52:7b:6a:84:d3:0d:f7:
                    ff:47:66:b2:73:ee:23:00:ef:f5:b2:27:a6:22:3f:
                    81:0f:18:f8:67:fe:4a:f5:19:c0:a1:69:13:d4:11:
                    e1:ba:2d:3e:f6:c1:e4:0c:5d:be:37:4d:72:9f:40:
                    ac:01:86:fe:6b:79:28:14:15:84:81:03:84:18:f1:
                    cc:e0:bb:20:11:f2:8c:6e:fb:a8:59:4e:2c:28:c1:
                    b0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:06:CF:87:97:0B:01:03:42:83:D2:41:D5:3E:ED:20:87:D2:CC:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/910327da-2b65-3db6-b709-e6c255a3063c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:83a2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:de:d3:ce:eb:0f:6c:44:25:80:f4:c0:fd:0d:4b:74:00:f7:
         00:a6:9b:7c:55:84:03:35:56:ab:72:72:fa:66:86:45:54:b1:
         c1:21:ee:9b:56:34:29:a0:78:d4:13:ac:bb:de:5a:ec:d6:ba:
         0b:11:11:cd:71:39:07:9a:a8:b8:8e:28:6d:40:fa:fc:6f:fe:
         91:b5:d9:91:15:1d:37:66:50:71:1e:0d:f0:ca:fa:94:2c:90:
         3f:5c:3c:2d:33:aa:14:c0:75:16:6d:d2:f7:06:cd:65:96:88:
         7d:f6:5a:61:c3:bd:9e:f2:f2:14:2f:81:be:4e:31:e0:f9:6a:
         50:21:0c:9d:79:f1:46:a0:49:0e:0e:68:dc:ef:33:2e:c7:c3:
         d3:ca:10:f2:f7:81:5e:24:31:3d:cd:04:5b:01:92:a0:c9:8b:
         35:b5:81:21:f0:e8:7e:b4:78:69:86:2d:2f:85:02:b7:59:4d:
         98:8c:46:85:0b:aa:67:f1:57:f3:8c:cc:43:d6:ff:07:48:43:
         03:e7:2e:81:46:c3:8d:60:50:8c:d5:7b:11:49:7e:78:81:82:
         24:26:97:69:da:7c:7a:8f:57:ed:c4:96:d5:fa:9e:9b:36:ab:
         86:fa:b5:15:d3:bc:36:d5:d9:55:93:ce:54:58:ca:fc:c9:5d:
         9f:88:8a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:43:06 2024 by rpki-client on console-fra.rpki-client.org