Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b486102-07d8-3303-983b-69afa7ef59a1.roa
File:                     4b486102-07d8-3303-983b-69afa7ef59a1.roa (raw, json)
Hash identifier:          rqmQ/H59xkMR4eLLRIIB1ix+g5LLQVoxKXyWLxRs/GQ=
Subject key identifier:   BA:C5:9C:86:F5:EA:43:60:0C:2B:58:6B:1D:83:AC:CC:C2:8A:7E:AF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB5C23F7C2B8928CA0B4C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b486102-07d8-3303-983b-69afa7ef59a1.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7725
IP address blocks:        2001:559:c1bd::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:5c:23:f7:c2:b8:92:8c:a0:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=93789aeb-0fd4-42ad-9299-d58e8d96f25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4f:cb:da:ee:ca:8d:51:6c:91:45:f0:fd:3b:
                    4c:e6:cc:82:34:48:27:aa:0f:a3:fe:da:e6:9b:88:
                    35:fc:c2:ed:2c:a5:d0:be:91:d9:cc:bd:b6:59:64:
                    72:7a:84:31:5d:fb:19:d9:62:01:c7:70:90:94:50:
                    f6:ef:be:57:85:92:83:83:94:2a:af:92:fd:38:59:
                    f0:95:61:c6:53:24:b5:a9:b0:61:ea:e9:14:0a:e5:
                    14:89:7b:90:9c:6a:33:aa:5c:51:3c:83:21:cc:f5:
                    c5:17:b2:41:39:07:04:8e:4e:97:36:f2:28:ff:16:
                    21:e5:2c:f7:cd:77:0b:fd:6a:f0:2f:e1:b0:33:ab:
                    de:51:e3:a6:52:b1:4c:c2:a9:fd:1e:d2:25:a0:9c:
                    fd:fa:a6:96:cb:ea:a2:8b:32:e1:92:56:4a:cf:db:
                    85:1b:bd:50:96:e0:f1:e4:69:97:72:9f:67:d8:24:
                    74:b6:17:91:15:08:e0:f6:b5:d4:f8:67:96:70:3d:
                    05:6f:fb:cc:6f:86:7d:a4:69:05:09:37:85:bc:d0:
                    18:a8:4f:a8:96:1e:87:9a:29:3c:99:65:ab:cf:75:
                    ad:4d:2c:41:4c:3c:e1:00:68:04:29:d9:43:8b:bd:
                    36:5a:48:3c:98:7a:9a:ec:ea:31:9d:34:66:4a:99:
                    88:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C5:9C:86:F5:EA:43:60:0C:2B:58:6B:1D:83:AC:CC:C2:8A:7E:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b486102-07d8-3303-983b-69afa7ef59a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c1bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ec:1b:dd:67:d3:fb:ca:f2:55:c7:52:b4:97:92:ab:a5:79:
         40:30:f0:10:f1:47:53:bb:f4:07:48:54:8f:41:96:43:3d:17:
         e3:c1:f4:77:f8:06:4e:47:92:ad:33:b9:4f:08:30:c0:21:cf:
         f7:a6:fc:70:20:ed:16:04:c2:f0:07:b8:1d:bd:57:3a:19:13:
         b4:ab:8c:89:28:73:68:82:f9:7b:bb:f9:01:11:17:06:c6:9c:
         0d:aa:28:c6:99:fb:ff:95:80:83:9c:71:35:ee:8b:0f:8a:52:
         93:9f:1e:47:10:78:4d:71:ee:71:6d:9e:9f:e1:fa:b5:ba:6c:
         23:86:f1:53:34:68:36:bb:fd:cc:90:4a:93:c1:37:ef:cb:ad:
         1d:09:5d:ac:25:8f:ea:c1:a0:0f:62:ec:07:d0:16:2a:31:ea:
         30:60:83:a0:98:14:5a:be:ad:ac:91:7e:47:d2:d1:e6:fd:c2:
         57:c8:67:dd:e7:4e:1e:5b:2b:66:53:ad:f8:aa:77:ed:00:3c:
         a5:bd:62:f8:aa:ed:41:e7:03:ac:0b:37:33:b5:16:db:3b:3a:
         3c:ff:92:26:02:e5:9d:97:ce:9a:f6:83:b4:76:f9:b8:cc:fc:
         28:2d:12:e7:f0:be:0b:4e:d4:9c:31:bf:84:69:b6:3b:e4:4c:
         4d:ac:39:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:50:40 2024 by rpki-client on console-ams.rpki-client.org