Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cb12ea4-21be-373b-aa5f-7ca112f5e1ef.roa
File:                     3cb12ea4-21be-373b-aa5f-7ca112f5e1ef.roa (raw, json)
Hash identifier:          L0aIwy1W1Q20vbJZQZ0AomZqOZXUndORwhyDIasCEfc=
Subject key identifier:   57:80:73:3E:B2:93:E3:19:13:43:FE:2D:6F:D0:23:56:B9:91:8D:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC17338CD094DAB7732200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cb12ea4-21be-373b-aa5f-7ca112f5e1ef.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33287
IP address blocks:        2001:559:35d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:17:33:8c:d0:94:da:b7:73:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=7bbf4829-19af-4463-8281-eb82d07358f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:cd:3e:4d:b4:04:c9:45:68:ac:63:4d:aa:
                    c4:cf:f9:5f:a6:42:4e:85:3a:3e:e5:24:78:04:23:
                    c7:8e:8a:7b:6f:22:97:2b:cd:91:75:d4:99:02:b5:
                    8e:dd:6f:61:59:ce:ce:79:6f:73:8d:48:59:11:3f:
                    7b:a0:a2:16:fe:90:bd:32:b2:eb:15:53:e0:98:06:
                    ad:36:d5:b3:96:8c:52:6e:67:5e:92:d3:b5:72:81:
                    5d:6c:d7:bf:3b:80:30:e8:52:d3:45:4f:06:ca:cb:
                    5e:db:7e:08:e1:d3:c4:99:a7:1a:74:c8:3d:a2:ef:
                    90:c5:7f:aa:83:b3:0f:a0:46:e7:dc:42:5c:ca:5e:
                    4d:7b:83:40:63:8e:64:5c:6f:6e:d0:7f:ed:86:9a:
                    7b:ef:2b:77:63:6d:a8:5b:d0:d2:b1:68:c8:55:63:
                    2b:77:6a:28:96:4b:37:f8:4d:ef:cb:5f:d9:47:0a:
                    a9:a2:ae:8f:0a:ae:4d:f8:cb:95:62:ff:16:76:ae:
                    72:63:5a:d5:01:52:ee:3f:fa:e1:e7:b5:b9:bf:d8:
                    fc:39:a7:ea:fe:ef:88:7c:2b:fa:09:42:c9:c4:5e:
                    e4:17:e3:94:d2:da:d0:46:a0:3b:c3:b9:90:3e:ab:
                    08:9a:9a:a7:42:eb:c1:f4:44:2c:97:38:aa:e9:33:
                    b1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:80:73:3E:B2:93:E3:19:13:43:FE:2D:6F:D0:23:56:B9:91:8D:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cb12ea4-21be-373b-aa5f-7ca112f5e1ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:35d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:da:81:7f:06:a1:de:a9:86:8b:e0:29:17:91:6a:3e:a4:03:
         7a:ee:25:a7:5f:28:d9:ef:4c:37:77:43:b6:fd:62:c1:37:d7:
         f7:1c:58:fb:da:e8:35:5c:3b:9d:7f:65:c7:76:a3:f9:b3:ee:
         26:d0:70:a2:7e:ad:95:d4:be:eb:4b:be:96:8d:12:6f:52:06:
         b2:f0:77:72:6e:6b:b9:de:22:d7:51:06:16:07:46:27:11:b0:
         e1:40:df:d1:9f:ee:25:18:ea:4b:f8:9b:c1:3a:09:72:87:3d:
         fe:57:1a:5c:45:f9:d9:0e:22:27:50:cb:50:5f:b3:2c:9b:99:
         03:fd:79:23:eb:b1:93:56:ed:60:0d:fb:c8:54:d3:d5:24:52:
         14:98:35:68:8c:48:51:dd:ca:8f:96:a2:eb:d0:99:ee:ef:a0:
         5e:db:1a:2c:07:18:b9:27:c1:31:57:41:7c:9f:2a:2a:b3:f1:
         ae:1c:96:a7:5d:f3:bc:ff:45:66:ed:8a:c8:3f:fa:dc:ac:34:
         19:fc:23:c8:2f:75:fa:2f:82:96:a4:83:40:d8:af:ef:f3:73:
         21:38:5a:52:74:26:d2:f1:af:df:bc:c5:f7:67:d7:c9:03:f1:
         08:79:bc:e3:55:2b:5f:d9:5b:b1:0c:e2:41:39:4b:05:8b:e5:
         84:f9:86:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:47:28 2024 by rpki-client on console-fra.rpki-client.org