Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5fb41d7-e37a-3137-9574-24f04bc1dd32.roa
File:                     c5fb41d7-e37a-3137-9574-24f04bc1dd32.roa (raw, json)
Hash identifier:          YKU0FZts966zcHvsq5qNmmLhTnwR2pEV6QyvhFPOyGA=
Subject key identifier:   B7:F0:5D:F4:A6:24:DB:82:B7:B3:4D:8C:4D:0F:35:11:EC:21:10:5B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049C0D70C7494E4D3AD5510
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5fb41d7-e37a-3137-9574-24f04bc1dd32.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     20214
IP address blocks:        2001:559:85be::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:c0:d7:0c:74:94:e4:d3:ad:55:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=050e9522-d527-4fd9-a9e3-63419c6ba42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:f9:4b:af:b3:6b:e9:54:4f:21:5f:43:b8:
                    bb:2b:cd:b7:17:33:31:9e:b6:1b:64:91:23:d9:8e:
                    b8:36:7d:45:8f:48:52:c7:83:d6:42:b7:02:8e:58:
                    84:95:f3:cd:56:33:a9:83:21:5e:4b:38:cd:90:d0:
                    89:c3:6d:64:01:30:69:8a:8e:1a:00:59:86:11:23:
                    3e:f7:38:10:20:eb:b4:28:48:51:a4:f4:d2:3d:b4:
                    66:9c:c4:0b:2a:bf:ce:61:3a:de:d8:67:f8:0f:12:
                    f2:eb:5c:cd:77:a1:7c:33:9f:d0:91:55:74:01:60:
                    fb:49:57:05:5a:fe:4b:c0:90:68:7e:0a:a1:81:9f:
                    14:5a:ac:31:2d:67:20:9d:a3:f9:7e:cd:4d:ec:e8:
                    32:a5:82:7a:1f:bb:60:db:d7:dc:ef:3c:27:73:56:
                    96:d5:0a:f6:2b:a9:19:68:3b:dc:e9:97:06:4c:83:
                    63:ef:4c:3d:26:88:e4:e7:23:c5:67:b9:6b:55:fd:
                    2e:4b:b4:de:1a:64:cd:ef:f5:39:8d:0c:04:5f:ea:
                    f6:2d:87:bf:39:a2:d2:af:b8:0e:37:96:36:25:57:
                    be:7d:dd:49:60:45:57:98:e6:ec:38:ee:44:84:30:
                    6e:e9:f9:9e:17:3e:74:ea:2b:1b:f5:6f:2f:9e:30:
                    9e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F0:5D:F4:A6:24:DB:82:B7:B3:4D:8C:4D:0F:35:11:EC:21:10:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5fb41d7-e37a-3137-9574-24f04bc1dd32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:85be::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:7e:17:3b:f2:3b:33:62:a8:db:c3:df:69:8b:88:49:13:9d:
         6a:22:d5:e8:2c:84:a5:70:ed:76:fc:78:a8:bb:bd:ea:ca:53:
         3d:7c:28:a6:12:58:de:ed:08:f9:0d:d9:54:2e:01:a9:c6:98:
         30:54:40:b1:63:bf:21:b4:34:b2:90:cd:4a:30:3f:9f:59:e8:
         2f:3f:82:5d:ef:ad:ce:d5:b5:06:c6:0e:45:97:ba:2c:fc:97:
         17:0a:e2:82:21:d0:43:82:85:a9:2b:c8:69:eb:83:0d:b5:93:
         b6:c3:f8:53:f8:01:98:42:bb:08:38:df:bd:4a:3c:f2:e2:db:
         9b:67:2a:42:af:24:c4:7e:90:a9:f1:e4:b5:45:e8:55:15:ff:
         39:7c:bc:97:87:68:3b:26:47:93:ee:6a:01:e1:98:79:a5:1c:
         86:a4:9e:18:d4:f0:df:04:86:9c:77:a4:79:94:d4:b2:ef:86:
         d4:a8:ce:6b:98:64:24:df:09:12:a2:e9:1b:b6:d2:03:c7:4a:
         da:74:b5:71:b0:a1:f5:a9:65:3f:6e:2b:2e:6e:e0:f7:a1:fb:
         ca:7d:08:68:21:5c:af:68:16:0c:98:22:11:e8:de:f0:b3:cf:
         b8:b5:8c:24:23:b9:e1:13:ad:9f:5d:93:2b:f0:bd:b2:0c:ff:
         3d:dd:2e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:44:34 2024 by rpki-client on console-fra.rpki-client.org