Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca87fe07-f86d-329e-8711-fa386c509ed1.roa
File:                     ca87fe07-f86d-329e-8711-fa386c509ed1.roa (raw, json)
Hash identifier:          MTwUSfOGM7tqRzY1O+5VmQrUFHPA1HkbH0yQjhh5Ixs=
Subject key identifier:   5A:2B:19:0D:5B:52:5C:89:CB:4F:05:EE:6D:17:BD:C9:67:78:54:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004BE180E7CF7700857B6280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca87fe07-f86d-329e-8711-fa386c509ed1.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7015
IP address blocks:        2001:559:826c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:e1:80:e7:cf:77:00:85:7b:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=d55960d9-3a0e-476a-b4ad-976ae3f732ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:00:f7:5a:df:72:0f:d5:ae:7d:bf:da:21:0d:
                    1d:80:cc:a3:c9:3b:c2:63:b4:1b:c3:e6:23:cd:75:
                    9d:8f:83:ed:e0:4e:93:9d:30:1a:68:09:d6:fd:f8:
                    d0:91:cb:a3:e7:06:82:06:86:8f:d5:79:34:9c:8d:
                    a6:b1:99:3b:0e:3c:cd:59:94:0e:cd:ad:7e:8c:b3:
                    29:06:29:8f:8c:12:2e:0f:b4:7a:82:ee:f4:3b:9a:
                    90:d5:69:f1:db:8f:10:84:72:b7:42:09:7b:92:6b:
                    11:51:a6:58:4e:d1:d8:46:21:7d:3a:36:17:ce:ed:
                    01:94:41:e0:5a:41:f5:9d:02:2c:3c:d5:02:a5:06:
                    70:35:61:a8:a6:de:09:c9:82:3a:f6:0d:46:b4:48:
                    0d:31:38:a9:68:95:46:7f:b9:26:a6:f2:25:e3:5d:
                    7b:2b:bc:53:df:f2:5b:52:36:cd:c7:8b:4a:4c:8e:
                    9c:ff:2c:cf:5e:2b:f2:c3:c8:0f:39:cf:d9:a5:34:
                    af:4c:24:e1:11:0d:8d:02:ec:39:07:e4:b4:59:b0:
                    af:d3:28:0f:8f:99:38:19:96:2d:72:61:81:6a:e2:
                    27:d2:cb:8c:19:c2:e7:31:57:72:62:ff:1b:d5:b7:
                    42:d0:3b:db:d4:f4:90:f7:46:d7:eb:0b:52:97:3a:
                    a1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2B:19:0D:5B:52:5C:89:CB:4F:05:EE:6D:17:BD:C9:67:78:54:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca87fe07-f86d-329e-8711-fa386c509ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:826c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:94:c3:65:cd:20:8b:7e:66:48:26:9b:6d:6c:ab:51:fa:cf:
         a1:fa:a5:97:d4:70:54:f9:08:b1:d6:23:ac:5c:17:8d:ff:7c:
         d8:bf:f0:02:c2:14:20:54:4b:93:a7:9b:c5:65:9c:93:fc:fd:
         dc:04:7a:05:46:4b:a5:06:e7:aa:1c:2d:00:af:4b:28:52:ed:
         b2:09:a3:94:21:a5:ea:c5:25:00:c2:ad:c4:f4:3c:54:ad:7a:
         e2:1c:ab:b0:6c:4b:96:8d:a5:ee:64:4b:f9:ee:78:99:fd:64:
         17:d0:ae:62:03:e8:85:de:f3:1d:c5:a7:58:a0:ba:24:ca:e9:
         66:41:dc:6c:4e:38:49:73:cc:1e:15:c9:84:0a:83:32:d9:b8:
         82:1e:c8:48:6f:cf:40:57:d5:65:30:c5:c9:f6:1b:05:9b:cb:
         ba:e0:81:14:87:e9:11:2e:71:25:35:ce:b5:57:d9:a8:a9:e3:
         bd:4a:32:30:81:e9:07:77:e4:90:31:e0:bf:46:3c:94:95:57:
         d6:63:02:65:3b:60:41:ad:a0:62:cb:2f:da:8f:d4:b7:97:e6:
         3a:57:75:b2:ef:88:dc:96:45:bb:d1:d0:2c:fb:bf:d1:f1:eb:
         aa:11:ea:db:e5:2a:fa:4f:f6:50:b2:e6:4d:5f:7c:05:30:7c:
         63:2f:5e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:44:42 2024 by rpki-client on console-fra.rpki-client.org