Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9c123b2-b665-3675-af15-faa54b05c0ba.roa
File:                     e9c123b2-b665-3675-af15-faa54b05c0ba.roa (raw, json)
Hash identifier:          zBj/AzZvwk/JMOyHf6mh+Fcv4K9RpES6i76OYTHFILc=
Subject key identifier:   47:9A:B0:51:E2:77:4F:7D:E5:F4:C0:02:91:68:55:74:B1:20:5B:23
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A90978D728E42D187B400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9c123b2-b665-3675-af15-faa54b05c0ba.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33287
IP address blocks:        2001:559:870c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:90:97:8d:72:8e:42:d1:87:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=d2de508a-115d-4c36-940f-40ea096a73d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:11:51:5b:10:c7:8c:2b:e5:4c:37:29:44:4f:
                    23:b6:51:a6:3c:1e:09:04:00:05:8d:64:c2:98:89:
                    80:68:72:33:62:a0:69:1e:9d:ac:46:8d:07:f9:37:
                    7a:04:8c:db:45:3a:7b:b7:70:9c:5e:ef:77:6c:16:
                    f4:71:e4:e6:eb:0f:b0:fc:0e:d9:f2:6b:75:98:0b:
                    d6:f7:0c:ec:1e:9d:f1:59:8c:05:78:bc:db:41:a3:
                    63:2c:08:03:20:4f:ec:03:66:2c:ce:08:1f:7d:a3:
                    49:65:ef:b6:43:64:d3:97:99:c1:60:97:78:22:cb:
                    38:f1:a4:94:39:f7:15:d2:4e:68:52:0f:ec:cf:2f:
                    77:16:dd:f1:a2:0b:e6:54:d8:e4:04:d3:9f:ec:09:
                    ee:a5:a0:13:1e:5d:02:8a:a8:57:cb:0a:7b:20:d8:
                    fd:8e:97:7e:3a:53:ae:e5:e3:08:2b:aa:fb:f5:aa:
                    0c:c7:f2:46:f9:9a:59:da:c5:71:f0:06:cf:e9:0a:
                    a1:39:7e:65:f8:69:02:ba:d8:e2:83:2f:f6:53:70:
                    4c:01:7c:b2:af:c1:65:e1:4b:71:60:72:2b:66:cb:
                    b5:7e:ff:18:d6:8c:f5:fc:32:01:5f:6b:5c:74:f0:
                    c5:b5:a3:4f:c1:97:32:15:61:bc:3b:0f:41:a3:8b:
                    38:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9A:B0:51:E2:77:4F:7D:E5:F4:C0:02:91:68:55:74:B1:20:5B:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9c123b2-b665-3675-af15-faa54b05c0ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:870c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:2a:c0:d6:91:81:87:18:7b:98:6d:5b:d0:fd:09:3c:4b:96:
         86:23:36:60:c2:54:5e:b1:fb:9b:32:a9:56:04:d5:e1:f0:fa:
         11:d4:91:f6:ca:c5:a3:a8:7f:f1:08:1b:66:fb:f1:69:a4:a6:
         b5:85:08:50:06:22:6c:72:8a:12:1c:e4:02:77:de:0c:d2:0f:
         7f:1c:4f:09:7a:56:cc:0c:89:4f:b5:54:d1:c6:0e:77:be:36:
         cb:80:f3:4e:0f:7b:86:c7:eb:07:1f:79:b7:60:15:f0:fd:be:
         ad:c2:b1:15:34:c4:11:ff:22:c1:e1:7e:21:0c:2d:3c:a1:0d:
         42:29:c4:35:d6:bb:61:d3:9c:21:6e:82:e8:b2:e7:d1:ad:4a:
         e6:22:a5:dc:05:b6:27:d2:b1:da:a4:69:21:47:58:41:84:b4:
         83:64:77:44:30:9d:57:bc:cb:0f:ef:cf:99:73:56:a2:40:bf:
         a1:d3:ee:ea:fe:36:54:0a:9b:6e:da:5a:db:25:88:7c:1c:de:
         02:74:fb:52:c2:cc:04:b2:45:fa:95:a7:34:18:62:9a:fd:fb:
         5b:1c:f8:35:8b:1e:d5:fa:34:aa:ab:c6:a0:5f:82:eb:a4:5f:
         13:15:1c:5e:bc:bf:4d:ad:d8:e3:b3:59:61:8a:3b:34:32:75:
         93:cf:17:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:36:41 2024 by rpki-client on console-ams.rpki-client.org