Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98f59457-d70b-3028-a46e-103747d6283b.roa
File:                     98f59457-d70b-3028-a46e-103747d6283b.roa (raw, json)
Hash identifier:          BAez6Sdsl5HVbfnlrvCLkyG2bglJ+jMnH8Ywz3aEH2U=
Subject key identifier:   9C:F3:C3:B8:8F:5F:16:43:ED:D9:7A:12:91:0E:A0:A0:67:BB:6D:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C4D01C0EDA0050E3BF500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98f59457-d70b-3028-a46e-103747d6283b.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33491
IP address blocks:        2001:559:8793::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:4d:01:c0:ed:a0:05:0e:3b:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=8750c2fa-4181-4f36-b49f-23449984d05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:e8:b6:7c:20:92:61:37:73:6e:15:fb:50:
                    1f:fb:02:f8:9b:de:15:64:53:81:16:6e:f6:55:fd:
                    2b:36:cb:e4:f2:7f:89:ab:1f:45:47:d5:c4:f8:7b:
                    62:44:8d:49:2c:ed:b7:7a:86:fe:4c:08:00:f0:be:
                    96:27:6f:3e:f5:43:b7:18:48:74:ea:87:aa:64:6c:
                    e5:3e:b7:19:b1:9a:18:d7:06:a9:25:4f:ca:8c:6a:
                    10:8c:79:56:16:8e:19:3a:a0:cd:9b:31:88:21:3f:
                    bb:45:b1:bc:65:ae:68:08:67:16:5c:d3:0f:26:7e:
                    25:98:b7:79:ad:6d:f9:bd:d3:e9:57:ec:e2:2c:af:
                    b6:23:28:60:b6:7c:96:f6:53:40:76:7e:b9:06:66:
                    ea:6a:52:53:91:1c:13:a2:13:a0:50:5b:6d:4b:c7:
                    47:70:93:c6:7d:52:e9:37:3c:3b:d2:ae:38:be:8e:
                    70:8f:11:b7:5e:0f:f6:d3:70:b4:46:97:2a:16:a9:
                    f7:94:4f:26:9e:3a:0c:45:f2:1a:6c:25:e6:c2:20:
                    3b:4a:42:c7:36:4c:8d:85:3d:0d:f4:7d:4e:9a:5f:
                    15:32:40:97:c7:90:65:6d:60:31:4b:34:08:47:bd:
                    6f:4e:51:d6:47:90:99:b4:c5:f0:03:b2:1a:7f:1e:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F3:C3:B8:8F:5F:16:43:ED:D9:7A:12:91:0E:A0:A0:67:BB:6D:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98f59457-d70b-3028-a46e-103747d6283b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8793::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:56:6f:34:75:1c:d0:56:17:28:fb:df:58:1c:e6:8a:cf:9b:
         df:e2:7c:7f:01:f8:c7:d1:e6:75:73:18:8b:cf:c4:41:5c:32:
         b8:2e:24:c2:46:e4:61:c5:e1:3d:d8:d6:fc:b9:69:64:8a:5c:
         9c:8d:50:8f:12:05:ea:ad:4d:2e:8f:c7:6c:a9:8b:e0:c0:d9:
         d6:0a:a4:c9:f0:77:0a:e7:af:72:49:7f:1b:fe:1d:b5:a7:5e:
         3d:87:90:97:8c:86:fa:97:c6:60:e1:f2:14:b0:8b:45:10:f3:
         bf:10:a1:2d:14:b2:56:0e:95:e8:ab:e5:2a:7e:97:b8:ab:87:
         05:7c:ee:f9:5c:e5:a3:d8:c4:a5:98:68:9f:bd:10:88:39:c1:
         dd:a2:a1:72:44:21:19:6e:6f:1d:28:b1:64:06:0f:ae:fb:50:
         69:70:e9:d9:ae:5e:1d:f6:72:f4:3c:c6:dd:78:62:67:5a:82:
         09:5e:69:bf:f2:d8:5e:d1:26:dd:d6:1c:e1:b8:c7:9d:8b:90:
         e9:ff:dc:4c:8b:7e:3d:9f:a9:7f:a1:ee:64:53:75:23:f5:75:
         23:a1:36:22:71:47:84:ce:99:ef:40:97:0a:29:68:36:1c:26:
         d5:8e:79:d1:1f:74:fc:47:2b:6f:ed:15:41:c7:ed:22:ea:dd:
         72:72:c5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:25:24 2024 by rpki-client on console-fra.rpki-client.org