Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd9b1a86-696b-312c-b094-89af738a6a0c.roa
File:                     dd9b1a86-696b-312c-b094-89af738a6a0c.roa (raw, json)
Hash identifier:          wu0koYI3Z+gXq2UA4fRocMj2AmVTQXqXLlRLn7NPH4k=
Subject key identifier:   CD:41:D4:8F:18:B4:B2:97:34:D7:24:F7:4F:42:62:CC:10:27:1C:E8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004AA00F914AF3351A49C9C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd9b1a86-696b-312c-b094-89af738a6a0c.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33491
IP address blocks:        2001:559:22e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:a0:0f:91:4a:f3:35:1a:49:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=189d1f85-9d52-4e81-b85b-c5f4140ee029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5a:ac:99:fa:5b:32:c6:86:d1:d8:30:ed:cb:
                    70:ec:14:fa:0e:c8:2d:e1:c5:95:70:32:f4:dc:c8:
                    fc:02:ce:55:b6:7e:08:b2:44:e4:86:7c:12:38:b8:
                    d7:ad:27:64:65:b5:bf:0f:f5:bc:5f:a3:0e:ca:77:
                    c9:43:81:b4:68:f0:40:be:50:45:d2:e2:8b:98:95:
                    c3:be:92:14:10:9e:71:00:69:6b:92:cb:ab:a3:2b:
                    c4:03:c9:14:c3:7e:43:af:fc:0b:1f:af:04:e3:c7:
                    d1:2e:7d:97:0f:f0:23:3b:21:3c:54:23:eb:34:47:
                    41:ba:4b:a7:c1:1a:6f:66:9b:b9:4f:0b:2f:ef:37:
                    03:82:88:5f:73:89:94:df:ea:43:7e:ad:f0:6c:ed:
                    4f:e1:5f:b6:b5:0e:b3:bb:a8:cc:f4:c0:d4:91:e5:
                    9a:d5:96:8e:a9:fb:68:cf:32:66:ef:78:60:f5:aa:
                    cb:d6:92:cd:98:77:b1:c5:10:01:ff:95:cd:e5:71:
                    ce:f5:f9:82:79:f4:73:62:0c:e0:d9:25:87:f3:d5:
                    90:58:d2:8a:94:28:a4:9f:3e:9d:c0:39:24:10:21:
                    dd:bb:4c:1b:e8:56:36:16:3d:be:4e:cb:d4:b3:98:
                    10:f0:bf:43:6e:4d:6e:78:7e:14:71:71:b7:bb:cb:
                    18:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:41:D4:8F:18:B4:B2:97:34:D7:24:F7:4F:42:62:CC:10:27:1C:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd9b1a86-696b-312c-b094-89af738a6a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:22e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:25:78:1f:d2:9a:cd:c4:63:29:9d:ef:a1:6d:27:75:0d:7c:
         4e:39:b0:a2:f4:70:b4:31:b9:15:86:6b:61:49:e4:ca:26:c8:
         90:0e:a1:27:4e:a3:5e:1e:10:ba:8f:a7:c2:83:92:68:af:ee:
         23:41:1c:81:3b:bb:33:d3:fb:40:db:87:e4:52:44:a6:08:01:
         6b:b7:54:f3:01:c8:f6:22:70:91:a7:6e:be:57:fc:f2:c5:f4:
         5f:52:56:d5:ea:0f:24:d1:56:d2:3c:ae:2f:bf:7e:a3:f0:fc:
         32:05:9d:c7:f6:b2:ce:ee:9a:04:b7:ed:a6:72:0d:00:54:bd:
         6b:41:e5:71:e2:10:8b:93:f4:49:ae:11:85:06:35:42:d0:fd:
         2f:a3:8b:44:ca:9d:cb:8d:f4:ad:09:cd:33:3a:bb:31:bb:2b:
         58:12:6f:da:66:0d:f1:5c:d0:07:cb:cc:4d:b1:ba:dd:3a:16:
         77:80:55:fe:75:f1:7b:a2:24:f0:fa:5d:38:48:29:39:d8:67:
         b4:4d:ff:7d:d7:44:50:1f:2c:a3:78:2a:d9:d4:aa:8a:d0:4c:
         82:be:c7:59:5a:85:04:02:62:f6:1d:42:a0:a4:1f:46:18:5a:
         17:4c:83:75:31:89:0e:10:65:aa:19:10:7b:d3:d1:bb:24:ed:
         f7:54:76:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:33:08 2024 by rpki-client on console-fra.rpki-client.org