Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c4083ed-2559-38ee-a230-9d6a1e91e9c9.roa
File:                     2c4083ed-2559-38ee-a230-9d6a1e91e9c9.roa (raw, json)
Hash identifier:          jKmdTVzT6xJ8Lxc4hbnmewTzZ3gixCsEIYmEgGNRj8Y=
Subject key identifier:   48:67:05:EA:AC:82:D4:E4:74:7A:94:40:9C:8D:92:25:A8:6A:62:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAE67C0FEEA586662ECB980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c4083ed-2559-38ee-a230-9d6a1e91e9c9.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33650
IP address blocks:        2001:559:8147::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:67:c0:fe:ea:58:66:62:ec:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=05f40c5c-7509-4cfb-b830-c2a4fd93c533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:c3:c4:66:45:e3:2a:97:96:07:56:30:fc:
                    a7:47:b5:3b:e1:a1:b8:0c:5d:02:a1:03:88:68:48:
                    d7:4b:be:29:1e:ca:d3:ce:06:9c:71:b3:bb:82:76:
                    50:41:3d:ab:de:70:75:f4:c6:1b:28:ef:77:08:6e:
                    f7:be:cd:c1:ec:04:c2:ca:de:99:79:42:f1:13:98:
                    ac:28:e6:9f:ba:1c:05:44:df:fa:20:a8:68:6c:b7:
                    e8:20:b6:86:0c:6a:9b:ae:58:c9:52:f8:e6:2d:df:
                    33:26:15:e3:87:69:64:5c:18:bf:d5:d3:d5:ce:14:
                    a3:c6:14:0b:ed:a6:de:7b:5c:35:1a:1b:f1:17:14:
                    85:54:01:c0:14:55:22:77:b3:be:1e:4c:8c:e3:06:
                    00:91:25:a2:30:8d:c0:6c:15:ca:8b:34:54:6b:e2:
                    2c:e1:33:96:90:53:71:85:bf:f5:dd:7e:84:5a:0f:
                    c4:38:8e:4a:28:3a:f8:18:a9:f1:4e:0a:f8:1c:1f:
                    28:c6:af:9f:41:8f:f5:72:aa:ec:94:e6:d7:ce:a5:
                    05:e6:9d:f3:f3:b8:b0:1b:2b:2d:f9:f0:a6:50:56:
                    1e:df:3a:de:36:2a:7d:6e:c5:22:5f:42:54:78:5c:
                    97:e6:5f:27:52:0a:70:66:4b:1f:63:50:a7:4f:b6:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:67:05:EA:AC:82:D4:E4:74:7A:94:40:9C:8D:92:25:A8:6A:62:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2c4083ed-2559-38ee-a230-9d6a1e91e9c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8147::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:d2:64:05:7e:e7:07:b6:8a:49:9b:c9:cd:8d:3f:dc:86:60:
         73:54:59:b2:a9:4f:81:3b:87:99:f8:6b:7a:91:2d:61:de:fa:
         fb:77:17:dc:15:9b:ab:8b:32:10:69:07:bb:98:fc:c1:2c:7d:
         b5:ba:1f:05:9a:c2:4f:21:c3:40:aa:d0:56:da:22:14:19:11:
         7e:76:44:c1:2b:77:53:bb:07:6f:28:49:2f:71:6a:e7:5d:3a:
         c9:66:b5:6d:e7:ff:2d:ef:24:8f:8a:a6:a6:95:7b:8d:09:02:
         28:9a:1f:26:f8:ab:cb:92:f7:24:e8:20:72:2f:e7:89:82:ae:
         0c:c0:26:55:90:36:0b:db:74:2b:bd:7d:df:a7:b0:eb:fb:13:
         f5:6a:72:12:23:58:c7:c9:d1:ae:19:53:ec:fd:09:83:0c:57:
         97:55:d1:46:24:9a:e9:33:1c:38:31:d3:10:b0:32:ec:45:08:
         69:41:e9:c7:df:ad:fe:17:cd:51:f1:9f:51:78:c0:40:c0:07:
         97:22:91:fb:f2:b7:fe:e4:bd:ec:3c:1b:e8:0a:60:e9:93:3a:
         5a:5e:3d:cd:e6:4f:c0:56:9e:dc:59:16:31:e1:66:fa:82:92:
         99:2e:8c:2a:dd:fa:1b:a0:94:88:d4:26:25:d9:4d:fb:fb:43:
         e0:37:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:36:35 2024 by rpki-client on console-fra.rpki-client.org