Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e24b93e-de0c-352e-9d85-d815ddc53476.roa
File:                     0e24b93e-de0c-352e-9d85-d815ddc53476.roa (raw, json)
Hash identifier:          Ota+JNoio8PbbW37jeKWCFV+KjWXDrC2vlFpUrOtGxI=
Subject key identifier:   D0:62:67:47:52:29:C0:4D:C8:D3:95:FD:45:FD:48:F6:41:D3:B0:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC143B8D946DE8A7B80C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e24b93e-de0c-352e-9d85-d815ddc53476.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33287
IP address blocks:        2001:559:30::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:14:3b:8d:94:6d:e8:a7:b8:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=ff4b7cd2-f963-4305-b768-867b3c878469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:40:2d:10:6f:d9:15:50:6c:35:18:e4:48:b3:
                    6b:c6:c7:d2:26:10:72:1a:61:1c:c9:13:c0:08:b2:
                    cb:8c:00:a2:26:9e:02:5f:9f:36:2d:a2:d6:3b:86:
                    70:fc:bc:c9:b4:1f:2c:86:3b:30:ec:a2:f8:cb:48:
                    d8:c6:6d:5b:fd:f5:f9:38:54:20:bb:1d:86:93:87:
                    e0:41:7f:be:f2:23:a5:f0:6f:70:6e:f1:14:6b:67:
                    aa:35:ba:c9:df:eb:e2:8b:66:0d:8c:bb:b1:b5:c8:
                    00:53:0a:ab:1a:c2:56:0b:cb:74:cd:3b:22:cf:b0:
                    df:69:f1:e6:38:79:e4:2e:7f:2b:8f:86:27:6d:d3:
                    b0:85:02:c1:b8:ce:72:fd:54:78:96:ee:95:53:be:
                    82:a6:77:86:19:8d:45:f5:bf:bd:72:ed:68:b6:70:
                    b9:50:f6:18:2b:07:7e:4c:1f:0b:43:ff:de:92:50:
                    60:29:99:7f:d6:d3:62:ad:42:45:6c:c2:a3:be:d8:
                    e0:4a:5d:0a:a3:72:1f:6f:c7:78:f3:a0:ff:45:50:
                    b7:7f:ab:28:93:4a:6f:be:16:7d:87:05:0c:79:08:
                    d4:75:47:12:12:9a:31:cb:ba:fc:92:b8:f8:6b:7d:
                    b9:81:2a:5e:f1:bb:8f:9f:9d:38:ed:06:7a:de:84:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:62:67:47:52:29:C0:4D:C8:D3:95:FD:45:FD:48:F6:41:D3:B0:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e24b93e-de0c-352e-9d85-d815ddc53476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b4:32:73:02:ad:18:b6:f8:7a:eb:17:95:fe:7a:34:f4:6f:
         11:ed:10:72:4c:31:2e:52:1f:0c:ba:72:18:c0:92:86:cc:c3:
         56:56:38:15:c5:00:9e:aa:ac:8d:c5:ab:60:20:d9:3f:54:c8:
         c9:40:84:bf:1f:22:a3:23:be:d5:e0:9c:fc:58:4a:0d:7e:12:
         fb:42:dd:21:bb:50:5a:79:7f:95:f1:36:96:cc:2a:51:16:28:
         36:07:fb:a3:22:d9:d6:dd:1d:15:68:f4:a6:4b:71:e1:92:bb:
         3a:df:32:da:58:6f:a2:3e:16:af:49:63:da:4b:5c:12:b6:5f:
         f9:a0:fc:ec:98:e7:a0:3c:99:c1:c3:bf:b9:39:a2:7e:96:b0:
         2a:1e:c0:97:92:56:c6:1b:7b:93:84:81:9b:95:14:a2:b2:66:
         c7:84:fd:00:2e:91:3c:b7:f5:5d:0c:e9:c9:48:04:ae:be:1c:
         6d:de:e1:97:0c:ad:58:7b:67:96:6b:a6:74:47:ec:6a:f6:1c:
         30:52:90:14:c6:79:02:da:f4:cd:8c:6b:e5:02:2d:56:00:62:
         74:a1:2e:19:5a:9a:ff:73:2d:f1:0f:87:c1:53:c3:da:68:19:
         5f:ad:e3:e6:e1:c6:73:6a:2f:53:fa:55:90:9b:5d:ad:26:ce:
         0f:88:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:13:51 2024 by rpki-client on console-ams.rpki-client.org