Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb883528-6abd-3faa-b0dc-f2588d64b669.roa
File:                     bb883528-6abd-3faa-b0dc-f2588d64b669.roa (raw, json)
Hash identifier:          hN+hYXey2wJlDDKfK7+6GfI+3K2SBAz9kkSq8/L0Stk=
Subject key identifier:   79:17:E7:A1:FA:3B:80:DB:E1:33:41:63:D6:1F:9B:62:0D:CD:8C:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC4B417B9B216B90F6AB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb883528-6abd-3faa-b0dc-f2588d64b669.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33657
IP address blocks:        2001:559:c086::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:4b:41:7b:9b:21:6b:90:f6:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=f7679225-d2d3-4238-a3ed-68370677e3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d0:68:22:8a:bf:8f:9c:6e:11:a6:f0:9e:0e:
                    e8:32:90:56:01:24:e6:d9:30:0b:09:16:52:24:9e:
                    b4:0a:c3:4d:5b:a3:b5:dd:59:ae:86:69:8e:49:89:
                    5c:0b:d7:1e:28:ef:25:1d:0a:b7:2a:3c:07:5f:27:
                    17:b2:97:19:3b:82:a4:1b:90:d1:9a:ee:af:7f:e7:
                    64:4d:9e:14:5c:1f:c1:ca:32:64:8c:41:7b:10:be:
                    26:4c:19:54:28:97:48:08:64:17:c1:a4:ef:12:dd:
                    0f:16:f3:19:7e:c8:28:ba:9c:5c:9e:99:ae:41:4b:
                    11:68:5b:94:bf:f7:06:fc:ff:75:9d:67:5b:8f:c3:
                    39:40:78:4a:88:2b:aa:11:38:88:b0:a1:50:78:a1:
                    73:63:25:3e:a6:21:ed:f3:2d:9d:99:3f:55:d1:1e:
                    06:9b:9a:92:e8:9a:03:90:4f:1c:5f:49:88:bb:41:
                    d5:71:f0:70:df:d1:67:c1:3c:1d:b5:14:e9:3c:2c:
                    bf:6f:2d:ea:51:47:f4:58:43:d8:72:e7:35:fa:8f:
                    03:ef:48:da:af:4a:6e:2a:3a:8b:d4:f0:5d:c0:0b:
                    c9:7d:c2:d9:34:28:d5:6a:67:48:5c:bf:b5:21:6b:
                    b7:2f:d9:64:ec:66:e0:89:dc:ad:0e:a3:ba:61:51:
                    f1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:17:E7:A1:FA:3B:80:DB:E1:33:41:63:D6:1F:9B:62:0D:CD:8C:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb883528-6abd-3faa-b0dc-f2588d64b669.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c086::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:52:2b:46:52:b0:4e:bc:f9:51:f1:86:75:30:a0:10:b9:1a:
         50:13:f2:52:e0:40:86:49:57:b4:46:28:de:52:64:ec:25:60:
         72:9d:9b:e5:55:9e:51:06:f7:98:2c:6c:8c:f6:5d:0a:af:d2:
         9f:a9:80:8b:04:b9:18:0e:4b:6f:04:00:3f:d4:09:64:6e:d9:
         14:b8:36:6d:7d:c4:2f:f1:e3:24:b1:71:77:ca:59:19:f1:e1:
         64:b1:e8:fc:1e:37:b0:34:19:b3:84:bc:c1:f9:89:4a:34:4a:
         ab:61:ae:1a:3f:4e:1f:42:d2:f9:28:86:c4:8e:c2:24:be:1f:
         a8:c2:23:75:28:00:17:8b:65:58:e5:b7:de:36:37:82:c9:02:
         c9:2e:91:2c:67:38:bf:d1:b8:d6:48:53:43:39:23:ca:89:40:
         d4:75:57:8b:9a:d7:c6:17:cb:c0:0a:65:7b:6f:5b:5a:94:36:
         fc:7f:d8:68:e7:ab:9b:e5:89:d7:07:2e:86:68:43:c0:54:b4:
         7f:7e:e9:6f:65:b7:25:46:5c:00:44:f7:4d:fb:30:b9:6b:b3:
         3e:e4:61:36:72:6e:6f:56:3e:a5:5d:b8:98:7f:35:a7:81:51:
         9e:1e:d9:f1:c5:94:37:a7:74:b4:dd:81:2a:64:97:5e:d3:ee:
         1d:c8:5d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:55:19 2024 by rpki-client on console-fra.rpki-client.org