Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3436535-bb44-3038-a471-a0a3b9249344.roa
File:                     c3436535-bb44-3038-a471-a0a3b9249344.roa (raw, json)
Hash identifier:          DN6zNv2vsfyVNzOkYt7X2eiAjjVvSKPjsMOIETvwu2s=
Subject key identifier:   86:7E:85:5A:5A:C7:47:91:EE:BA:C1:B4:66:9C:C4:FC:27:06:31:C6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC5D89F5644B3775BFDFA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3436535-bb44-3038-a471-a0a3b9249344.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33659
IP address blocks:        2001:559:8706::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:5d:89:f5:64:4b:37:75:bf:df:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=a9d9cf03-22e3-4c70-815b-8d834306fb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:25:55:0b:84:db:33:d3:c3:65:fe:48:47:fa:
                    08:f7:82:63:5b:12:e6:3e:a7:f5:10:fa:33:ca:35:
                    c4:48:78:f4:f3:ea:db:65:a1:58:9d:fa:7d:9e:c7:
                    03:ad:20:af:70:0c:60:a0:bb:52:5d:04:2a:70:f7:
                    c0:bf:d5:60:be:08:1d:8d:21:a2:5a:1d:58:81:50:
                    c1:8f:eb:8f:18:cd:a5:6e:65:7c:97:de:14:15:01:
                    f2:21:40:95:b7:7f:3a:d2:fa:cf:81:a5:78:a4:36:
                    22:c5:e0:63:2e:37:29:1a:95:d6:95:7f:7b:b6:8e:
                    d2:72:f4:0a:95:d2:44:e6:e4:12:c1:6c:27:b4:15:
                    78:85:23:5d:b8:2b:ff:7d:4e:16:07:9d:e5:a7:04:
                    2a:ee:87:a0:81:b7:6f:12:87:d3:02:dc:68:97:a2:
                    2d:97:fd:2d:39:ef:68:45:fd:1d:de:01:29:31:a0:
                    26:e8:36:c9:89:f8:18:47:43:44:1c:fd:e6:1c:d2:
                    2a:9d:e4:b4:fd:b7:83:27:89:09:05:b9:34:54:6e:
                    08:db:74:11:94:74:c5:34:f4:eb:1d:4f:d2:e5:49:
                    9e:47:ea:88:f2:4c:02:59:df:fc:77:55:6b:28:84:
                    8e:6d:91:aa:5f:c0:a3:21:19:81:f7:6c:3a:09:ac:
                    e0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7E:85:5A:5A:C7:47:91:EE:BA:C1:B4:66:9C:C4:FC:27:06:31:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c3436535-bb44-3038-a471-a0a3b9249344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8706::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:03:55:ef:b8:e4:c7:84:c8:b4:26:63:7d:9f:65:0f:03:cc:
         e5:3a:4f:00:c5:49:c0:d0:23:f1:35:b6:6e:ae:41:ef:2f:ff:
         34:4f:b6:10:25:3a:e1:81:81:2f:b9:40:3b:1c:6c:3a:3e:09:
         81:6f:35:fe:d4:a9:a0:c9:4f:19:c1:c2:92:a5:45:1c:0d:cc:
         12:c3:6e:aa:a4:c9:1c:36:8a:95:2f:65:47:8c:e1:1c:f1:f5:
         07:04:78:b5:90:4b:cc:7c:2f:a3:10:81:c8:cc:b7:23:fe:70:
         5b:fc:ec:54:6a:ad:c3:ce:e7:d2:91:6c:fc:d3:e0:6d:a8:0e:
         12:2a:0a:57:f8:0f:e6:46:d2:6e:ed:a6:fc:53:56:5f:37:78:
         eb:82:7d:ee:b7:44:c9:97:e5:ed:39:02:90:ec:43:11:7f:26:
         ef:49:f9:38:93:a5:20:fa:81:e0:e5:bc:0f:37:e5:48:f7:42:
         db:37:82:f3:f8:34:fb:38:96:84:a4:f9:bc:4c:c8:95:ed:06:
         bf:ac:2f:df:84:a6:26:21:f5:29:c3:69:28:a4:71:fa:d8:c0:
         3c:a8:31:cd:ce:c1:8b:7d:52:b1:4e:7a:2b:55:55:7e:cb:06:
         b2:ba:c4:d5:42:ab:7e:e0:9a:fc:9d:76:b6:7b:60:eb:b0:37:
         fa:01:3a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:57:15 2024 by rpki-client on console-ams.rpki-client.org