Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2ef0f8e-5a5a-3d2b-a88c-db0a45348c0d.roa
File:                     c2ef0f8e-5a5a-3d2b-a88c-db0a45348c0d.roa (raw, json)
Hash identifier:          8r8UdYGhLDjtd1MECZi4b3+r5QDgkcdjBcJnGxsvXYc=
Subject key identifier:   56:78:DC:B0:8B:CF:3B:2B:1D:B6:34:3A:CA:A5:E2:E8:A7:7F:54:F3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584235CCB80460046CECC8DD5480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2ef0f8e-5a5a-3d2b-a88c-db0a45348c0d.roa
Signing time:             Mon 12 Jun 2023 12:00:00 +0000
ROA not before:           Mon 12 Jun 2023 12:00:00 +0000
ROA not after:            Sun 10 Nov 2024 05:00:00 +0000
asID:                     33657
IP address blocks:        2001:559:46c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:35:cc:b8:04:60:04:6c:ec:c8:dd:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 12 12:00:00 2023 GMT
            Not After : Nov 10 05:00:00 2024 GMT
        Subject: CN=8dc09a14-f309-4918-b6b5-9a0b819182a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5e:6a:a8:41:8c:da:42:98:55:5b:a2:f2:0c:
                    50:c5:dd:1c:70:38:e5:23:91:86:ac:74:96:8c:bc:
                    2b:c1:ab:13:9a:b8:bb:95:c7:5c:7e:43:39:96:f0:
                    36:b1:41:0b:ae:80:26:49:98:6d:6a:33:55:68:21:
                    25:26:f7:c3:5d:43:e8:8f:38:c3:fc:2b:76:38:74:
                    dd:ca:56:20:b2:5c:02:a1:e2:5e:e4:73:e2:a0:f8:
                    97:10:25:43:f7:7d:c1:b2:0a:d4:36:c7:5d:d4:b5:
                    f4:11:14:93:60:a6:29:5a:b7:3a:a1:6f:16:1e:d2:
                    f2:c8:5c:0e:25:a3:fb:af:32:c9:b9:9b:d5:84:dd:
                    9c:cf:0a:84:e0:70:33:8d:4c:e2:92:2d:d2:ee:cd:
                    e4:a9:4c:f2:bc:27:e4:4b:2b:35:16:e1:36:10:c1:
                    fe:30:c2:8f:09:3e:a6:a3:0f:b1:d5:d1:d7:b0:50:
                    fb:3f:6a:1d:c0:ed:a1:c0:d7:74:f0:27:5b:36:ea:
                    3e:0b:37:6d:1a:04:6b:83:16:bf:b4:e8:39:cf:ff:
                    3d:77:ba:28:8b:36:5f:f6:b9:3c:2e:cc:b1:75:1a:
                    51:8f:0b:98:c5:3b:fa:e2:63:ff:91:b4:9b:27:88:
                    4a:ba:bb:f7:05:1a:9d:d1:aa:01:d4:25:08:2c:f7:
                    83:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:78:DC:B0:8B:CF:3B:2B:1D:B6:34:3A:CA:A5:E2:E8:A7:7F:54:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2ef0f8e-5a5a-3d2b-a88c-db0a45348c0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:46c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:07:6f:ec:2c:4b:f4:57:af:a1:69:5b:27:8e:85:b1:89:4e:
         c7:ec:06:fa:5a:f2:69:59:4c:a2:af:59:ce:b9:fe:05:63:9a:
         d8:55:a0:d5:60:a2:75:f1:28:a5:f7:de:e9:25:a3:4d:9c:f5:
         53:a5:d6:64:c1:f9:5c:5c:c2:22:ff:30:a6:b7:29:27:41:c7:
         51:4c:c2:20:61:47:46:81:73:2f:33:52:c2:13:ff:ce:0d:53:
         0d:e0:8f:aa:87:48:9d:33:84:23:41:99:11:17:58:1f:d0:d6:
         2c:e9:5b:dd:b2:fd:4a:b9:ae:cf:69:76:47:94:26:dd:d1:34:
         5b:3a:83:d7:cf:a1:26:8d:fe:22:64:b8:6e:d8:af:38:7b:81:
         52:ac:3f:38:f4:97:17:98:e0:80:e2:4b:9d:87:fb:a5:ab:b5:
         14:55:ca:a2:bd:4e:0d:e0:dd:fc:43:05:6f:03:db:de:d0:7d:
         3a:01:3c:4f:81:81:2b:cd:06:91:46:dc:b8:fd:57:f4:56:41:
         56:5d:6c:15:dd:88:c5:d1:30:a2:9c:1e:75:f9:b4:7a:6b:b5:
         7a:9d:06:a0:a6:6c:64:9a:8d:71:bc:34:5e:58:b6:5c:ad:57:
         72:e5:37:af:22:15:dd:1f:4d:81:55:da:e0:5d:ee:43:d0:3c:
         61:99:20:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:46:08 2024 by rpki-client on console-fra.rpki-client.org