Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a90c157-fc14-37aa-963c-37dcf2d39bea.roa
File:                     5a90c157-fc14-37aa-963c-37dcf2d39bea.roa (raw, json)
Hash identifier:          PPy5ZdaS2ZEAEyH3C8YIaCGVYOWESzT5SSB10keQcgs=
Subject key identifier:   1C:37:4A:F0:5A:27:2B:30:5D:23:90:62:7D:6D:4E:ED:D9:E3:6F:D5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAD3E84F36116482FF20150
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a90c157-fc14-37aa-963c-37dcf2d39bea.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33654
IP address blocks:        2001:559:38f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ad:3e:84:f3:61:16:48:2f:f2:01:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=f396505d-a214-4548-ba16-16a7a2c3ec7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:58:ea:7a:d9:64:02:46:af:9b:e4:f5:c1:
                    aa:bc:8a:78:56:6d:a2:5e:33:c9:2a:58:69:b3:37:
                    1a:9d:4b:b6:53:28:ae:53:b2:c0:2a:37:71:3f:36:
                    6f:83:96:7e:e8:01:e6:ae:3a:ad:a7:25:57:e9:33:
                    0d:1b:df:c1:34:11:7f:e1:2a:b9:86:21:a3:93:27:
                    ff:72:e9:46:87:f6:40:19:93:29:74:33:bb:a0:e9:
                    cd:0b:1e:1b:af:53:fd:bc:ec:c1:51:f3:aa:8f:b0:
                    57:9b:11:52:a5:c3:87:45:fb:0f:3f:23:ce:d3:fc:
                    91:88:26:90:40:36:ff:5d:ef:cc:a9:97:7c:f7:64:
                    7b:fb:77:8d:e7:01:d2:32:34:6e:77:10:15:a5:89:
                    6a:ad:bc:f8:00:8e:3b:85:c6:71:e1:df:61:60:b8:
                    6c:ba:a5:da:28:63:86:43:34:bc:97:77:0c:b4:d2:
                    24:61:2b:97:27:0c:0a:19:17:59:82:24:1b:a8:4a:
                    3d:b3:b6:92:04:af:e6:cf:4e:7f:94:3a:3d:d7:03:
                    fc:f1:7d:f2:9a:c1:5b:99:5e:b5:0c:58:5d:12:dc:
                    c8:d7:64:c4:30:98:2e:10:c0:1b:44:23:aa:f3:8e:
                    09:03:de:7a:c3:5e:38:43:d0:3a:6f:29:be:62:aa:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:37:4A:F0:5A:27:2B:30:5D:23:90:62:7D:6D:4E:ED:D9:E3:6F:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a90c157-fc14-37aa-963c-37dcf2d39bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:38f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:98:71:6e:04:35:09:35:5b:96:98:f2:ca:17:42:21:1a:3a:
         47:42:5b:f1:4d:3d:f9:4e:17:86:3f:84:76:46:ad:55:22:f5:
         b9:3f:84:08:8c:bf:4b:17:3c:91:a2:c9:3f:b6:13:fa:69:7a:
         18:f3:ac:35:60:2e:31:49:32:08:fc:1e:05:be:88:2c:4b:9b:
         78:33:ed:a5:52:b2:99:21:8c:c1:51:79:7c:7e:32:2d:7d:a2:
         34:8b:e3:bb:e3:98:64:5b:63:2a:88:b3:a9:48:7a:f2:53:b1:
         88:6e:b4:44:2a:fe:9e:a9:06:4e:4d:c8:63:88:83:39:33:df:
         64:f4:4a:98:59:bb:69:45:43:6a:24:d4:05:83:1f:66:a0:18:
         70:a4:83:5b:df:59:f1:29:ab:86:e6:f0:f2:d8:54:02:7c:ef:
         a5:a7:66:f4:2c:62:5f:98:03:64:f6:c9:7c:35:7e:ab:00:88:
         d0:23:df:91:22:c8:15:91:60:2b:65:c3:15:1f:7b:10:2c:69:
         be:ce:c8:29:78:21:56:4b:11:8c:04:fa:a4:e5:da:13:d6:4b:
         da:eb:c6:14:ec:9b:53:d8:4c:de:09:8a:74:6a:a8:32:76:85:
         3f:f0:cf:72:ce:40:dc:5e:d1:f4:46:2d:cb:2f:4d:a6:67:a4:
         21:e3:f4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:49:17 2024 by rpki-client on console-fra.rpki-client.org