Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35616e60-ec09-318d-8f63-e5be738eb81a.roa
File:                     35616e60-ec09-318d-8f63-e5be738eb81a.roa (raw, json)
Hash identifier:          YM+VUc7QsXQMPWew0j5ExGdHsu5lfYOFU4GtcT3nyxc=
Subject key identifier:   FD:EF:DA:C5:5A:2A:1D:34:8A:9C:BD:1F:95:B7:EF:4C:FE:44:FF:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845A428C26CE23EB5F032467A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35616e60-ec09-318d-8f63-e5be738eb81a.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     7015
IP address blocks:        2001:559:e023::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:c2:6c:e2:3e:b5:f0:32:46:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=a1717320-7195-4701-a840-876e792073f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:28:c2:d2:6a:2b:63:a5:8d:e4:29:55:e9:f5:
                    39:10:92:dc:f0:15:90:a0:4e:5e:8c:9e:34:17:37:
                    d3:b8:3e:81:a4:07:fd:b1:ab:ba:f3:59:ca:0a:64:
                    af:da:31:3a:37:61:c4:3a:69:3c:66:75:15:03:3d:
                    1e:b4:20:f3:bb:1e:4d:63:fd:15:12:5d:b5:90:c5:
                    c1:33:f8:fb:ad:0a:10:2b:df:8d:37:ed:62:a5:8f:
                    3b:10:b1:21:7b:8f:97:25:67:1d:ae:b4:10:97:25:
                    47:c5:01:07:69:4a:e0:73:fc:5d:cc:f2:51:f8:50:
                    39:15:af:fc:01:82:65:31:ee:eb:5f:f2:05:3d:fa:
                    84:c4:23:0f:96:e2:48:7a:08:9b:1e:24:e1:30:04:
                    38:6f:75:e6:06:00:57:a7:97:a0:35:1e:aa:36:e2:
                    45:d9:5a:db:45:53:d0:a9:09:6f:d0:2c:f9:8f:28:
                    aa:94:2b:30:7f:6e:2c:89:20:b2:fc:33:0e:53:da:
                    56:d1:51:41:9c:4f:4c:d9:ba:0d:5e:27:f5:3c:bc:
                    b3:dc:e2:4b:d8:84:4d:72:52:56:ec:92:a6:28:be:
                    df:88:24:f4:51:7a:60:6c:57:a9:98:38:ad:00:71:
                    a3:83:a9:0f:33:59:2d:41:16:d7:ac:e2:c8:cd:c5:
                    db:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EF:DA:C5:5A:2A:1D:34:8A:9C:BD:1F:95:B7:EF:4C:FE:44:FF:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35616e60-ec09-318d-8f63-e5be738eb81a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:e023::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:70:32:b1:98:58:6d:ea:47:9b:86:ae:2b:97:d6:93:d0:53:
         81:11:e8:6d:d5:2f:31:bc:8e:27:2b:1d:43:a7:94:c8:7b:eb:
         af:e5:35:dc:80:f1:0e:c7:c6:c7:77:35:3f:0b:46:dc:57:64:
         cb:72:ba:f4:ba:0b:00:ca:87:ac:0e:91:bf:27:18:ea:eb:d6:
         b2:5d:ea:e0:26:23:cc:b4:f7:97:46:3c:e0:28:3f:4a:58:0f:
         30:3c:dd:8b:b9:9a:c7:b6:39:86:f1:ed:21:1b:dd:9a:da:fd:
         23:7c:3c:bf:99:33:2d:d6:cd:14:5c:7b:4d:5b:8d:5a:35:28:
         dd:d8:72:6a:c3:d5:7f:5c:5b:13:d1:2f:92:43:af:2c:b5:45:
         9f:b2:b7:3a:d7:02:48:ff:e4:4b:9d:9e:23:ae:64:48:21:94:
         20:89:7c:3e:a1:f1:98:03:76:c7:53:e8:26:66:94:fb:8d:b4:
         bf:cd:03:93:28:2c:cb:5d:92:78:83:66:e9:29:62:1b:ed:e2:
         e3:00:d7:06:78:42:e4:65:40:dc:ad:55:d8:e4:8a:30:49:ee:
         66:a1:4b:af:d6:e3:0d:e0:ee:f6:79:f8:be:e1:70:fe:67:73:
         65:30:c5:e4:56:29:b8:6c:8b:cf:e3:37:dd:b1:65:c8:84:0e:
         f7:f0:47:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:37:09 2024 by rpki-client on console-fra.rpki-client.org