Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40f6ca4c-783a-35f1-b795-4f249c34bf04.roa
File:                     40f6ca4c-783a-35f1-b795-4f249c34bf04.roa (raw, json)
Hash identifier:          8mBqsEQaRpZFA9UTthag4ZYPTAiZCZEqvOrydRZQtiw=
Subject key identifier:   DD:5F:C9:AA:82:8D:DD:89:D5:52:01:FB:AE:D5:28:C6:76:9D:9A:45
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC331D8E9C480477465400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40f6ca4c-783a-35f1-b795-4f249c34bf04.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33491
IP address blocks:        2001:559:39e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:33:1d:8e:9c:48:04:77:46:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=51453739-7d0b-48b1-87a8-13e3778fb9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:69:4f:1d:4d:86:a2:34:36:f7:ee:fa:61:
                    3d:ba:2e:37:ee:74:44:a6:c7:01:d9:b1:86:2c:6b:
                    3e:7a:40:e5:25:d2:17:d7:b5:d3:13:86:01:3f:6b:
                    e4:fa:66:fd:1f:e8:05:88:ac:0b:26:20:91:63:3a:
                    bd:f5:db:10:01:a6:27:f6:3f:3b:c6:13:03:8e:a0:
                    35:33:a0:b0:dc:e6:b2:9c:27:93:23:9b:fd:aa:bb:
                    64:ab:c2:46:e4:cf:d1:78:b1:f5:e5:29:52:c2:f6:
                    1c:a0:97:04:30:69:c3:54:22:2b:c3:13:b3:93:96:
                    e9:12:42:c7:45:30:ea:15:bd:13:58:4c:a7:f5:9f:
                    72:12:a9:a5:1b:4d:b3:b5:a8:b7:57:88:41:c5:a2:
                    60:d9:3b:65:1f:0a:3d:e2:c2:06:59:f9:bb:a8:1a:
                    db:a3:bc:e2:ab:48:b2:d5:fc:31:1f:8d:ee:ba:4b:
                    6e:74:d7:75:31:d4:85:90:86:85:51:06:36:b7:29:
                    bb:53:1a:a1:c1:17:74:b3:f0:b9:b7:28:cb:0a:8d:
                    5e:66:77:c9:e2:ca:e0:f3:de:38:29:b2:59:97:1e:
                    80:f7:6f:f1:33:ba:73:48:1f:03:6d:b3:64:cd:64:
                    28:4d:35:6d:ce:f8:a4:bd:14:b1:68:11:cd:8a:f2:
                    5f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5F:C9:AA:82:8D:DD:89:D5:52:01:FB:AE:D5:28:C6:76:9D:9A:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40f6ca4c-783a-35f1-b795-4f249c34bf04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:39e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:fe:02:18:f2:14:1a:16:23:d0:28:f1:57:22:c7:de:b5:09:
         fd:ff:9b:11:a8:03:cc:01:55:67:c2:a3:23:3c:e2:71:f7:cd:
         22:e9:9d:d1:10:47:56:f8:ed:b9:1d:c5:17:26:e9:70:2e:b6:
         e7:96:b3:1c:5f:02:c3:c1:b4:bc:d9:e3:85:22:00:d4:e0:36:
         28:84:e6:66:00:21:0b:56:66:63:13:89:49:92:6b:3c:64:9c:
         d6:68:b0:a0:ef:e5:05:e7:0d:06:af:05:4d:61:7b:49:ee:0d:
         3f:30:a4:61:5b:07:4d:e5:94:ee:f9:db:3b:72:ee:a7:92:d0:
         7d:4a:19:61:8f:97:ba:5a:04:7b:e0:3e:3f:3d:74:4d:94:ed:
         28:51:f3:b2:69:f1:35:75:5a:48:e7:b4:25:ec:e6:44:b7:42:
         3e:8e:64:ad:ed:22:f6:10:fe:36:8b:d5:ce:1f:1c:04:75:4c:
         ba:cb:d3:28:27:12:db:0f:61:12:8c:b2:c7:f7:00:1c:b4:92:
         46:d8:a0:c6:a3:ca:21:c6:67:cb:d0:c7:ea:91:9e:b5:72:a5:
         c0:c7:f9:f3:19:3c:c6:00:1f:de:44:03:5c:4c:0a:ee:c0:5f:
         15:7a:5f:c1:b8:35:6c:85:f1:32:4a:c2:63:1c:a9:93:e2:8d:
         86:10:f7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:37:50 2024 by rpki-client on console-fra.rpki-client.org