Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a86298ce-603e-372c-ae63-7b8d4a17dbf2.roa
File:                     a86298ce-603e-372c-ae63-7b8d4a17dbf2.roa (raw, json)
Hash identifier:          kQQmtBNxnR7+r9t4zctgqm2uQVAdbCqopmunE6mWExM=
Subject key identifier:   80:D5:E3:B6:29:B5:36:FF:1D:6B:E8:8F:BE:8C:0D:EA:B1:8F:2A:75
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABDDA90CE35F9AF84FFE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a86298ce-603e-372c-ae63-7b8d4a17dbf2.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7015
IP address blocks:        2001:559:c497::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:dd:a9:0c:e3:5f:9a:f8:4f:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=477bb4d4-eb1b-46f8-9c1a-5976b41de995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c1:b3:a8:9c:f9:40:0f:6c:66:f2:bf:e0:2f:
                    b6:3d:de:bc:95:b9:a8:87:24:11:0e:67:8b:f9:69:
                    b9:65:a6:71:9b:27:1b:d8:58:73:69:52:e6:92:37:
                    1f:05:8a:f8:0a:f9:0a:4d:61:b7:eb:ef:16:d4:7c:
                    51:89:69:10:3c:6e:1a:32:b4:57:23:83:1e:d9:ad:
                    28:c1:c6:2d:8f:ec:4a:16:29:26:47:94:54:04:3f:
                    6c:06:97:3f:87:cf:73:38:40:f6:54:87:f2:b2:0c:
                    e9:68:10:6c:ce:c8:ac:1b:8c:d7:ce:26:03:7c:25:
                    9b:3b:07:7c:26:5a:1d:e0:2a:7c:b9:93:f9:33:20:
                    34:4c:c8:ce:f9:45:ad:12:a4:9a:67:fd:5b:cf:cc:
                    c5:0a:1e:0e:ff:09:fa:3d:3b:a5:ca:2d:c0:1c:bb:
                    62:0e:d1:35:e5:39:12:f4:c8:52:1a:38:7f:76:30:
                    77:2c:4c:4e:6e:9b:08:68:40:fe:89:8c:e9:8a:45:
                    c2:c4:b5:4e:0b:41:a3:11:e5:e5:12:2a:f3:06:08:
                    33:47:c1:8c:cc:96:43:0b:9a:c8:74:13:ea:82:b6:
                    55:30:67:67:2a:50:b2:be:88:10:56:7f:41:4d:7b:
                    25:49:4c:b9:e6:35:71:6d:69:a7:34:f8:fa:9f:cb:
                    e1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D5:E3:B6:29:B5:36:FF:1D:6B:E8:8F:BE:8C:0D:EA:B1:8F:2A:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a86298ce-603e-372c-ae63-7b8d4a17dbf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c497::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:d4:9a:2e:8f:d5:c0:98:b8:fe:d9:fe:68:c4:49:dc:cd:cd:
         fe:47:e1:b6:41:37:87:9a:9a:99:25:89:aa:a0:46:b8:5b:f6:
         0a:1d:eb:b6:f4:b5:c0:1d:94:6d:73:ce:4c:0f:cf:c2:48:67:
         f6:48:85:d9:19:e8:88:14:b8:a2:81:62:d8:36:b6:3a:c7:ec:
         3d:90:cc:61:3f:62:8e:75:d4:94:64:76:4c:cb:76:ef:22:3f:
         2f:54:6e:b7:68:36:7c:23:86:13:11:05:98:b1:58:43:99:71:
         e7:52:db:9d:b3:66:59:1d:93:08:3b:65:c2:12:a7:2a:05:4a:
         62:17:d3:11:28:f2:2b:52:8a:f9:55:48:02:bb:64:05:53:04:
         f4:ee:2c:e4:63:2c:40:9b:4e:ed:7d:b6:a4:6e:0b:bc:3e:a5:
         d5:ea:1f:0e:b8:f7:3b:d8:8b:10:3b:39:da:9e:e5:16:a3:97:
         6b:b3:b4:9c:38:17:0e:e4:a7:57:09:9a:41:d7:b8:e7:e6:46:
         f7:23:1b:0d:b1:35:fe:58:f4:a0:7d:8e:63:cf:40:4d:16:17:
         26:a4:1f:cd:fc:66:3c:c2:b4:7d:79:f5:98:c5:ea:74:57:b9:
         3d:8d:8c:be:e6:1a:21:44:8c:6b:30:c1:26:eb:a0:8c:50:7c:
         ee:f0:66:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:33:25 2024 by rpki-client on console-fra.rpki-client.org