Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2449b68-13ca-33ac-8c11-799d1a41dcb7.roa
File:                     e2449b68-13ca-33ac-8c11-799d1a41dcb7.roa (raw, json)
Hash identifier:          OVDbtAskepGUqm4hFPbw60LaaFAYAqCGiGnoZhI/EkI=
Subject key identifier:   A7:E2:6B:E5:7A:62:14:2E:D6:7D:BD:68:D8:10:3C:9D:DD:BB:1D:4A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C6C73EC83688479A80200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2449b68-13ca-33ac-8c11-799d1a41dcb7.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33659
IP address blocks:        2001:559:80e3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:6c:73:ec:83:68:84:79:a8:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=2f341276-0f5b-4452-a992-ebe769e17c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:74:de:6d:4c:fa:e2:a6:4c:e7:0b:8a:18:76:
                    21:4b:4e:6e:5a:b6:0a:13:74:f1:22:13:b5:bd:d6:
                    ba:b3:a8:8f:d9:77:b9:62:63:81:cf:40:71:ae:f4:
                    44:2e:ac:fb:c4:5a:94:84:f3:c9:8e:8d:de:5c:4e:
                    a8:57:1f:94:e4:d3:e0:1f:15:aa:78:ed:1b:36:da:
                    29:44:ba:4a:da:3c:76:79:40:8b:5b:3b:54:8e:a4:
                    28:d2:a6:a0:43:a3:af:6b:fb:35:02:2a:79:28:fe:
                    d1:f8:3b:64:fa:17:99:4c:8c:d2:4e:1f:52:0d:92:
                    47:29:db:e2:12:04:0c:24:2a:cf:89:fd:01:49:1e:
                    e8:f8:73:cd:88:06:db:28:47:fa:c4:c0:88:ea:6f:
                    28:b2:13:62:7b:c1:98:55:68:f0:1b:ed:18:1b:ec:
                    87:79:0d:4d:ec:39:e5:4a:c0:8b:57:fb:4c:30:a6:
                    ae:d1:ae:83:12:fe:b1:ce:47:0a:5a:8b:90:af:b0:
                    ab:14:72:4c:e2:67:d3:d4:32:75:d7:f6:51:37:94:
                    1b:50:1b:9f:6f:af:d2:e5:94:7f:8f:a9:78:cc:23:
                    ff:f5:95:df:e2:1c:c4:b1:2b:70:23:7b:46:0d:db:
                    23:e3:6e:5b:d4:c8:9a:44:bd:bf:4a:76:44:ee:9e:
                    b0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E2:6B:E5:7A:62:14:2E:D6:7D:BD:68:D8:10:3C:9D:DD:BB:1D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2449b68-13ca-33ac-8c11-799d1a41dcb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:80e3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:7e:98:23:a1:73:45:b1:f5:cf:77:9f:b4:ea:68:52:23:b2:
         14:f1:2c:a3:32:fc:09:31:c9:f0:f1:5c:48:e8:d7:56:24:50:
         c6:f1:1b:f1:89:7e:c3:59:a9:7e:61:57:ee:55:f1:cf:78:05:
         e6:1a:07:c2:44:46:45:f6:da:3c:c7:d7:7d:fa:34:83:07:1a:
         3f:c2:a2:e1:41:c4:6a:27:d9:f4:c3:a3:46:00:3b:2e:42:a6:
         f7:03:73:f9:ca:4c:f4:93:49:b7:58:92:01:f2:b2:25:22:4e:
         65:5c:ea:d9:dd:de:e1:b1:1b:92:f3:f3:f5:bd:ac:db:53:25:
         22:ec:d3:01:7c:7e:06:b7:f8:bb:36:21:43:62:d8:cf:db:90:
         33:8c:7e:2b:a2:ae:2c:87:09:96:6f:3c:1a:8b:7e:08:91:52:
         82:cd:61:aa:7c:c9:59:a5:1b:8f:ad:a4:4e:79:8f:8b:a3:1f:
         fa:a3:32:d5:96:68:a8:b7:ae:a1:46:91:8a:9a:a7:0f:14:b3:
         8b:40:54:19:5c:38:60:f4:26:59:9b:39:df:74:03:3f:b7:df:
         ee:7b:38:1f:af:18:84:98:cc:f2:20:ff:9d:20:e6:97:a8:b1:
         e0:b5:5c:55:d0:20:5b:5d:d5:4e:39:eb:f8:17:24:f1:96:f1:
         e5:cb:19:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 15:26:40 2024 by rpki-client on console-fra.rpki-client.org