Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2d97500-0bc7-39a5-bd73-41375e0389a2.roa
File:                     a2d97500-0bc7-39a5-bd73-41375e0389a2.roa (raw, json)
Hash identifier:          G7sMClFjMYYAlIewEa8Weg71MmNFxb8g0ZQXIQXK2KQ=
Subject key identifier:   52:10:56:0C:1A:A1:90:A0:6D:44:B5:C5:D3:CC:A7:F9:89:4B:B9:33
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049B36B3A59419602D9E200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2d97500-0bc7-39a5-bd73-41375e0389a2.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7725
IP address blocks:        2001:558:170::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:b3:6b:3a:59:41:96:02:d9:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=bcd244c3-d0c3-4077-b1b3-7d41487a8d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:e5:67:6a:e2:45:7d:52:77:4c:e5:4d:ea:
                    98:8d:bb:2f:35:b1:06:e7:14:ee:6d:08:83:6b:72:
                    f6:aa:e9:6b:d4:45:37:69:ff:cb:a6:ed:c5:f3:93:
                    51:da:00:8b:5b:d4:40:6e:2a:96:4c:9a:4c:9e:bc:
                    2e:61:f1:10:aa:d3:e1:43:8e:9c:d9:53:54:22:ee:
                    6b:be:87:fa:a2:e5:39:10:f8:db:26:8f:3c:9f:70:
                    9f:4d:5d:88:34:84:50:98:66:ef:b1:28:29:08:5e:
                    2e:f1:d4:c3:27:47:9d:ba:f9:cf:98:49:46:0c:f4:
                    6d:10:18:46:93:4a:c0:50:59:10:d1:b8:5e:03:ff:
                    85:e1:a0:48:ac:7b:9e:4d:d3:86:04:fe:05:db:0f:
                    02:11:e0:a3:e1:a1:1f:cb:30:d6:40:b1:23:45:02:
                    d1:c2:71:59:ee:1e:bc:c4:d5:3e:d6:47:fe:90:4b:
                    bf:0d:01:e2:9c:d1:a6:b7:4c:9d:30:e1:57:3a:52:
                    2e:c8:79:4f:d3:b6:d2:c1:32:3b:bd:9b:c6:3f:3d:
                    88:c0:66:b7:86:bb:e5:b2:d3:12:33:67:12:a0:c8:
                    96:03:ed:59:70:c0:7e:28:0f:08:d1:ab:2a:11:46:
                    f9:5d:50:45:f4:80:ee:9b:0b:a3:9a:e3:26:ea:20:
                    65:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:10:56:0C:1A:A1:90:A0:6D:44:B5:C5:D3:CC:A7:F9:89:4B:B9:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2d97500-0bc7-39a5-bd73-41375e0389a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:558:170::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e4:27:57:50:df:e5:08:39:21:06:80:c2:ac:05:ca:b7:7f:
         96:25:f3:7a:f8:c6:76:06:95:d3:63:4a:96:01:3d:1c:5e:6b:
         50:f7:c0:84:28:a6:c5:7d:70:10:12:0f:7f:83:08:56:33:cb:
         54:89:b2:99:59:4a:a3:1f:49:c1:e4:09:cc:72:60:d0:81:ba:
         3f:62:d1:59:22:aa:12:ac:12:c6:39:53:2d:00:af:58:e5:64:
         0e:d9:32:81:1d:9c:e8:2d:8b:9b:ab:36:04:35:c5:a1:b2:f0:
         fc:20:de:c8:db:68:3f:2f:6b:ef:04:ae:b3:52:1e:6c:c2:93:
         3c:bd:b3:cf:c3:3f:f1:9a:45:f2:0f:2c:83:3c:5d:e6:6b:64:
         58:c8:75:d7:f2:1e:4f:e9:a7:dc:96:4b:8d:d8:53:33:b6:94:
         fe:17:4d:c8:62:4c:09:47:a0:07:aa:5d:25:d9:ea:11:67:0d:
         40:a0:95:87:aa:59:4c:53:e6:54:bc:b1:dd:50:9b:51:4d:da:
         da:d4:e4:19:b9:aa:a7:fc:86:22:6b:97:6d:a0:2f:c7:86:e0:
         29:b2:9a:84:c0:32:64:80:ad:a4:d4:ab:32:79:18:7b:40:f0:
         6a:05:71:5b:14:47:49:3c:96:b2:07:f8:ff:e6:99:2a:e1:f1:
         9e:cb:b0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:25:34 2024 by rpki-client on console-fra.rpki-client.org