Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a24f4f69-e9c6-3d2e-9319-dc9a1e233036.roa
File:                     a24f4f69-e9c6-3d2e-9319-dc9a1e233036.roa (raw, json)
Hash identifier:          2iBcAlI9Ad82MH6oGh9Pp3QThSboywuH94kICEEPUbE=
Subject key identifier:   B5:E4:50:FB:21:07:EA:06:48:AC:CE:D2:E0:66:37:BA:0A:20:3D:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAE2A59295A972287780F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a24f4f69-e9c6-3d2e-9319-dc9a1e233036.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22258
IP address blocks:        2001:559:442::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:2a:59:29:5a:97:22:87:78:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=53ef31c0-0838-43e4-9b8d-547a079e3a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ce:61:47:5c:d9:72:3d:5b:7a:36:ab:00:e1:
                    e2:3e:83:0d:9e:9c:01:c9:da:72:94:cc:3d:cb:5e:
                    49:f9:e3:2d:2f:f3:c4:3e:75:f5:44:58:83:98:97:
                    2f:a3:50:51:6b:1d:ab:f1:89:4e:03:62:bf:ed:db:
                    fe:8d:22:1c:e0:2b:90:5c:9d:4d:be:07:ed:6d:77:
                    1c:54:ee:b5:d7:ab:2d:79:6b:0f:be:d5:ad:a2:39:
                    c3:07:ce:b6:08:67:b2:d4:46:58:0b:96:74:37:45:
                    36:20:7c:a9:19:2d:25:a4:6e:aa:68:4e:a6:d5:b7:
                    a1:ad:39:e8:1e:c7:a1:18:c0:b7:c0:44:8d:ce:cf:
                    e8:34:1b:4e:9d:66:3a:c9:38:1c:a3:63:7b:74:ca:
                    54:88:4d:1e:b2:1d:d1:ff:87:d7:2b:e2:5d:83:1c:
                    b6:f1:95:e7:ff:aa:12:51:12:c6:09:6e:9a:42:71:
                    7b:38:30:b7:61:04:39:a9:a8:5f:ad:05:48:65:c3:
                    34:06:60:13:de:15:20:17:16:4c:c8:63:07:4c:83:
                    e8:d9:67:51:fb:be:81:cf:43:bb:db:cb:66:a5:5f:
                    88:71:03:f8:ea:61:87:ba:8c:f3:8d:fd:39:b3:34:
                    30:9c:86:6f:2c:d2:26:82:d3:5f:bf:e1:6b:1b:10:
                    a0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E4:50:FB:21:07:EA:06:48:AC:CE:D2:E0:66:37:BA:0A:20:3D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a24f4f69-e9c6-3d2e-9319-dc9a1e233036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:442::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:1d:b1:65:34:d0:c8:35:f7:95:ce:e3:b1:55:33:20:46:9a:
         ff:0c:9d:4d:77:6d:ab:c8:70:77:2c:5a:07:59:40:74:24:25:
         54:a7:96:45:30:ba:ba:79:b3:73:bc:e3:07:0c:2e:fd:96:84:
         6d:69:29:35:44:92:b2:a4:a9:0d:c9:db:d1:3f:4f:61:37:b3:
         52:84:57:1f:77:21:34:ad:d6:fe:19:54:e8:65:d1:8f:80:9e:
         73:57:b2:4c:65:d4:c7:a5:a5:67:63:ba:d9:b8:9a:46:15:b2:
         9e:b0:b9:62:fc:e3:1a:a5:af:d6:29:42:79:aa:0d:3e:10:9e:
         5c:27:b3:25:fc:f7:18:11:e2:12:63:08:dc:6f:8d:fc:d3:85:
         6e:b2:ea:4c:39:23:1c:33:15:b7:62:a2:29:04:a0:b6:e9:7a:
         24:4a:83:08:8e:d4:fb:89:b6:52:3e:80:c5:17:cd:40:43:77:
         ab:f4:75:88:4a:7c:3c:e3:02:7f:18:a9:4c:56:86:0b:4b:46:
         58:ae:53:a2:c1:ec:b9:5a:b7:17:7c:f4:09:80:53:1d:72:e9:
         b2:cb:71:e7:9c:5a:64:23:3f:40:7d:cc:ed:52:94:7d:b9:19:
         67:2f:98:78:88:82:f4:63:5f:1b:c1:5b:ca:d8:b0:60:5a:a7:
         4d:23:c6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:20:16 2024 by rpki-client on console-ams.rpki-client.org