Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8c547d4-3c49-3444-a0cd-c278ba36cdfb.roa
File:                     b8c547d4-3c49-3444-a0cd-c278ba36cdfb.roa (raw, json)
Hash identifier:          Kr5+kutvZUURrjGMIYM6IcLYjDS7Hqwq33gczj0O5Ks=
Subject key identifier:   6C:E4:EC:47:2C:90:02:F5:52:23:6C:D2:DB:CB:EF:3B:DE:B7:34:07
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004ABA94D5EFFBF9CD645D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8c547d4-3c49-3444-a0cd-c278ba36cdfb.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33657
IP address blocks:        2001:559:c43e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:ba:94:d5:ef:fb:f9:cd:64:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=c8f9238f-843a-4d20-a3f8-b48f51191d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:41:68:ab:14:49:54:51:59:f4:d2:30:02:f1:
                    8d:72:22:e8:60:81:12:87:b5:92:ab:00:b1:17:bf:
                    2b:bb:f7:a1:f0:80:28:0e:5e:45:73:c7:0e:05:bf:
                    3f:2b:39:2f:ba:0a:e9:5f:ce:4f:5b:7c:d9:d3:9d:
                    68:eb:8c:0b:8a:e6:08:8a:82:bd:de:85:02:db:e9:
                    9a:1c:6c:46:c0:33:ee:a7:6e:03:49:b0:1c:70:dd:
                    81:ae:ce:de:33:c2:33:9a:3d:32:46:a9:55:04:db:
                    dd:2b:dd:13:41:48:8c:e3:5d:96:cc:93:26:d5:bb:
                    0d:cf:fc:71:2d:0f:ab:10:be:38:3e:5c:53:4c:b7:
                    98:cd:d0:41:e9:8e:eb:2e:38:12:90:49:ad:ce:34:
                    bc:8d:8e:8f:59:d1:97:d0:5e:ce:ee:5e:cc:26:34:
                    56:60:b5:e0:44:6b:16:e8:c6:fc:43:12:f5:6c:d5:
                    8d:d0:07:77:35:96:7e:ef:91:64:2b:4e:65:eb:29:
                    08:c9:c6:89:c8:f2:b9:2a:ec:65:4e:25:e1:c7:e6:
                    68:b6:ef:d7:de:f7:31:21:3b:91:36:eb:ca:37:08:
                    86:7b:50:12:41:a6:0c:a1:e9:bc:66:5e:7b:3c:d1:
                    22:0e:0c:7d:ad:22:73:80:33:f6:31:7e:36:4e:bd:
                    46:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E4:EC:47:2C:90:02:F5:52:23:6C:D2:DB:CB:EF:3B:DE:B7:34:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8c547d4-3c49-3444-a0cd-c278ba36cdfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c43e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:7b:45:7c:0d:a3:77:38:f8:9a:f2:1f:69:49:20:b9:36:53:
         d9:aa:84:1e:87:70:97:55:a9:be:7f:e6:08:d9:0d:4d:ad:63:
         e4:e7:1a:c2:af:29:3d:3d:26:ab:55:3b:57:3d:c8:37:11:81:
         49:9b:6b:3e:c8:ac:1f:db:af:b3:17:be:f5:61:b8:21:ae:5a:
         40:df:62:ae:d6:77:17:a2:e3:46:10:11:40:68:76:e4:69:e8:
         b4:cc:ca:07:ba:89:57:3c:fe:0e:13:ae:20:a8:c5:4d:71:be:
         52:b6:f8:21:5f:fc:29:cd:eb:fa:47:2c:e5:21:b7:b8:74:f0:
         63:a7:9f:cf:51:e8:34:da:15:0b:65:94:56:6e:6e:34:34:74:
         19:07:86:2e:65:4e:e5:e2:e4:63:9f:41:e7:b2:87:32:13:47:
         4e:ae:b9:23:33:6d:f0:e7:7e:3a:85:a2:8c:a0:38:05:97:b5:
         b6:94:67:48:c5:95:ad:03:7e:f3:16:11:12:4e:60:f4:51:d5:
         94:c8:99:5d:46:5c:8d:cc:17:80:2e:a9:b0:f9:86:0b:1e:2c:
         1b:7f:ab:0d:7f:f6:3e:fc:0e:70:b2:e5:04:e5:2a:0c:e5:14:
         1b:e2:26:23:39:5b:22:9a:b2:e6:93:57:d1:de:83:19:e8:c1:
         c0:4d:db:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:03:28 2024 by rpki-client on console-ams.rpki-client.org