Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eae6bdef-b600-32f9-9312-cffdc09f2888.roa
File:                     eae6bdef-b600-32f9-9312-cffdc09f2888.roa (raw, json)
Hash identifier:          QnIoaNjHocglzjWo71Ses6IuZkIY6DAsTlHVTRMkF5I=
Subject key identifier:   30:1F:C4:58:41:01:D4:90:E7:81:E1:3C:1C:C1:37:BA:F8:7B:7F:1F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004BC47F2A91BC2368D94719
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eae6bdef-b600-32f9-9312-cffdc09f2888.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33667
IP address blocks:        2001:559:5de::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:c4:7f:2a:91:bc:23:68:d9:47:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=c90e9eb6-f872-48d9-884d-a9d29e4aee3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f3:82:c5:ae:de:f2:4d:27:89:5b:77:fd:31:
                    de:e8:d5:6a:cc:9c:3b:12:a9:28:0f:a2:1e:c8:d1:
                    77:31:bb:97:b6:8a:78:96:25:5b:2d:b9:e3:59:42:
                    4d:57:b5:3d:ec:92:94:55:a7:10:93:98:29:ed:0c:
                    13:75:d4:d6:e7:e5:30:2f:e4:27:e9:3d:d8:47:bd:
                    3f:eb:c7:f7:ce:5c:04:17:33:ef:9a:cd:1b:b3:f4:
                    b7:85:67:e7:ad:ac:87:a9:ad:ba:cd:5c:9d:9f:71:
                    70:c2:0e:83:2c:2c:9b:38:9e:68:a6:71:ea:ea:e2:
                    6d:da:00:8b:4a:b2:fe:78:1b:90:01:32:4a:3f:ad:
                    99:10:63:6f:fc:88:e1:25:e0:ac:90:51:95:fa:3c:
                    13:17:b5:d7:8d:40:fd:c6:cf:e0:7a:90:ee:4b:7f:
                    39:78:6b:4e:4f:68:9c:36:32:b4:52:f7:40:64:c7:
                    a2:95:37:0f:2a:5c:57:28:bc:cd:87:da:ab:05:cd:
                    ff:a9:bd:41:ac:69:00:09:ee:36:fb:77:62:6b:f7:
                    4f:26:f6:0f:58:c6:d0:7f:b3:90:3b:26:96:b1:4b:
                    f8:33:41:aa:bc:cc:b8:8f:8f:a2:31:0f:a2:76:3b:
                    49:63:ed:4e:40:37:4f:cd:c7:c9:34:7f:aa:55:06:
                    8e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1F:C4:58:41:01:D4:90:E7:81:E1:3C:1C:C1:37:BA:F8:7B:7F:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eae6bdef-b600-32f9-9312-cffdc09f2888.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:5de::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:53:64:07:4e:67:eb:73:5e:29:9a:81:c9:84:3a:46:ac:f7:
         0c:63:6e:dc:c0:a7:bb:4b:6e:b2:29:bb:50:69:0f:00:51:49:
         3b:51:eb:f9:63:06:e6:9b:d1:65:8e:63:51:72:a8:7e:ef:4b:
         3c:ee:ad:e2:73:05:d7:a9:c6:fb:ee:81:3d:be:b6:77:b0:6b:
         20:67:4d:32:ac:de:5a:68:b7:cc:05:5e:d7:37:4c:2a:85:9a:
         2c:6a:c3:ee:bc:0e:85:18:3b:1d:28:0f:58:c8:1d:31:4f:fd:
         4d:86:24:40:d1:74:d9:fe:5f:2c:5f:13:e5:af:81:f8:ad:1b:
         e5:66:ed:e5:4e:79:a3:e5:b7:da:b6:c4:b4:cc:ff:96:6f:5a:
         f0:eb:0c:10:76:c2:da:61:a4:3f:86:ed:dd:c1:4b:54:76:f0:
         0c:21:98:78:4e:2a:e7:4d:e0:ad:4e:fc:4a:80:34:4a:f8:c3:
         0f:15:fc:4b:7b:b4:9f:5e:4f:bd:06:47:25:78:69:bf:aa:7e:
         70:78:fd:67:d9:6d:19:96:0d:2f:5b:3a:d7:f0:d6:8a:d7:6f:
         b4:d8:17:0b:4d:05:90:b1:3f:df:0d:9c:cc:a7:11:97:9c:f5:
         47:2e:99:07:57:50:9b:fa:32:9e:7b:56:d7:e3:8a:bf:0a:11:
         8e:ab:31:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:56:21 2024 by rpki-client on console-fra.rpki-client.org