Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbec66c2-0974-3496-98b5-e94afca41a0b.roa
File:                     cbec66c2-0974-3496-98b5-e94afca41a0b.roa (raw, json)
Hash identifier:          TL1HG+e+9AoiyYF2kQGzbf1Ntw8uwGe0+w/dV4FkjVw=
Subject key identifier:   C8:A8:1C:E8:63:96:2F:A4:A8:FA:24:9F:72:00:B1:6B:85:B9:6A:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A0D9A3816E518EB2E9B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbec66c2-0974-3496-98b5-e94afca41a0b.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33662
IP address blocks:        2001:559:8783::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:0d:9a:38:16:e5:18:eb:2e:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=31ca3337-ab21-4577-84a5-b6698b19ea2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:16:73:ad:7c:18:6e:af:f7:ad:55:80:c0:c0:
                    e1:64:8b:00:fd:6e:39:15:3a:ba:42:df:a7:82:40:
                    b5:67:35:54:16:ec:3d:3f:e9:0b:b1:80:8e:b4:3d:
                    bc:80:54:26:d2:a3:5c:6e:ff:dc:68:1c:e2:e7:75:
                    3a:52:10:87:ff:9e:dd:46:2d:d0:e2:bf:0d:75:68:
                    96:14:1c:55:a0:fe:0f:b2:fe:51:c3:3d:d0:22:b8:
                    6e:0c:7f:06:14:18:d3:12:62:72:43:86:11:e6:2e:
                    be:69:2d:ea:40:10:69:bb:30:16:60:20:79:4f:c2:
                    33:a1:93:9a:ec:60:66:e3:80:30:f7:80:a3:d3:d5:
                    8e:b3:d7:d7:20:99:80:d5:57:f2:93:72:fb:f9:00:
                    91:fb:aa:a4:84:40:6b:e9:35:2d:e7:b8:33:2d:1f:
                    77:0e:c6:d5:46:85:3f:d4:58:15:c4:19:5e:3b:84:
                    c1:31:03:1d:d4:db:3e:48:5d:f2:5d:c9:ab:c8:58:
                    9c:ab:c9:33:0b:b5:36:3a:fe:b7:ee:a3:2f:c4:f1:
                    dc:46:0d:0b:e5:26:0f:84:1a:bb:65:33:42:54:75:
                    f2:22:98:d6:73:17:4c:25:96:1d:8e:71:f5:ec:ec:
                    b4:06:0d:d3:5f:5e:60:c7:45:2d:4c:c6:76:16:32:
                    78:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A8:1C:E8:63:96:2F:A4:A8:FA:24:9F:72:00:B1:6B:85:B9:6A:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbec66c2-0974-3496-98b5-e94afca41a0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8783::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ba:d0:96:f3:d2:b3:8d:e0:02:ca:78:73:4b:39:10:60:01:
         b0:85:35:e1:56:d4:64:a0:59:43:64:c5:e6:e9:21:9a:94:29:
         10:3c:8a:c2:16:8a:75:6c:02:61:1f:0c:59:17:18:98:f3:1d:
         78:8d:bb:b7:28:c0:0a:88:3d:33:60:b9:8e:1d:4b:e3:74:23:
         56:8a:9b:c2:29:3f:64:b2:9f:be:90:60:85:c3:45:03:60:f9:
         70:96:e4:20:e8:8c:88:9b:32:3d:f7:8b:da:cf:eb:da:ef:d7:
         4a:75:61:fe:ec:19:62:da:f6:90:05:79:4d:92:31:50:65:94:
         8c:09:bc:5f:b6:68:29:ec:c2:97:bb:8c:e5:45:6e:9f:fe:09:
         72:a3:f2:5d:aa:99:03:4f:b1:1d:d2:4c:ac:ea:81:e3:60:51:
         c8:b1:04:29:f8:d2:0a:ad:1e:3c:ff:b3:79:f7:9e:da:61:51:
         27:9c:82:e8:3b:32:d6:f6:06:e1:7f:d8:64:82:53:d9:fc:9b:
         4d:b7:b1:64:28:ef:72:6c:21:db:37:8f:3f:55:cd:a0:03:fb:
         71:2c:3a:e4:7f:f1:a4:cf:05:9e:02:ba:b5:5c:d7:6a:7e:9b:
         f9:6f:34:76:6b:da:e3:e0:62:ce:30:99:3d:c9:28:db:d7:a8:
         bc:1c:d9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:45:35 2024 by rpki-client on console-ams.rpki-client.org