Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7df18923-985f-3307-9ccb-a2c30c304c4d.roa
File:                     7df18923-985f-3307-9ccb-a2c30c304c4d.roa (raw, json)
Hash identifier:          r6wG2akQupjBT7QHiTMTI8zyD9Cjgobj8FU1vUV+3n8=
Subject key identifier:   AA:76:69:1D:2C:2A:A0:8A:53:CA:80:FC:17:23:D3:72:03:9B:91:5A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAF3B1257A819042B386D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7df18923-985f-3307-9ccb-a2c30c304c4d.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7015
IP address blocks:        2001:559:528::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:3b:12:57:a8:19:04:2b:38:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=d744e159-04ac-4ee7-979e-018f59e25756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:96:d6:d3:ce:55:68:2f:9f:f1:b3:95:e7:6b:
                    20:4c:f4:9b:00:8f:9a:6d:ea:a3:a3:8a:3b:fa:ce:
                    32:5e:12:93:14:a4:51:6c:5a:34:be:e5:21:f1:b2:
                    3c:90:14:5d:e0:c7:7c:a0:51:75:8b:7c:c3:a4:b4:
                    e1:d2:a7:1d:e5:7b:10:cf:9e:d2:c5:91:61:56:51:
                    b3:97:14:7d:30:e8:14:54:e1:c8:47:3a:1a:e2:22:
                    db:35:c6:9e:2a:1e:1b:47:e6:72:7e:8c:17:41:42:
                    41:15:2e:37:1f:40:14:4d:70:43:9e:35:89:29:a5:
                    af:dd:af:60:0b:04:9e:8b:78:72:0a:ec:1d:fd:c8:
                    98:6f:91:b6:11:1c:67:0f:c5:bf:2f:59:37:86:3a:
                    44:0c:a0:f7:c8:8f:76:27:fd:f4:ee:74:75:d4:cf:
                    17:88:fb:75:62:09:8a:45:cf:72:19:6d:4d:fd:2b:
                    8b:42:36:4a:d1:c0:52:8f:5f:c9:59:49:7a:c2:6c:
                    7f:20:22:ba:dd:13:ad:90:8d:a7:cf:d6:82:f3:9f:
                    2c:57:de:d3:ca:3c:eb:a3:23:68:52:7c:b6:28:5d:
                    b4:41:e0:75:9c:da:66:5a:6c:eb:6f:0b:6f:eb:1c:
                    0d:c9:36:a8:a1:62:2d:62:a0:2c:19:13:a2:b7:7c:
                    1e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:76:69:1D:2C:2A:A0:8A:53:CA:80:FC:17:23:D3:72:03:9B:91:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7df18923-985f-3307-9ccb-a2c30c304c4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:528::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:97:a2:ac:96:9c:df:ad:40:54:44:82:eb:78:b1:9b:56:67:
         e7:8e:67:a6:73:eb:1f:bc:9f:85:cf:2e:ed:ec:8c:74:5a:6b:
         e0:83:06:d7:97:de:1b:1b:da:45:41:a1:d8:8d:92:89:8e:ca:
         f4:76:d2:1e:0d:84:07:75:ff:85:54:e4:c7:4c:65:29:02:10:
         32:2f:60:fd:2b:eb:6c:03:8b:ed:7e:f9:09:5d:19:00:0f:11:
         1c:0b:e4:36:07:f2:6a:c2:66:10:cc:d8:2e:c1:61:7f:35:f3:
         78:25:a2:d8:57:b9:ce:30:5c:78:f2:ce:0d:e8:42:6a:43:ec:
         d1:34:63:96:11:85:c2:a4:35:1e:81:80:a2:b5:f3:77:67:b3:
         68:d5:a3:07:71:3f:26:0e:5b:bd:de:15:76:24:e2:95:f2:e2:
         71:22:7b:bb:d3:5f:bb:43:6f:c2:29:46:61:fa:75:28:cd:d0:
         a3:42:93:1c:a7:b7:1a:1f:75:54:f1:38:bc:26:4f:c6:f5:93:
         9d:5b:25:78:1c:86:bc:bb:45:f9:2c:3f:3c:05:70:d1:14:06:
         29:63:87:40:a9:f2:9e:3f:e2:58:99:e0:f2:f9:42:1a:33:55:
         03:4b:72:5a:29:67:c1:ab:06:1e:25:a7:31:6d:e2:de:ef:aa:
         ae:f8:64:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:30:45 2024 by rpki-client on console-fra.rpki-client.org