Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75dcd1c0-b5bd-3c2b-869b-4723180cceee.roa
File:                     75dcd1c0-b5bd-3c2b-869b-4723180cceee.roa (raw, json)
Hash identifier:          CTrwjIsC9/X6m8U12/ZH7LjRX1mXUUBY4dgPH86GS3Y=
Subject key identifier:   CA:3C:12:C2:8F:70:22:29:D5:58:5F:EA:C8:7E:B8:A2:E3:60:8A:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FB02AADA5996F59614D7100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75dcd1c0-b5bd-3c2b-869b-4723180cceee.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33491
IP address blocks:        2001:559:8619::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:b0:2a:ad:a5:99:6f:59:61:4d:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=e98812b1-3215-49cb-89a6-8ff5b6599178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:76:d8:60:20:fc:f0:0b:5a:4b:1f:4f:bd:68:
                    8c:0d:d8:c5:69:84:8a:48:b4:c7:69:78:f2:fd:5b:
                    25:7c:82:4d:f9:56:71:06:73:be:9e:c4:1d:13:75:
                    86:a4:a4:5d:b7:32:f3:b1:2c:94:06:b4:bf:5f:df:
                    ce:43:9a:99:c3:86:75:97:25:2a:84:87:a3:f2:9a:
                    fe:87:61:4b:37:0d:cc:a1:61:13:f9:40:b5:96:be:
                    49:a5:d7:81:2d:2b:fd:3d:d0:21:e8:48:09:6a:ae:
                    97:98:e9:53:f1:dd:dd:20:8d:c3:9a:c8:29:05:83:
                    f3:00:36:80:41:64:64:68:a5:3d:24:09:67:2d:0b:
                    67:5f:b4:43:00:62:00:cc:f6:c9:b1:2d:7d:fd:9e:
                    da:ed:21:a6:f3:db:1d:b0:b3:8c:76:b2:fb:10:b2:
                    a1:6f:53:07:bd:bb:69:a2:88:68:32:b1:ec:16:74:
                    52:ca:f2:c8:e5:f4:6a:3b:3e:eb:b8:f2:bf:61:39:
                    bc:14:67:12:93:4b:75:9f:6f:8e:12:cb:63:e8:d3:
                    ce:59:08:62:66:f4:44:a1:39:93:a0:0a:89:41:6a:
                    37:63:cd:d3:ad:a2:18:91:ae:14:46:3f:24:79:78:
                    ee:5c:8e:13:34:fa:7d:d1:43:48:1c:97:7d:a6:6a:
                    9c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3C:12:C2:8F:70:22:29:D5:58:5F:EA:C8:7E:B8:A2:E3:60:8A:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75dcd1c0-b5bd-3c2b-869b-4723180cceee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8619::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:42:ec:5c:6c:5d:7c:26:f4:53:66:8d:1b:82:f4:01:7d:51:
         a1:26:b1:d8:d4:23:8f:42:e4:38:13:6b:7d:7a:d2:3a:39:32:
         db:2c:d5:2e:cb:0b:38:2d:94:84:25:b0:2d:e2:8f:b1:1c:f6:
         f9:fb:4e:b1:0e:a9:43:00:53:5c:22:fd:13:83:2c:20:f2:90:
         e7:cd:5b:f2:9c:53:4a:cf:b0:e3:d5:1e:8b:b7:1c:57:61:8e:
         f7:fc:9d:c5:f9:66:cd:36:e4:7f:d4:b4:c4:1f:99:70:36:a2:
         c0:bc:b1:e5:9f:dc:f8:74:2c:6f:5c:d2:34:35:ca:9d:36:0f:
         fd:fe:c0:67:b5:0f:ef:53:69:91:32:e4:9b:d9:f3:4e:dd:44:
         cb:2c:5e:6f:94:f0:f5:49:99:7e:32:ce:53:60:63:3c:e3:f9:
         39:ad:12:03:6b:1b:85:10:5d:e4:e3:53:5d:aa:ae:92:99:93:
         52:db:95:4c:0b:df:82:75:c5:bc:db:d4:a8:ff:96:b1:bc:2c:
         b3:8e:b1:df:38:9f:7c:f2:fe:fc:7c:cb:aa:64:23:b9:23:b9:
         5e:3d:d2:ec:77:8b:05:b1:4c:eb:3a:be:48:63:16:f1:ab:63:
         5c:21:19:76:ef:a2:ff:0b:ae:68:9b:f3:43:42:0a:26:ce:d3:
         8c:a2:da:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:18:18 2024 by rpki-client on console-ams.rpki-client.org