Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/247a272b-d5bc-38bb-bd6d-0122a68bda21.roa
File:                     247a272b-d5bc-38bb-bd6d-0122a68bda21.roa (raw, json)
Hash identifier:          /MV9Yel9XPalAXKLcbUnSAr/qlgEFq8t+IXWzuNeXuw=
Subject key identifier:   2A:F1:C5:B9:99:62:35:35:EF:C8:34:98:A4:AF:B6:49:82:A9:41:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC59370406EC2135D36200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/247a272b-d5bc-38bb-bd6d-0122a68bda21.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33659
IP address blocks:        2001:559:739::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:59:37:04:06:ec:21:35:d3:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=8f8a0df4-cd79-4e28-a5d7-2504a60c2d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b0:59:3c:dc:03:81:d0:ff:73:b6:a1:d3:e6:
                    f4:de:e7:5d:6d:e3:a9:f9:bd:0a:51:38:36:66:91:
                    af:5f:14:9d:ea:d4:ea:be:e8:9b:ce:1f:f3:fb:54:
                    f3:61:d3:7a:5f:ae:f9:08:82:47:af:67:a2:6b:c0:
                    b9:d7:90:81:79:32:f8:08:6e:d4:57:d8:55:82:43:
                    7b:24:86:47:b5:52:d6:84:e7:1d:02:cc:87:ff:3e:
                    32:db:f1:f6:06:cb:f0:44:83:59:95:db:83:0a:65:
                    d8:e0:b0:20:b5:e9:29:aa:57:06:b4:29:55:42:e4:
                    df:34:d2:70:56:1d:f6:c1:fd:93:60:62:71:19:6f:
                    10:52:70:42:26:b1:37:9c:d6:47:d7:56:13:20:13:
                    54:ce:04:7d:bf:2e:5a:36:2a:d0:c7:cf:46:0d:99:
                    45:3f:f5:25:0f:34:f9:fb:06:db:89:3e:27:8b:97:
                    e2:12:7f:4f:02:36:a2:be:b2:03:5d:bd:29:bb:92:
                    19:3b:63:7d:e8:f4:a0:16:7f:2a:c9:e6:ae:84:a0:
                    6d:85:e2:43:87:0b:23:98:91:40:07:a3:d6:03:9a:
                    30:33:95:06:60:2e:63:96:ff:fc:6e:33:59:35:d3:
                    a1:cc:61:84:97:34:99:99:8c:be:17:87:8d:c3:ef:
                    d8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F1:C5:B9:99:62:35:35:EF:C8:34:98:A4:AF:B6:49:82:A9:41:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/247a272b-d5bc-38bb-bd6d-0122a68bda21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:739::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:55:3a:f5:bb:79:ea:e5:6f:b3:cc:c4:46:5a:9a:b7:95:64:
         38:ef:a5:dd:77:23:0e:e8:0f:0d:03:c9:c7:27:3e:4a:8e:28:
         1b:e6:d4:c7:49:c5:fc:97:28:70:93:5f:ba:38:67:c7:87:93:
         37:3e:cb:46:cf:29:87:e1:6f:6f:42:c2:46:a2:85:62:aa:b6:
         59:e2:11:0e:24:d8:b0:de:57:bf:89:47:fe:c7:88:d9:97:0d:
         7d:71:70:4c:8a:f0:85:4d:5f:a5:06:a8:a3:a7:71:e7:7f:ad:
         aa:f2:97:b5:e2:ff:5e:cb:f7:b6:c4:65:e3:5b:3e:35:55:d3:
         4b:de:6d:71:19:c3:6a:47:53:71:33:95:6a:d3:5c:7f:00:f4:
         0b:cb:f4:e8:26:3d:d8:7b:a1:20:f8:f7:80:e0:8a:dd:5d:c2:
         44:cf:80:19:d2:97:b2:f4:01:6f:34:11:78:10:15:1f:ca:3f:
         dd:b7:ef:0a:9e:95:4c:e7:66:d1:2c:50:52:e4:16:5d:09:53:
         9f:ca:a4:a5:ab:e5:6d:eb:ee:3a:09:43:eb:af:57:70:47:60:
         a2:7f:14:75:8e:d3:b2:7d:3d:65:53:aa:49:8a:83:9c:d1:37:
         f8:d3:e3:ff:a9:db:19:1f:1c:3a:3e:83:3e:1d:c8:92:11:8f:
         7d:7f:4b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:36:08 2024 by rpki-client on console-fra.rpki-client.org