Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8f1b882-e1a8-3f38-bfe4-b1c34cb55299.roa
File:                     f8f1b882-e1a8-3f38-bfe4-b1c34cb55299.roa (raw, json)
Hash identifier:          YB6h4S9lQ7808UZceoqee1javg29ZPDZgI+o9b+EtMI=
Subject key identifier:   13:C4:D4:9B:99:88:24:FC:78:45:61:C3:A2:95:A4:5B:95:F3:9D:F5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004ACCC34D9E9363A9C01A88
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8f1b882-e1a8-3f38-bfe4-b1c34cb55299.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33659
IP address blocks:        2001:559:c096::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:cc:c3:4d:9e:93:63:a9:c0:1a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=823d6ad9-b430-4f74-9bee-3d62b4b1d21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:25:1c:31:6f:75:3b:5b:b7:f4:db:76:6a:af:
                    42:04:0e:0e:26:8b:0c:5d:7a:4e:5a:91:95:a4:b7:
                    12:f7:08:2f:53:6f:7c:a6:da:7e:86:7a:dd:34:2d:
                    7e:97:52:5a:ed:c9:06:25:26:c2:4e:d6:a9:73:60:
                    79:66:00:a9:49:f0:4a:7a:6f:3c:96:b5:09:18:86:
                    a7:b0:68:df:ca:af:16:3f:6f:c3:6c:46:76:16:d7:
                    d1:de:2b:24:be:79:60:5e:89:46:2e:9b:c5:1e:45:
                    f8:d9:7c:99:09:a7:6e:cd:6a:ff:02:f3:15:b2:02:
                    0c:f8:b8:26:52:c8:92:0a:e1:dd:e8:de:a3:e1:1c:
                    41:3b:c2:6b:d2:31:19:74:c2:f1:7d:fa:5c:4e:dd:
                    49:a1:67:cb:e3:0f:3f:50:9c:8d:22:19:99:1c:28:
                    5c:8f:4c:53:2c:78:1f:f9:66:74:9b:8f:04:fb:47:
                    40:dd:b7:39:ca:0a:99:0f:80:94:6d:27:af:77:c3:
                    80:eb:ac:1b:27:fe:5f:d1:fb:21:7a:e6:d9:5c:c5:
                    e2:b2:7b:eb:5f:33:ef:f2:6f:e3:7f:7b:1f:c9:e0:
                    35:bb:3c:36:35:d7:3d:ac:55:70:0c:52:e0:96:ad:
                    08:67:74:d4:9a:5e:82:88:17:74:6d:ba:d7:dd:82:
                    25:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C4:D4:9B:99:88:24:FC:78:45:61:C3:A2:95:A4:5B:95:F3:9D:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8f1b882-e1a8-3f38-bfe4-b1c34cb55299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c096::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:d0:89:35:ef:38:16:8a:ac:dd:84:e2:ad:83:7b:71:77:38:
         5d:3e:e8:2e:37:e9:11:3f:86:3a:1a:2a:58:3c:93:cd:b8:89:
         28:05:58:83:17:4d:77:c5:87:3a:2d:49:e3:9d:6d:26:ea:4a:
         65:3e:5e:0a:3d:46:aa:fb:83:40:cc:3a:ff:97:7a:41:52:d3:
         5f:6a:6e:f3:91:b5:d1:16:ad:73:f6:4e:3e:67:01:57:73:60:
         5f:4f:c1:7c:b6:10:17:e3:9a:04:cf:95:fc:34:2c:a6:10:bf:
         68:52:74:93:af:65:fb:5b:2e:71:d3:0d:c0:1d:a9:10:c4:1b:
         77:dc:f6:62:60:7e:1e:cd:4f:d5:77:de:ef:28:3e:3d:b2:d7:
         e4:e3:f8:81:94:a7:8d:f3:62:9f:45:ed:dd:92:f9:59:05:88:
         58:ec:7a:ff:a8:45:cf:fd:d3:15:6e:25:c2:a3:c8:dd:bb:ce:
         dd:e0:2d:bb:18:fb:ef:9b:86:f6:16:81:8e:95:51:ce:c2:19:
         87:eb:11:35:93:98:f9:3c:b4:4f:1e:8f:69:73:11:d8:30:17:
         88:d4:da:4c:1d:ca:ca:0d:3e:39:9f:88:04:57:18:28:f3:6d:
         c3:37:b0:42:48:29:02:e7:35:a5:a8:1a:61:d5:dd:7a:e1:92:
         2f:b2:7c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:09:20 2024 by rpki-client on console-ams.rpki-client.org