Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c095866c-17c5-3757-9ca9-31b54bdc1025.roa
File:                     c095866c-17c5-3757-9ca9-31b54bdc1025.roa (raw, json)
Hash identifier:          5nXrAU3jyqnKeYpd3sfAkn3zMBN9/QGQR4AokcAbV0w=
Subject key identifier:   55:CE:1B:40:7C:6F:FD:83:8C:37:00:4C:05:C8:2C:3D:7C:C8:E2:1A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858453317F07137E5F4A122DFEF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c095866c-17c5-3757-9ca9-31b54bdc1025.roa
Signing time:             Thu 14 Mar 2024 01:00:25 +0000
ROA not before:           Thu 14 Mar 2024 01:00:25 +0000
ROA not after:            Wed 12 Jun 2024 01:00:25 +0000
asID:                     7922
IP address blocks:        2001:558:fee0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:33:17:f0:71:37:e5:f4:a1:22:df:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 14 01:00:25 2024 GMT
            Not After : Jun 12 01:00:25 2024 GMT
        Subject: CN=c41b2818-fdf7-4f29-9f43-85084418225c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b0:e5:5c:11:03:b7:e4:ca:87:ed:fa:99:c1:
                    57:76:77:29:0c:39:0a:4e:c2:7a:8c:bd:ca:aa:5b:
                    a6:8d:9f:dc:cd:ae:f1:06:df:69:1f:29:12:ce:75:
                    5b:cd:45:1d:ce:64:07:dc:ee:a4:17:eb:91:8c:2c:
                    68:31:b9:ef:e3:99:ba:20:0b:a0:54:99:d4:4f:75:
                    2c:9a:0c:40:9c:1d:88:7b:9b:14:92:3c:d1:7f:9a:
                    e7:11:a9:3d:94:44:3d:0c:dc:21:7c:df:eb:ea:7d:
                    41:b9:3a:39:ac:1f:bd:46:5e:a2:5a:d6:81:79:d1:
                    85:3c:ec:6f:ec:80:9d:10:21:6a:bc:cd:52:ea:98:
                    3e:7b:ec:7a:cf:23:7a:7a:b2:6d:ea:ae:51:08:b2:
                    33:0d:e1:eb:95:3d:3c:7b:68:29:f5:bf:43:61:4a:
                    8e:c5:5f:ef:d8:f3:8e:34:a2:cb:f5:c7:1a:b6:ed:
                    a3:69:32:2a:aa:a8:de:1e:3e:47:fd:f0:e5:e5:f8:
                    e1:4c:67:4a:68:6a:de:5e:60:27:1c:87:6e:c9:5f:
                    f1:b9:75:7d:22:0b:05:1c:22:94:ed:96:9e:16:a2:
                    80:f0:be:04:47:e7:ce:22:19:32:66:3d:5b:af:dc:
                    74:25:4c:99:33:bd:04:e7:ea:b8:b1:85:a3:36:f2:
                    20:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CE:1B:40:7C:6F:FD:83:8C:37:00:4C:05:C8:2C:3D:7C:C8:E2:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c095866c-17c5-3757-9ca9-31b54bdc1025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:558:fee0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e6:5d:12:84:08:e7:e2:a5:d8:d2:18:bd:79:7d:8a:a2:aa:
         03:9e:30:57:61:55:f1:9b:06:7b:fd:43:12:1c:38:e6:96:87:
         af:37:69:db:2e:34:27:dd:02:c3:f6:63:16:21:4a:36:a0:06:
         f9:9f:9d:60:ba:d5:42:29:4a:e5:ad:bc:ea:b8:ce:05:c2:60:
         63:63:db:9c:d9:1b:18:16:f6:7d:ea:e6:4b:85:18:66:0d:08:
         56:b4:3d:96:ec:cf:90:ea:5a:fa:b0:ec:97:44:0f:60:3a:08:
         14:fd:9e:00:10:0a:3a:b4:60:6a:40:40:71:5c:8b:36:3e:8b:
         79:f1:af:0e:28:b0:a8:85:31:5c:ac:18:3a:24:1f:d9:16:f3:
         7a:e1:0c:29:53:70:e6:64:5d:7c:79:c7:4c:06:88:b6:c0:55:
         91:ab:04:f6:83:1e:78:9c:af:0d:52:50:f7:64:c8:f5:82:61:
         51:f3:71:b6:01:ce:dc:89:dc:a3:ef:24:0e:c9:ce:71:ed:2e:
         3b:29:23:21:cb:b4:4e:10:e0:f8:32:ba:b4:12:b8:bd:38:5d:
         cf:93:e7:ed:b5:18:88:f4:37:c4:49:76:18:cf:b2:00:f3:2e:
         a8:ec:9c:b4:47:e8:63:55:5c:29:cc:82:7f:ad:64:fc:8b:e9:
         df:fb:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:03:15 2024 by rpki-client on console-ams.rpki-client.org