Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/196d009f-8b54-3139-a970-43d11482c867.roa
File:                     196d009f-8b54-3139-a970-43d11482c867.roa (raw, json)
Hash identifier:          dzAUn2020p8gIuzWilxKr8xPYtE7OywnbmDKeu9hJSg=
Subject key identifier:   32:36:AA:DF:BC:96:47:04:4D:65:81:DF:6C:DC:6B:B0:36:72:76:17
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FADA226DAA46057EA2EDC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/196d009f-8b54-3139-a970-43d11482c867.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7016
IP address blocks:        2001:559:826e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ad:a2:26:da:a4:60:57:ea:2e:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=710eb82c-4194-4e69-a149-d2e24315486f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6d:f8:af:38:ea:98:8e:f7:f8:fd:b0:21:2c:
                    e9:bd:d8:e9:ba:93:f4:33:88:0a:cb:8e:de:30:8c:
                    6d:79:86:09:38:e0:a4:14:7d:c6:44:c0:39:09:21:
                    2b:1f:29:08:39:36:9b:1c:6a:be:a1:eb:47:ce:95:
                    03:3c:33:8d:c6:40:c2:90:fb:3d:0f:27:52:3a:cc:
                    ff:bd:27:fc:83:34:e1:e5:fa:c3:1a:2c:61:03:66:
                    d4:b8:98:cc:8b:15:62:3a:3a:dd:80:96:12:a3:bd:
                    f1:e4:18:13:88:54:7f:7a:33:76:57:a7:3c:08:d6:
                    72:d4:18:0f:e8:d0:d8:0d:c8:07:9a:74:f1:cb:b2:
                    a2:43:bb:9c:0a:3d:bd:ba:62:63:be:9c:87:71:b0:
                    88:c3:e6:15:2b:a8:1d:a3:b7:3d:68:90:c9:e9:81:
                    9d:8a:df:29:ec:ee:3c:c3:93:f2:d3:2a:d2:f1:2c:
                    a2:7e:fd:ac:f9:c1:d0:bb:b0:6c:9c:85:46:e0:38:
                    16:b6:aa:b5:65:b2:43:59:75:fd:2c:88:e1:23:59:
                    b8:39:b4:33:40:80:29:73:b4:e7:ed:0d:2a:3f:40:
                    79:dd:fa:2d:b4:d3:24:c3:c2:16:d4:77:2b:12:5d:
                    2f:5c:20:4d:a8:ce:04:7b:92:47:4f:ac:b8:e4:e8:
                    79:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:36:AA:DF:BC:96:47:04:4D:65:81:DF:6C:DC:6B:B0:36:72:76:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/196d009f-8b54-3139-a970-43d11482c867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:826e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:5e:d6:3e:ce:ee:4f:00:59:c7:4d:a9:1c:6f:5f:4e:4b:02:
         1c:24:19:6c:fb:4f:c4:43:66:14:61:45:d8:3b:76:37:38:5a:
         78:94:2a:fb:d4:0e:ee:54:0d:ab:eb:96:73:75:03:34:02:1b:
         09:6f:2c:4b:b6:65:47:3f:41:35:22:ee:a6:7d:91:89:a4:7c:
         00:b9:ae:bd:fd:16:e0:06:32:3b:e5:77:73:dc:77:41:aa:0e:
         0d:a2:c7:4d:46:d3:f4:db:7c:de:a1:58:5b:c4:7d:12:6a:12:
         de:9e:61:87:1d:7a:e9:a1:0b:40:68:4a:4f:16:b2:87:f2:af:
         05:0e:cf:9a:af:c9:bc:b4:6b:13:7f:45:04:07:4b:fb:10:c0:
         fe:5e:e0:16:d6:28:6d:ac:4a:32:a5:2a:85:c9:f7:53:05:4a:
         6c:04:b3:dc:e6:ae:44:ff:02:8d:33:6a:29:6b:d3:be:e3:02:
         84:e2:95:57:97:59:74:10:b7:9f:86:18:7f:67:82:d1:ef:a0:
         33:bb:0b:85:99:c8:7c:89:7c:46:92:21:52:68:f6:b6:88:17:
         94:07:32:4b:0c:ec:64:12:09:89:17:03:bd:fc:01:d8:62:1a:
         8d:8c:fd:b3:01:29:4e:9a:c3:4e:68:fb:05:44:21:2a:05:4e:
         91:16:74:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:14:21 2024 by rpki-client on console-ams.rpki-client.org