Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/956db221-34d2-3b6f-8d0b-fc85b8ef7deb.roa
File:                     956db221-34d2-3b6f-8d0b-fc85b8ef7deb.roa (raw, json)
Hash identifier:          dsDSdGXQe7Rb4gNfAPFbn6uv2fj8DJ9UN2yRz1gkDD8=
Subject key identifier:   D7:8B:AA:91:D2:D4:0B:1A:A4:E5:4F:CC:C8:A2:E6:0E:A4:75:9D:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B5DBCA561B97AF4B89140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/956db221-34d2-3b6f-8d0b-fc85b8ef7deb.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     20214
IP address blocks:        2001:559:3ad::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:5d:bc:a5:61:b9:7a:f4:b8:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=bc39e48d-9864-455f-a60d-f2006a29ec79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4c:93:12:b4:09:ff:69:7a:ea:76:77:eb:b9:
                    53:71:f1:f1:bb:d7:6d:a2:d5:db:37:cf:fe:a4:39:
                    69:35:7a:2e:7d:93:85:7d:c2:f1:12:be:f4:e4:c3:
                    e3:35:94:03:7c:9a:d1:a2:97:7e:56:ed:fb:74:fe:
                    83:21:4f:79:71:4c:be:3c:0b:b1:ab:99:53:ef:86:
                    b3:13:fd:04:6d:c0:68:ef:44:b6:82:3b:69:36:76:
                    49:6a:c7:5a:3a:75:81:75:cd:3c:a8:0a:e3:b2:f3:
                    bf:68:c7:58:16:16:bf:74:62:87:b4:6d:6b:a5:a6:
                    74:99:a5:24:74:3c:ff:e3:e9:76:db:9c:30:a2:11:
                    f2:aa:ce:cc:6d:76:97:4b:99:35:15:2a:a5:31:4b:
                    52:e4:30:0f:e0:6f:66:b7:12:71:07:65:fa:76:56:
                    e2:ce:ff:91:d6:82:d9:de:4d:58:bd:92:87:73:01:
                    d2:1c:5b:5d:69:ca:39:a8:90:2e:45:8b:d6:cb:3e:
                    66:89:03:16:bd:48:b3:e9:4e:05:81:b5:72:b8:2b:
                    69:1a:09:ab:92:83:18:e1:2b:be:f2:53:04:8d:3d:
                    e5:af:a7:20:f2:26:f5:1a:1f:54:c6:bd:be:41:4d:
                    78:5f:55:41:46:81:73:c9:39:79:8c:c6:6b:8c:45:
                    95:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8B:AA:91:D2:D4:0B:1A:A4:E5:4F:CC:C8:A2:E6:0E:A4:75:9D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/956db221-34d2-3b6f-8d0b-fc85b8ef7deb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:3ad::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:8d:94:88:ed:25:28:db:5e:a3:41:1f:a3:61:23:8a:04:b0:
         a8:6c:05:0e:7a:1e:72:15:fc:1e:ef:5a:bf:74:68:78:d8:77:
         0b:17:ee:91:2d:e2:ca:c4:97:9a:4f:9f:53:dc:a3:69:67:84:
         41:18:01:9a:f8:6c:cf:f7:eb:95:41:6b:c4:31:de:96:2f:60:
         27:b9:29:c3:91:3b:a3:f4:10:3a:53:66:ac:bf:02:b6:1d:08:
         01:01:27:70:8c:5e:aa:ab:6a:4c:a9:7c:e6:45:4f:17:92:da:
         60:1b:af:23:02:e6:31:91:2f:5f:b3:98:0c:ce:71:3a:9b:64:
         44:ce:65:a8:bb:fb:80:cb:38:17:fa:cd:23:03:c1:94:32:2f:
         77:7e:da:b3:53:45:64:f8:da:e2:06:e5:c7:1f:b7:63:1e:e9:
         c9:16:70:42:ce:e4:b8:b8:43:39:59:00:0b:c4:63:35:1d:53:
         06:09:74:37:df:cc:c3:96:e2:0c:70:bd:d3:23:0e:f1:ab:58:
         36:fe:b1:96:ea:3d:7b:df:2d:d4:92:0d:d9:c7:b5:6b:45:7c:
         b5:21:a9:53:68:5b:8c:d2:28:2c:61:3e:84:a4:c7:25:72:bd:
         cf:24:65:b2:53:a9:f9:b0:e3:88:87:dc:8c:4b:3a:55:39:b4:
         92:b0:f2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:02:03 2024 by rpki-client on console-ams.rpki-client.org