Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96a94496-8817-3e8f-982e-b27e01e1d831.roa
File:                     96a94496-8817-3e8f-982e-b27e01e1d831.roa (raw, json)
Hash identifier:          iMdAYQb7/4DNCjEgEpoYttua3QuYNf50vUz3jp0MM2s=
Subject key identifier:   1B:DA:2C:B2:C8:86:53:06:3D:DA:2F:F4:EE:B3:85:DC:A8:FB:99:BB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAE7F0E42C8B3E86A6A2480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96a94496-8817-3e8f-982e-b27e01e1d831.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33651
IP address blocks:        2001:559:e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:7f:0e:42:c8:b3:e8:6a:6a:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=9f34e770-58e4-4cca-ad1a-fbe67a5cb8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f3:c8:ae:9a:78:86:9c:86:a8:99:13:67:d4:
                    8d:cc:2e:7d:d8:ed:8f:75:c8:15:2c:77:15:72:e8:
                    d5:26:54:f2:2d:f3:5c:42:14:0f:a4:57:38:88:d3:
                    81:06:f3:a3:72:b3:2b:82:e7:29:54:13:78:78:96:
                    af:30:eb:44:5e:39:53:90:ce:28:af:3d:c4:43:0d:
                    b0:b5:3d:eb:13:46:89:ed:74:ba:62:cb:75:8e:45:
                    9a:2e:4e:60:ab:7a:f9:75:6a:42:48:2c:f6:db:ec:
                    0b:44:a1:77:ca:98:b8:6c:7f:30:3e:e0:2f:f3:17:
                    02:40:49:42:7d:67:9f:d6:05:3a:05:6f:0a:57:df:
                    71:a4:4a:b9:e8:04:db:b4:5f:99:f7:5d:24:f1:72:
                    b8:6f:47:7e:9b:6e:53:e1:0b:28:23:7a:90:49:bf:
                    0e:fc:2c:7a:8e:02:a8:e4:b1:6f:a4:06:03:4f:7f:
                    1e:e9:82:38:4d:54:ae:43:24:1c:48:f9:4c:b1:a2:
                    63:fe:84:d1:80:cc:12:10:72:25:a2:c8:55:b3:3c:
                    1d:00:6e:64:ac:f4:eb:ff:30:42:56:20:54:05:30:
                    af:82:ea:20:02:98:ed:f6:c1:85:95:66:1a:9f:91:
                    00:83:21:fc:29:71:b9:23:cd:90:8e:07:84:c7:5a:
                    22:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DA:2C:B2:C8:86:53:06:3D:DA:2F:F4:EE:B3:85:DC:A8:FB:99:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96a94496-8817-3e8f-982e-b27e01e1d831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:51:b6:b5:d4:dd:2e:65:74:43:0f:27:d3:af:b6:23:6b:bd:
         d9:90:86:d5:7f:a3:58:eb:54:3e:b7:82:61:29:18:ab:26:b7:
         d3:a1:b0:1d:07:7a:d6:f4:4b:22:36:e3:62:f8:b6:0a:33:80:
         bd:c9:c6:9d:ad:20:65:93:53:db:1d:49:12:76:bc:ff:91:5f:
         f2:ce:c0:5b:5c:ac:78:18:5c:a7:cf:9f:0d:a7:b5:53:ce:72:
         12:27:00:6a:35:c0:ce:6e:52:96:60:38:17:82:4b:65:16:e8:
         e6:e2:3b:3a:75:2c:85:e7:7c:57:d0:e3:71:26:0f:3b:b7:d5:
         f2:1f:67:d4:b1:ef:ac:02:4b:8e:75:57:aa:55:32:4b:5e:8f:
         9a:65:fd:7c:8f:02:62:e4:ce:af:af:65:68:8e:2f:93:37:50:
         c0:a5:03:24:fe:f9:bd:38:de:b3:65:ab:c2:b3:1f:7e:c6:86:
         81:88:84:ce:19:3a:08:a8:96:a9:68:11:3d:65:f0:52:85:98:
         b4:df:ca:0f:29:37:ea:e5:71:d4:c2:49:c8:da:dc:f5:53:0d:
         f1:aa:d1:6c:7b:b3:a3:1f:c6:ee:0c:aa:6b:d9:78:e7:ae:bc:
         c8:ac:71:e6:5b:01:0c:7d:10:04:f1:9a:6d:55:01:18:10:33:
         11:83:eb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:54:48 2024 by rpki-client on console-ams.rpki-client.org