Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bd03a0e-4f61-3d00-901f-8e000b073a06.roa
File:                     9bd03a0e-4f61-3d00-901f-8e000b073a06.roa (raw, json)
Hash identifier:          Wl+pQkSYQ+ZP/W12aFiAWeWyP7jCKNsN3CRp2CLSjWc=
Subject key identifier:   CF:E1:CD:8C:94:F7:B0:27:03:11:76:97:2A:14:76:B3:88:5E:90:3D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C4A83B34CA6FD47FC4100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bd03a0e-4f61-3d00-901f-8e000b073a06.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33491
IP address blocks:        2001:559:836c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:4a:83:b3:4c:a6:fd:47:fc:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=2d178b69-721a-452a-8c18-f94a2053c91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2b:64:d5:a9:92:ef:47:a9:0b:ae:b8:b0:0d:
                    41:6b:f3:99:dc:f3:26:5a:98:0d:8f:83:ee:fa:c3:
                    d8:80:09:0e:50:4a:ae:8a:8e:51:b6:c3:8f:c7:a5:
                    2f:35:c4:ae:96:38:d9:e4:8b:5b:ff:0e:95:ca:65:
                    0d:9f:5f:70:75:eb:17:77:de:08:09:cb:9e:3f:ff:
                    18:56:31:2b:5f:61:6e:6b:1d:9a:6e:fe:6a:b7:30:
                    15:95:cb:25:f3:b5:5d:62:31:b0:80:2e:df:2d:56:
                    83:3d:cc:d2:cd:fc:88:d8:28:e0:72:92:d2:23:cc:
                    6b:58:fd:db:d7:64:3c:80:df:4e:db:19:aa:b8:c5:
                    f0:7b:61:2f:97:dd:02:8b:62:7e:e9:8a:e5:63:6c:
                    c4:15:bd:9f:91:e2:96:b4:39:43:5f:77:9d:44:7c:
                    af:50:36:a2:d6:4a:49:62:ec:9f:8a:56:4a:64:0b:
                    44:d8:c1:ef:bc:8f:dd:70:ae:09:bf:ad:04:81:c8:
                    89:b3:8e:bc:9c:87:56:22:b3:e8:c0:28:ca:29:fb:
                    43:04:0f:61:96:3a:1b:cc:53:ab:1a:e7:65:17:4d:
                    29:b2:3a:76:fa:df:6c:d3:5a:a6:2c:a1:3a:54:91:
                    50:1e:74:53:47:11:5e:6d:bc:67:a8:b8:a7:54:62:
                    10:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E1:CD:8C:94:F7:B0:27:03:11:76:97:2A:14:76:B3:88:5E:90:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bd03a0e-4f61-3d00-901f-8e000b073a06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:836c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:9d:35:69:99:97:61:09:1a:96:88:e2:10:2e:2a:f5:b9:49:
         54:9c:58:cb:67:b6:6f:d8:fa:eb:9d:68:46:1c:02:83:34:88:
         6f:f5:1f:55:39:26:50:5e:3e:35:bb:cf:bc:46:60:24:2d:19:
         19:c5:b5:13:19:d5:2b:c0:a1:da:6e:a0:ba:fe:3f:06:a4:03:
         7a:90:d9:0a:e7:99:ba:c6:77:13:f5:7c:0f:36:0c:c3:ed:a3:
         03:75:48:4c:32:68:d7:cc:4f:21:bc:9d:36:a8:b3:1d:6b:25:
         ac:44:d8:a0:5b:7d:e6:1d:81:d8:0f:3e:38:f0:92:a1:66:a2:
         53:94:eb:8f:99:58:bc:a3:6e:68:d7:2e:a4:c5:c4:b6:ab:f1:
         1c:ef:c1:0c:e8:51:03:5a:3e:0d:e3:7b:91:64:62:6c:74:78:
         9d:7a:e6:b0:da:e1:44:08:56:8f:f3:cd:04:7f:fc:3c:6c:c0:
         40:30:2d:01:2c:57:a4:21:05:92:84:23:4e:d8:56:bf:d9:7a:
         78:28:39:4b:d4:e6:a1:0a:50:b8:a0:9e:91:13:e0:92:82:cc:
         28:9d:e0:a1:8c:16:e0:47:b1:99:82:f7:f1:24:bf:84:27:44:
         cd:14:37:8f:d2:72:5d:41:09:55:a5:a7:9e:dc:e2:8c:3a:41:
         40:38:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:43:23 2024 by rpki-client on console-fra.rpki-client.org