Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3261af57-8c30-3a4f-854d-1267bf55d7c7.roa
File:                     3261af57-8c30-3a4f-854d-1267bf55d7c7.roa (raw, json)
Hash identifier:          0ZJ/JIpWmZQL7cwr/QyeN8VzXT1jfnhBDgDvNBxuWcI=
Subject key identifier:   6B:E3:ED:FD:7B:96:0D:6E:58:7A:15:B1:09:DE:4C:DD:E7:D8:76:00
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABD77DE048C8849AB3F548
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3261af57-8c30-3a4f-854d-1267bf55d7c7.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7015
IP address blocks:        2001:559:86fb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:d7:7d:e0:48:c8:84:9a:b3:f5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=d616af8d-8c36-46c9-a2f1-6c27c62f5164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:06:8f:67:a3:ef:81:76:99:06:6a:27:ef:30:
                    bb:0b:0b:b3:e9:12:07:a0:af:51:c0:ce:d6:cc:0c:
                    a9:f2:de:ed:e3:15:ce:4f:42:a7:b7:fb:4c:e2:c2:
                    7a:47:23:a1:c3:78:0b:96:b6:00:0d:ca:42:bc:db:
                    a0:86:e9:e5:a6:a2:71:6e:57:d2:4a:2c:a0:02:74:
                    de:8c:df:7c:2a:ac:c0:42:65:4d:37:ee:6d:bf:8e:
                    50:08:1f:1e:c9:dc:e2:1a:52:32:ff:a3:9b:54:77:
                    ff:20:bb:29:c5:85:d0:27:83:9a:68:28:08:20:4c:
                    6e:ce:0f:c8:b5:ca:97:be:7c:97:d2:cf:be:fb:75:
                    27:5a:f9:c1:5d:33:15:48:73:9d:61:6c:6a:06:d4:
                    1e:1a:c0:fd:a6:e3:36:52:9b:7e:b4:1e:9d:37:ca:
                    4d:ee:0d:67:8e:e0:8b:a2:13:cf:c0:a0:81:57:56:
                    62:2b:a1:7a:9c:64:ba:d0:84:7c:c0:96:0c:ed:5d:
                    c2:6f:31:cf:be:2c:14:92:56:54:f4:39:31:56:52:
                    54:d1:4f:20:b1:f2:0c:e4:1b:6c:22:b6:e5:8b:d9:
                    9e:a3:f5:6a:b0:76:2d:b2:10:1e:62:19:4b:b4:3d:
                    0c:49:06:87:01:d1:8b:43:a7:da:16:6e:f3:92:43:
                    70:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E3:ED:FD:7B:96:0D:6E:58:7A:15:B1:09:DE:4C:DD:E7:D8:76:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3261af57-8c30-3a4f-854d-1267bf55d7c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:86fb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:0b:3b:4f:a2:68:9b:9b:b4:ef:4a:cc:2c:4a:fd:b2:36:bd:
         9e:1f:6e:a6:f6:5e:ca:a8:ce:af:a9:bc:27:8a:de:b6:cc:fe:
         cc:40:15:e5:be:91:cf:cc:76:37:f5:ed:82:a8:ef:a2:7d:6a:
         23:ce:30:0a:bd:33:46:6c:91:df:bd:7f:03:7b:e5:8d:21:b7:
         b9:e3:7c:f9:44:b3:47:67:2c:9a:ef:10:52:90:3a:95:28:ef:
         de:f7:68:f9:0d:0c:ec:66:db:4d:ff:f4:ec:be:b8:0b:55:1a:
         9c:3f:21:35:9f:63:ad:3d:6b:d6:6d:5e:1a:68:19:41:e6:21:
         8c:81:15:03:e8:46:2e:d3:b0:e9:76:f9:6b:bb:95:cd:29:a2:
         c4:7b:45:f2:09:32:c8:b3:e5:c1:bf:38:ba:ce:0d:0d:f7:71:
         ea:80:76:a1:f5:ac:81:4a:9e:87:72:79:2e:f8:1c:db:06:19:
         df:9d:b4:69:ce:cb:47:b7:11:db:82:ec:1c:24:16:2f:24:ba:
         1b:ad:59:d1:ea:b1:27:80:c4:ae:3f:b3:6d:7c:08:d4:ff:0a:
         1a:79:30:bb:f7:d6:24:e2:e6:e4:93:88:9d:c7:e1:54:4e:e5:
         d7:ac:3d:6e:ea:6a:9d:08:09:4f:f4:e3:20:fc:4e:94:7d:66:
         60:d0:9c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:46:53 2024 by rpki-client on console-fra.rpki-client.org