Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de2d0375-c8e2-3265-bc8e-8b2a883ab0b9.roa
File:                     de2d0375-c8e2-3265-bc8e-8b2a883ab0b9.roa (raw, json)
Hash identifier:          bv9RBmxgf7dCZAG4woVuNB/mu8Uqx/1hVl1Vmqjglmc=
Subject key identifier:   AB:47:90:11:C5:44:59:66:52:A5:18:1E:12:79:EC:AF:5B:D6:5D:8D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049FC8FF53BCD1792336800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de2d0375-c8e2-3265-bc8e-8b2a883ab0b9.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33652
IP address blocks:        2001:559:872a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:fc:8f:f5:3b:cd:17:92:33:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=3ce04feb-c692-472b-a915-049a8ed1302e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:61:73:4b:ae:5b:9f:93:28:32:b9:32:94:ff:
                    f0:49:6b:ff:ca:2c:4a:25:81:6f:87:8d:1f:89:2b:
                    8b:59:db:3c:af:ad:a4:f1:d1:a4:6f:8b:10:41:7e:
                    03:b8:d3:48:51:a0:52:7b:92:23:94:ef:7c:5e:5b:
                    9c:ae:80:72:0b:2b:92:8b:be:8f:6c:ef:9a:43:94:
                    f3:86:f1:64:e0:b7:79:4d:02:2e:08:8b:46:64:6a:
                    82:b9:d4:95:c7:73:ce:7e:3d:92:0e:3d:26:2c:57:
                    fb:b8:c3:a6:5a:4b:cb:cb:ca:39:e4:64:c1:9c:cb:
                    e3:d9:65:ec:68:31:2a:f5:49:a1:25:6c:fb:55:c1:
                    ce:4d:01:cb:cd:d6:ad:94:21:f7:f2:8b:81:4c:a7:
                    f7:c8:8f:fa:9f:73:1f:c5:eb:cd:dc:2a:5c:03:55:
                    2e:69:5f:58:11:d1:0f:09:86:38:e7:13:0b:ff:7d:
                    d1:62:6c:43:f3:72:aa:e4:9f:6f:96:84:f9:c6:6d:
                    1c:e2:06:8d:a5:c2:27:8c:32:e7:67:d5:f0:3b:58:
                    06:ef:b7:55:b4:cf:68:e7:29:d1:86:d9:11:50:28:
                    17:42:6a:c0:6a:76:5a:0e:e3:aa:ab:60:8f:bf:eb:
                    9f:88:a6:d6:75:62:a3:6b:80:7a:45:d0:f6:33:2e:
                    9a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:47:90:11:C5:44:59:66:52:A5:18:1E:12:79:EC:AF:5B:D6:5D:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de2d0375-c8e2-3265-bc8e-8b2a883ab0b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:872a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:07:38:1c:07:d8:95:74:41:7b:ff:e3:50:38:18:64:a6:76:
         b1:11:cb:35:53:ed:f3:6c:66:36:32:20:9b:f6:2e:85:0e:2b:
         40:78:9e:5e:8b:94:92:88:c1:6d:12:43:a5:2d:4e:41:83:2c:
         b0:28:3f:a4:4b:be:6e:08:d6:09:45:d9:f6:be:32:94:39:bf:
         7b:ed:44:0c:9d:36:24:ef:32:32:8c:6f:fe:cd:c1:3f:2c:d4:
         f6:d5:9b:66:c3:d7:a7:f0:f6:51:42:eb:d4:ab:c3:ec:b1:9e:
         96:72:e5:ac:df:02:92:be:bf:60:08:d7:3e:72:f9:a1:90:59:
         5b:24:67:92:cb:ef:bb:a9:4f:e9:d4:94:ca:56:50:b6:06:84:
         f0:63:41:1c:ce:69:49:a1:91:69:1a:a4:b2:9b:d4:69:ce:da:
         9f:85:25:5b:92:d4:ef:6f:6e:c7:4a:30:1c:91:46:73:b2:c3:
         8a:80:cc:34:29:c9:e3:4d:8f:7d:1a:82:3a:a3:06:1e:3c:47:
         0c:7f:b0:57:c6:b7:5f:44:80:ff:dc:ff:ed:b0:21:3b:e8:f3:
         0d:a4:8a:db:4a:6b:9c:71:df:64:7d:bc:71:da:7f:60:2d:15:
         15:3e:6d:b0:e3:b6:22:d8:fb:5b:d2:61:ec:0a:9c:82:fc:3d:
         ce:81:96:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:36:13 2024 by rpki-client on console-ams.rpki-client.org