Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac3e3e58-0d0c-3b65-8f60-e9b1cc66dadf.roa
File:                     ac3e3e58-0d0c-3b65-8f60-e9b1cc66dadf.roa (raw, json)
Hash identifier:          PI1LC5TqISQwund7lyGFGFyrr+1suN+E9+9/qtAb/MY=
Subject key identifier:   36:7A:F4:CD:10:62:21:C1:CA:8C:03:42:3E:14:81:4F:2D:7A:52:3B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846232EC822C6A8FE3A47360140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac3e3e58-0d0c-3b65-8f60-e9b1cc66dadf.roa
Signing time:             Sat 08 Jun 2024 01:00:25 +0000
ROA not before:           Sat 08 Jun 2024 01:00:25 +0000
ROA not after:            Fri 06 Sep 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        2001:559:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:23:2e:c8:22:c6:a8:fe:3a:47:36:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  8 01:00:25 2024 GMT
            Not After : Sep  6 01:00:25 2024 GMT
        Subject: CN=049fe589-28b3-4270-8e95-83985d3be980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:9c:41:b9:72:05:fc:26:ff:4a:f0:de:fa:
                    84:7f:87:99:38:6c:70:df:93:b9:2a:b2:6f:01:98:
                    93:8f:52:70:d0:0d:69:ab:38:b6:f9:17:c7:ed:30:
                    6d:e5:65:01:ea:ee:a2:8e:41:fa:45:73:a2:d5:16:
                    37:54:c5:ff:fe:d8:b3:62:b9:c7:62:2e:e6:2b:f7:
                    00:dd:cb:16:e0:f2:41:97:e8:1b:18:28:a1:52:fd:
                    a7:6a:f7:58:fc:27:38:5e:fd:68:95:1d:b7:c0:4d:
                    54:dc:3b:18:98:0c:24:a7:2f:54:8e:4a:e4:65:5b:
                    d1:9e:3b:e8:58:df:35:e1:28:c4:e5:69:5f:e9:b0:
                    31:86:e1:b4:42:58:7b:86:fb:26:06:0e:98:b6:cd:
                    11:75:50:38:c7:0d:0b:23:dc:1f:bd:e2:8d:c7:70:
                    d5:d5:bb:fc:96:4b:8e:b5:0e:25:f0:62:dd:ac:42:
                    ff:e3:df:45:91:a8:6e:94:b6:69:25:3d:f9:ba:c4:
                    f5:56:f1:75:06:e2:e0:17:1d:18:8d:d5:26:e6:d0:
                    ed:77:2e:d7:69:dc:8e:0c:5b:83:87:3c:e0:c3:f5:
                    6c:1e:6e:90:eb:49:73:61:a6:09:85:af:6b:77:c3:
                    7e:29:0d:9b:68:83:e1:b7:11:f1:27:0e:e3:8c:7a:
                    f3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7A:F4:CD:10:62:21:C1:CA:8C:03:42:3E:14:81:4F:2D:7A:52:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ac3e3e58-0d0c-3b65-8f60-e9b1cc66dadf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:60:50:8c:df:95:bf:e1:ba:d9:e1:40:91:05:34:bd:b8:a4:
         98:45:e8:ed:ef:9d:58:d4:30:6e:62:80:6b:d0:32:71:52:9c:
         8e:69:70:bf:46:db:04:01:3c:1b:ac:ec:28:8a:fc:1e:9d:27:
         9d:ca:6a:46:36:24:6d:81:06:0d:da:9e:68:35:3a:18:ce:6d:
         5f:f2:6a:e0:05:e0:35:b7:7a:ed:5d:91:e5:0a:f4:1b:b9:0a:
         b9:56:e4:81:8a:03:ee:f1:48:3f:14:89:07:f1:7b:37:0e:24:
         e2:3f:f3:5e:d3:2f:a8:ad:fc:66:74:be:ce:04:0e:1d:e0:b8:
         58:69:ba:68:41:fe:75:bf:c7:85:e5:03:14:b2:b3:c2:7e:be:
         d6:a3:50:52:f3:e0:1f:7a:cb:48:1a:ef:a7:22:39:2b:57:32:
         6d:bb:b9:cc:42:de:d1:e8:f8:b6:2c:46:b4:72:fb:7d:d5:b8:
         ee:41:20:af:7b:64:36:de:f6:92:9d:e8:6b:2e:03:3e:0f:39:
         81:04:1d:52:70:55:2d:9c:34:98:92:9e:94:32:15:c2:67:4e:
         99:4c:c5:74:c5:33:2f:02:59:de:40:b5:a7:d6:cf:3c:88:34:
         fb:1b:09:8f:1c:09:e0:15:7c:e8:f7:23:8a:09:8e:bb:a4:e3:
         f0:aa:bf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:34:27 2024 by rpki-client on console-ams.rpki-client.org