Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e0e22a9-5494-360b-b634-53a5ed9cbae7.roa
File:                     8e0e22a9-5494-360b-b634-53a5ed9cbae7.roa (raw, json)
Hash identifier:          du3TU7RtDjpN9dBHpzwU+qJYPlbmiqkQZZ4UIOx/4pw=
Subject key identifier:   DD:91:FB:47:94:8C:68:6C:B9:00:93:11:4F:C0:36:E5:EE:EE:B0:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC096E46BAE3E0B09AD680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e0e22a9-5494-360b-b634-53a5ed9cbae7.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     13367
IP address blocks:        2001:559:c109::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:09:6e:46:ba:e3:e0:b0:9a:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=8026db76-a5ba-4fde-8a9b-539f05303ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:90:05:10:46:22:40:5f:33:b9:d2:ca:ac:
                    a2:7b:d0:ad:49:91:94:38:36:ee:18:3b:a0:8b:cb:
                    e7:72:41:3a:51:37:75:1e:15:c0:48:76:ef:ab:b7:
                    ac:78:f1:5f:95:b2:14:48:3f:cb:81:1c:79:87:e7:
                    38:e0:86:0e:5a:28:89:fb:f5:5d:87:43:43:ec:d4:
                    ff:c0:5a:4c:f5:63:35:e4:b4:21:a6:50:20:fe:ef:
                    71:a8:f2:6e:38:3a:a1:1e:1b:a7:ce:a9:48:ad:2b:
                    25:de:00:f5:dc:2f:0b:65:a8:d0:6a:9f:20:15:cc:
                    d8:2a:3f:c4:86:d7:c9:79:55:c0:63:80:a5:38:ec:
                    0b:36:4c:43:bb:32:a5:b7:b5:8d:79:23:e6:31:e5:
                    28:a8:6b:c5:c8:9c:d2:fd:30:ba:f5:0d:8b:f3:81:
                    ef:6f:5d:3c:f6:5e:a2:a8:2e:a2:2e:40:bc:83:06:
                    8b:e6:a7:88:83:6d:ee:f3:d7:84:91:83:25:13:8f:
                    38:53:cc:54:e9:50:41:2b:e4:54:c7:fd:28:e8:1e:
                    58:e7:f2:9f:97:3e:8b:5d:ee:b3:d6:aa:8b:0b:9d:
                    e7:1b:03:26:58:93:67:c2:69:ea:05:a6:fb:74:44:
                    93:b5:b8:07:52:8c:89:07:de:d8:48:76:1e:62:8c:
                    66:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:91:FB:47:94:8C:68:6C:B9:00:93:11:4F:C0:36:E5:EE:EE:B0:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e0e22a9-5494-360b-b634-53a5ed9cbae7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c109::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:35:ee:23:8c:c1:61:89:f4:d6:d7:f7:8d:6d:4a:5d:fa:a0:
         95:b9:34:c0:96:23:73:1c:76:6d:e0:f6:15:85:84:6e:83:f7:
         6e:30:44:bf:4f:30:34:9b:ad:cd:fa:a2:b6:fc:ed:ac:9c:88:
         dd:12:7c:41:f9:d7:c6:f4:88:5b:16:69:25:4f:82:5a:50:10:
         14:53:41:69:01:cd:89:4f:10:f5:84:3c:23:7b:84:bd:7a:d5:
         f4:00:10:0c:88:f7:d6:04:85:e9:65:36:e8:46:32:53:a4:77:
         2b:6a:dd:a5:e9:7f:ca:0c:cb:2a:08:88:dc:c7:62:2b:de:2d:
         ea:eb:ca:67:1a:8a:93:ac:e2:62:26:18:cd:f6:f2:60:df:07:
         04:e5:d5:3b:81:11:b9:19:75:b4:5d:ba:96:51:7e:e2:26:15:
         86:be:f0:4b:d1:4a:b9:89:39:74:b4:6b:d5:57:0b:aa:02:77:
         c6:3e:20:83:7b:d2:fa:be:6e:ce:e1:ed:3f:18:1e:93:2a:a8:
         af:db:a7:48:de:ed:9a:88:1a:05:a6:b5:ad:28:cd:75:c5:29:
         56:0a:8d:3e:fc:7c:7e:58:83:e2:12:38:68:55:61:8d:57:5f:
         b8:07:db:d2:c9:c4:64:1e:14:0d:a2:57:57:5a:cb:f6:62:4b:
         49:47:f6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:19:21 2024 by rpki-client on console-ams.rpki-client.org