Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dce232b2-85e0-34df-8605-8b480d5a4472.roa
File:                     dce232b2-85e0-34df-8605-8b480d5a4472.roa (raw, json)
Hash identifier:          5Lyn8xN6jlQ/h/BtZAcoMW6db30k4sBxME6+pqbFig4=
Subject key identifier:   D2:22:84:94:DB:72:FF:AA:DE:66:E4:52:F2:2F:F8:D1:B2:61:F4:57
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B27A98BCF3DB36A9FB2E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dce232b2-85e0-34df-8605-8b480d5a4472.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22909
IP address blocks:        2001:559:4d6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:27:a9:8b:cf:3d:b3:6a:9f:b2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=4042fbab-3a3d-42d9-8deb-2142bdf2945e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:db:2b:a9:45:23:c6:b5:b8:22:c1:88:21:2a:
                    43:36:16:bc:8e:f7:32:79:91:84:82:03:94:6c:70:
                    94:27:2a:13:d2:5b:7e:9c:5e:eb:09:78:af:76:fe:
                    cd:eb:82:26:a1:4e:df:0b:de:40:16:c5:90:15:d7:
                    39:0f:24:7d:a8:83:93:74:d4:56:54:8d:4a:39:38:
                    45:be:5a:75:51:b5:c8:3d:29:f1:fa:43:01:d2:86:
                    86:3c:7d:48:63:b6:5a:ec:c8:32:19:70:00:6b:e0:
                    06:06:50:cf:c0:d6:90:ad:26:99:3d:73:14:c3:9c:
                    19:eb:9f:89:21:f1:d7:7b:da:4b:10:ac:98:9b:75:
                    ec:67:81:7b:97:2a:f4:a1:03:93:27:02:d1:56:53:
                    a4:03:d3:2e:bf:de:ec:47:be:cf:f5:f9:da:33:5b:
                    47:36:7b:c9:af:cc:44:5b:84:e4:b1:0b:2f:ed:75:
                    ff:27:88:3c:b4:22:bc:0b:7e:44:9f:c3:08:9e:d9:
                    6a:16:e1:a8:19:a0:6f:2d:80:cd:94:47:46:1b:37:
                    45:f6:ac:ca:62:9d:1a:20:72:73:6a:3d:89:87:f0:
                    92:98:6f:48:3c:34:37:d1:ba:c8:ac:18:ee:dc:38:
                    32:f3:5d:d0:8d:d2:3d:7e:c6:d1:d4:54:47:00:42:
                    b4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:22:84:94:DB:72:FF:AA:DE:66:E4:52:F2:2F:F8:D1:B2:61:F4:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dce232b2-85e0-34df-8605-8b480d5a4472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:4d6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:20:ce:d5:a0:96:43:cf:b4:51:2e:9b:5a:04:4d:e7:a3:53:
         7d:7e:5d:f7:ee:16:82:ec:e1:56:ee:84:26:b8:66:09:eb:b6:
         19:ba:fa:37:37:3c:4f:99:73:0e:56:1d:a7:40:79:da:bc:4a:
         e8:92:5e:89:79:95:2f:37:04:43:f3:e6:24:3b:96:b3:be:be:
         bf:4b:30:e0:ca:dc:59:3b:90:12:d3:24:aa:d1:53:75:94:2c:
         01:f2:13:be:75:48:fb:72:fc:cb:a8:72:8c:73:14:81:5a:55:
         32:57:ce:23:f1:1a:f6:51:4a:3f:9d:9b:53:76:22:e8:5c:79:
         e2:e0:61:d6:bb:1d:c5:f8:af:a8:60:96:9e:91:4c:6f:a8:d2:
         84:8d:a7:b0:ef:56:bb:2d:4f:5b:99:8a:0c:b3:3a:7a:aa:05:
         67:4a:e8:65:ef:2d:1e:aa:14:57:4a:87:7d:10:f1:82:f3:ef:
         55:66:e9:46:83:a2:99:42:fd:96:63:0f:cb:f5:c9:42:06:3c:
         db:56:4e:ee:20:bb:4a:5a:5b:2d:e8:da:15:c8:13:ba:75:64:
         f3:d3:2e:db:a9:bf:0a:3d:15:83:90:e3:16:6f:54:f7:c7:f1:
         e6:e8:df:4a:ae:db:d3:64:55:ae:ef:71:19:b0:1f:ff:00:d6:
         31:5b:1a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:55:10 2024 by rpki-client on console-fra.rpki-client.org