Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/049a0be3-09ec-3a7d-a166-eca7f3153464.roa
File:                     049a0be3-09ec-3a7d-a166-eca7f3153464.roa (raw, json)
Hash identifier:          hX9lUb/IzZcbSB8kgUqKIP35WS6rwJWf/HjVrh6bCYk=
Subject key identifier:   31:10:0E:18:3B:3A:D3:8D:16:CE:72:FD:5F:B8:27:65:73:2C:BD:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858458DD2876A7DBC8A16DB565840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/049a0be3-09ec-3a7d-a166-eca7f3153464.roa
Signing time:             Mon 15 Apr 2024 12:59:15 +0000
ROA not before:           Mon 15 Apr 2024 12:59:15 +0000
ROA not after:            Sun 14 Jul 2024 12:59:15 +0000
asID:                     33657
IP address blocks:        2001:559:a037::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d2:87:6a:7d:bc:8a:16:db:56:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 15 12:59:15 2024 GMT
            Not After : Jul 14 12:59:15 2024 GMT
        Subject: CN=3b8beb66-6628-4c83-badc-d5dc0c64f51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b6:c5:34:ce:9e:f2:0a:7c:98:25:df:33:b1:
                    f3:39:54:ca:ae:83:0f:af:23:cc:f2:2d:aa:8d:4a:
                    27:d7:3c:c1:d3:25:6a:4a:e9:73:11:d6:b3:69:77:
                    46:0c:e2:81:9a:51:2a:77:1f:c6:9d:07:1c:ba:4b:
                    c7:30:f2:4b:7d:a6:2b:f3:2a:0a:47:8f:73:f7:0d:
                    fe:fe:ae:84:f7:ed:bd:67:17:64:aa:b4:e5:73:22:
                    e5:41:75:65:fd:99:8e:33:fe:5f:47:ff:0a:8a:75:
                    d9:23:b8:5d:85:98:fb:9d:34:cc:4b:3e:0e:b8:39:
                    ba:2b:6b:e0:34:6a:91:60:bc:8f:10:62:26:01:16:
                    f7:de:0f:91:ad:a8:9d:af:a5:4a:97:bd:0c:0f:f2:
                    24:26:bc:dd:85:79:da:e1:15:e8:f8:ee:24:90:1f:
                    70:d0:0e:6a:b5:0a:39:4c:be:fe:2c:43:8b:d0:42:
                    20:25:31:2d:09:79:62:74:96:dd:7f:51:4c:e0:72:
                    ce:1d:41:ab:8f:48:3e:5e:63:9b:f8:e0:4e:46:ad:
                    e6:c9:29:3c:93:d2:4f:d9:92:78:75:5b:ae:e3:2f:
                    79:a3:d2:02:9c:79:7a:5e:c1:bd:db:e2:cf:29:ec:
                    f5:ec:89:1a:38:ae:01:5b:aa:35:23:16:dc:d9:d0:
                    9f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:10:0E:18:3B:3A:D3:8D:16:CE:72:FD:5F:B8:27:65:73:2C:BD:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/049a0be3-09ec-3a7d-a166-eca7f3153464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:a037::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f0:93:d3:21:72:db:10:33:77:36:ab:9e:46:3b:05:ae:1e:
         b6:9e:60:52:3e:f3:f6:69:e9:ba:e8:8a:9f:af:57:6f:30:aa:
         7b:d1:a1:81:ae:a9:64:78:9e:27:0d:ac:f0:1f:80:e8:e1:f0:
         70:f1:f0:cc:1c:8b:41:82:c3:ab:46:d7:55:44:8d:50:01:2c:
         fd:9c:39:bb:91:29:8c:d3:4b:3f:ab:ab:9b:1a:e3:01:20:83:
         f7:7e:f5:e8:56:5b:b1:e1:11:7e:a1:7d:55:5f:b2:c5:2b:4e:
         7b:ce:32:c1:83:13:d1:0e:f5:25:69:98:e4:9a:7b:c6:4a:e6:
         93:09:a6:ec:c3:98:7f:ed:84:06:a2:94:fc:93:52:8c:70:8f:
         4d:5b:c9:6b:81:44:d8:ce:10:26:18:1f:d6:80:a0:d5:b8:88:
         f2:f1:be:85:ae:4d:f7:70:81:54:66:54:f8:96:3d:04:ca:21:
         b6:5b:77:50:8c:54:e2:12:9d:99:d2:39:4b:d3:c4:e3:76:10:
         8e:dd:51:df:e4:aa:64:40:5b:59:6f:ab:ef:f3:c9:09:0a:d9:
         70:be:e2:b6:1b:e2:8e:9c:48:86:c7:8d:0d:99:10:b9:8a:b7:
         92:bd:ca:10:ce:fe:af:bb:f3:49:62:23:16:2d:08:0f:5b:68:
         80:cb:85:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:13:27 2024 by rpki-client on console-ams.rpki-client.org