Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a931ed41-d233-37ba-9e82-a633a6ec1a92.roa
File:                     a931ed41-d233-37ba-9e82-a633a6ec1a92.roa (raw, json)
Hash identifier:          cVn3aQDtJ92rCk7JmZAjs+UDHJsazIdpKtTn/ifUyB4=
Subject key identifier:   F5:44:3B:8B:A1:AE:F8:E3:8B:33:B0:72:85:EB:6C:79:4F:E5:EA:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A8BF9C23E837AECC95200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a931ed41-d233-37ba-9e82-a633a6ec1a92.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33287
IP address blocks:        2001:559:820f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:8b:f9:c2:3e:83:7a:ec:c9:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=124b8495-5967-4a7d-b4a8-b366317834cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:93:47:56:d7:8c:73:82:59:c5:bf:ee:6f:e7:
                    a7:78:3e:a4:79:ac:df:d7:bd:04:52:60:64:a0:9d:
                    4a:3a:52:dd:4e:c2:c4:d6:19:20:05:76:91:76:bf:
                    57:16:eb:06:cb:b2:75:0f:e7:66:a2:19:f7:ac:49:
                    4f:9b:7a:93:03:f5:93:0f:15:ce:a1:18:9d:81:a6:
                    fd:9d:84:f2:32:8f:38:84:c1:f4:04:a5:67:eb:26:
                    f4:b8:a2:c9:9d:e0:fb:f4:8d:50:15:6c:05:25:82:
                    45:5e:26:10:18:8e:9f:dd:02:13:7c:2a:60:b2:1a:
                    ad:e2:ab:e1:38:e1:d8:03:e8:d0:5c:44:a6:7f:06:
                    60:b1:64:64:63:38:43:22:a6:59:2d:f8:3e:f9:0d:
                    fa:db:a3:31:cc:a6:82:b2:4a:39:f0:91:06:f5:75:
                    65:99:f0:77:63:17:ad:c6:75:ec:03:24:3d:65:61:
                    b5:01:ac:9a:b8:ba:de:f2:57:5e:dc:92:a8:00:6d:
                    1c:d9:6f:4d:18:cf:3e:1a:8a:a7:52:ad:84:e3:6b:
                    e1:e1:72:43:eb:4e:91:74:a3:54:b1:8f:e9:64:12:
                    9b:51:74:55:33:b8:a1:73:2a:02:af:0f:81:d9:f6:
                    ce:86:bf:c7:2e:e0:2d:56:2f:86:e1:f8:d9:5e:ae:
                    c4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:44:3B:8B:A1:AE:F8:E3:8B:33:B0:72:85:EB:6C:79:4F:E5:EA:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a931ed41-d233-37ba-9e82-a633a6ec1a92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:820f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:38:3a:7d:00:3b:25:0a:c0:5c:e1:90:0f:70:b9:19:be:e1:
         62:68:8b:f4:28:51:ab:1f:97:27:77:af:03:4d:8d:b6:b9:7d:
         41:98:6a:95:40:ab:d7:cf:a0:c1:3e:e6:3e:50:b0:15:6d:01:
         c5:a7:c9:8b:8b:06:2f:32:c6:23:b6:7b:7b:6b:f6:f1:c1:48:
         07:35:ec:c1:3c:55:6f:55:93:dc:3b:03:e7:43:86:ef:7e:1c:
         18:6a:89:4d:d9:33:29:4e:ec:b0:51:e9:fa:f8:31:33:f4:a8:
         7c:7d:fc:a7:62:23:c2:35:99:0d:9e:d4:11:18:07:43:18:28:
         db:b2:e1:e0:39:60:1f:ac:82:41:53:f4:ba:c2:b4:7b:17:3f:
         0b:55:37:7c:5b:57:f2:9a:8b:cc:c8:1a:59:27:66:e1:7e:73:
         e0:35:01:4a:b5:34:a7:d4:fb:cc:58:dc:a5:81:c1:30:1f:a3:
         9e:d9:9c:f5:87:73:ea:67:d7:80:60:0f:ac:a6:b4:09:20:59:
         ab:74:d1:60:4e:a8:5e:10:84:3c:02:4b:11:e2:69:9d:a4:72:
         af:07:82:6d:92:1b:52:9f:b2:d3:26:82:4a:90:4e:1e:42:76:
         ec:3a:2f:7d:4c:af:10:38:fc:31:ea:93:ba:7d:cc:15:75:87:
         c4:ae:47:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:10:35 2024 by rpki-client on console-ams.rpki-client.org