Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcd6489a-ce66-3c7d-a836-a6d40cf89ccd.roa
File:                     bcd6489a-ce66-3c7d-a836-a6d40cf89ccd.roa (raw, json)
Hash identifier:          oblDTLkJFfBxbsiWHFri6h2rkbr4OjcnHsah1HkW3R4=
Subject key identifier:   D3:E0:B3:FE:C5:72:41:30:33:F8:95:AF:CB:E1:87:62:33:12:15:58
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858450E0AB10EFB23CEF872E6C6C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcd6489a-ce66-3c7d-a836-a6d40cf89ccd.roa
Signing time:             Thu 29 Feb 2024 18:28:56 +0000
ROA not before:           Thu 29 Feb 2024 18:28:56 +0000
ROA not after:            Wed 29 May 2024 17:28:56 +0000
asID:                     7725
IP address blocks:        2001:559:201d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:0a:b1:0e:fb:23:ce:f8:72:e6:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 29 18:28:56 2024 GMT
            Not After : May 29 17:28:56 2024 GMT
        Subject: CN=a9ca6795-ccce-4298-a65e-bb4568614913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e1:95:6d:bf:ca:ae:98:86:fc:58:ba:ba:44:
                    44:0b:4e:6a:c5:8b:74:24:76:5a:bf:0b:39:17:12:
                    5e:bd:9c:69:36:d2:02:1d:86:e5:ed:09:9a:fc:25:
                    ea:90:96:8e:54:ba:63:1d:e3:1d:5f:c2:5d:43:20:
                    9a:17:d4:8a:64:18:27:0e:e3:b4:fe:e2:d7:2c:b1:
                    d8:be:f7:78:ba:f7:93:04:f5:8a:e8:ad:8a:f2:5d:
                    c6:1d:4a:76:24:4a:20:f5:c4:24:89:dc:a4:f4:49:
                    54:ba:e6:0a:98:f7:53:7e:e6:eb:21:e5:0c:1c:f3:
                    3a:91:be:24:76:00:87:e4:8a:38:c2:1a:ea:3a:b6:
                    bd:3b:34:31:8c:fc:7a:17:55:23:3d:2e:1e:9f:fb:
                    be:be:22:e9:6e:ec:5d:97:59:9b:40:e0:89:88:a9:
                    ad:ea:c8:ae:83:3b:05:5c:d1:95:78:c2:cd:8e:4a:
                    e1:e7:90:c2:a7:86:b5:90:2b:b2:24:f4:8d:03:8a:
                    d4:19:a3:23:cc:58:09:f1:51:4a:40:fb:7b:56:92:
                    a2:20:a9:be:fc:d8:b6:3f:70:53:a5:cd:c5:1e:e5:
                    30:60:be:20:6a:f6:5b:c6:86:ea:e7:c0:2c:7b:5d:
                    6b:13:68:f3:40:d0:e7:fe:89:19:71:24:8e:c6:f5:
                    c0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E0:B3:FE:C5:72:41:30:33:F8:95:AF:CB:E1:87:62:33:12:15:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bcd6489a-ce66-3c7d-a836-a6d40cf89ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:201d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:fd:18:fd:b0:75:2e:5d:20:2d:22:6d:39:81:96:cc:7f:33:
         c7:06:6f:17:a7:59:55:40:c7:a2:30:58:bb:c1:65:36:8e:3a:
         c1:3b:ce:aa:d1:56:04:8c:bc:c2:8d:72:7b:c7:9c:c6:38:4c:
         b8:f8:f1:b0:03:91:cf:c6:7c:7b:e1:8d:64:29:6a:e7:c6:66:
         ba:7e:0d:43:2f:50:b4:42:99:be:e1:86:0e:c6:48:ac:02:b5:
         6d:90:fb:12:12:6f:fe:a6:dd:72:15:bd:30:fa:7a:54:c3:d5:
         73:00:92:c0:a4:56:81:10:9b:68:e0:c9:d8:7a:b5:64:0e:a6:
         cc:c6:30:3c:67:77:a6:94:90:c3:a9:4a:d7:d5:48:b6:51:25:
         b0:8f:e1:71:8e:bc:85:db:39:49:26:e7:4f:c1:57:2b:2e:72:
         aa:5b:66:6a:32:53:d8:7d:6a:f0:3b:cf:79:4f:5f:c8:80:6b:
         87:fe:98:7a:41:c6:95:1c:1f:58:56:b4:e6:d4:b9:4b:ed:80:
         1d:c9:c0:a7:2d:da:26:bd:a1:1d:34:24:1d:04:b3:63:38:74:
         48:94:31:af:2a:43:1f:16:45:d7:d6:55:13:9f:22:83:ea:37:
         f2:94:1c:c1:6c:11:11:43:d1:b7:b4:4d:25:68:04:a0:46:67:
         b3:c5:ef:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:45:45 2024 by rpki-client on console-fra.rpki-client.org