Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/904348ce-1c4c-3ce7-b04b-b0a4bf9a5932.roa
File:                     904348ce-1c4c-3ce7-b04b-b0a4bf9a5932.roa (raw, json)
Hash identifier:          Q0w75ng7BLwt7KyhxOH+xYe3n8I9hU4fdNMzk0yHwSM=
Subject key identifier:   06:33:B1:BD:65:8C:86:89:E8:EC:25:4B:6A:10:C9:10:43:D3:D6:94
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAEE320DE440EC34EF352A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/904348ce-1c4c-3ce7-b04b-b0a4bf9a5932.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33662
IP address blocks:        2001:559:c236::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:e3:20:de:44:0e:c3:4e:f3:52:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=0674485a-26be-4662-b1cd-4f7df9ee3767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:22:cc:08:76:5d:dc:e5:ae:74:89:26:91:da:
                    a5:6e:84:73:60:b0:8e:68:f7:fb:e3:b8:ef:3a:5d:
                    1a:8e:02:bc:bf:8f:dc:bb:42:6b:62:64:e1:65:48:
                    4d:c6:4f:9f:49:8d:83:3d:00:df:d2:ea:57:17:92:
                    e4:b6:52:aa:fa:2f:66:1f:8b:99:9b:7f:22:38:35:
                    99:9d:02:1f:2e:47:ae:69:83:98:21:a4:43:53:03:
                    80:d4:aa:1c:11:d0:50:ea:fb:8c:43:50:4e:e6:56:
                    f7:a4:3d:c6:4c:7c:64:6e:69:a7:a0:78:88:6b:d4:
                    3f:9e:5b:58:4a:ed:8a:f4:77:ce:f3:3f:17:81:66:
                    18:52:b0:c7:ec:de:b9:e2:28:7c:35:34:71:10:94:
                    aa:61:e6:58:55:af:51:37:80:b6:81:a9:5b:ca:9f:
                    a6:58:42:91:55:28:38:a5:34:91:c0:bf:8e:f0:4c:
                    9e:22:67:19:fd:c8:5e:21:0e:9e:50:96:1d:c6:5a:
                    62:ea:e5:03:e9:bf:9d:1c:97:93:49:94:64:f0:74:
                    95:05:66:ce:86:54:14:12:1b:2b:d8:5b:45:36:bc:
                    7b:92:00:d6:1a:e2:d2:80:15:f2:e7:ca:24:8a:2f:
                    d3:69:1c:90:0c:8c:4b:99:4c:8c:78:a8:2c:2b:cb:
                    8d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:33:B1:BD:65:8C:86:89:E8:EC:25:4B:6A:10:C9:10:43:D3:D6:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/904348ce-1c4c-3ce7-b04b-b0a4bf9a5932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c236::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:4b:80:f3:78:17:6b:54:7d:b7:68:07:c0:fe:aa:a7:51:b4:
         48:7a:6a:db:21:c6:e5:d4:27:39:dd:a8:2d:ce:d4:16:69:8d:
         3b:0b:68:68:8e:ba:ce:c3:ce:da:c2:f7:dd:de:b2:83:b8:63:
         41:46:9a:05:a0:17:0e:0a:5b:d1:45:c3:91:02:79:7e:49:be:
         c8:e3:2e:f7:38:38:f3:36:fb:d1:95:40:4d:1d:48:be:99:73:
         be:de:f5:ab:b1:06:0a:09:ee:44:83:44:ff:f0:8a:84:eb:69:
         89:f2:0b:08:bf:b3:5e:6f:59:9e:74:f6:be:07:af:0c:97:e2:
         31:49:6b:fc:12:3d:51:dd:9b:44:ae:03:05:0e:2b:18:ea:ba:
         82:b3:bd:7d:2a:bc:2c:36:29:0a:12:de:a6:bf:51:a7:49:d9:
         7b:b8:c9:56:39:8c:82:1b:9c:44:50:83:9a:d2:0f:d8:a0:3a:
         62:bf:c8:a3:bd:7d:18:53:4e:27:06:47:c2:f0:69:be:4d:3a:
         36:e8:37:0e:bd:7a:15:c2:c2:5d:ef:a0:53:15:96:92:b2:fb:
         42:db:80:e0:fb:0e:22:60:70:b6:c0:c5:c7:d3:33:8e:5f:60:
         c4:91:11:84:df:2f:ca:ee:ea:62:07:41:0e:e9:9a:41:1b:15:
         a6:d4:cb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:19:56 2024 by rpki-client on console-ams.rpki-client.org