Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c69323d4-6cc6-376f-a426-ba2cad271d84.roa
File:                     c69323d4-6cc6-376f-a426-ba2cad271d84.roa (raw, json)
Hash identifier:          Mj6aeXFW/25Z+6sQeX8re/cTyI1XS8v15E254rTmNvs=
Subject key identifier:   47:32:3F:91:B2:6E:EC:71:12:56:B7:EB:00:33:C6:D5:0A:FD:4E:87
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABBA656DAD3674ACDCFE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c69323d4-6cc6-376f-a426-ba2cad271d84.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33667
IP address blocks:        2001:559:a7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:ba:65:6d:ad:36:74:ac:dc:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=cd92aa96-ea84-4987-96f3-55ee5e700b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:eb:01:f8:f3:7f:3d:ea:88:f8:a5:87:e8:b4:
                    73:7f:1f:d5:6f:23:ae:a9:1a:38:74:9c:32:bd:74:
                    5b:69:8a:6f:77:e7:e8:c2:a9:61:96:9f:2c:45:b3:
                    b1:00:65:0b:64:5a:0c:59:70:e7:ff:c0:39:3d:58:
                    f3:3a:61:79:cf:68:61:b7:e8:c3:03:f8:4d:82:0e:
                    5d:5c:67:9a:dd:a0:b9:df:73:71:9c:34:81:77:4f:
                    1f:27:e2:0e:c7:c3:3a:b7:a0:c7:ec:6a:16:d9:b0:
                    89:3d:80:02:8b:71:73:04:45:f6:35:3b:c8:d7:77:
                    3a:26:fd:31:ea:f3:1a:c0:74:0d:40:17:a6:0c:6d:
                    a7:5e:53:cf:30:63:d3:a9:aa:0e:41:37:68:2e:8b:
                    b8:0a:6f:2e:33:39:bb:67:cc:6e:ef:0c:4f:0d:bc:
                    b2:76:e5:a8:6d:25:b3:69:0f:f5:84:95:21:63:fb:
                    20:18:06:c9:52:d7:81:bb:10:c9:e5:4c:6b:5a:6d:
                    4a:14:b9:30:0f:af:5d:83:a2:73:69:a6:78:ef:14:
                    a3:33:af:a3:33:f6:6e:c8:18:75:3f:82:f2:c0:d2:
                    cf:2e:d6:76:02:98:ce:c8:60:3b:4c:d6:f6:84:46:
                    54:b8:70:26:36:76:82:d1:35:21:f3:1f:b9:e8:fb:
                    5d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:32:3F:91:B2:6E:EC:71:12:56:B7:EB:00:33:C6:D5:0A:FD:4E:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c69323d4-6cc6-376f-a426-ba2cad271d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:a7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:de:3d:99:bd:63:70:15:9b:b6:5b:40:87:c3:54:22:23:2a:
         3e:a3:ce:2d:08:5a:19:b8:2f:85:74:5a:cb:d5:c3:44:73:c0:
         d0:3c:57:a1:a2:74:e9:cb:c8:da:11:11:b5:bc:de:34:c8:d4:
         38:a3:b9:56:7e:40:d5:b8:4d:83:29:44:a2:08:e0:f4:61:f0:
         54:a2:2e:0b:a3:91:8b:a4:93:45:c8:77:b1:51:48:12:63:4e:
         2d:bc:50:2d:ae:98:dc:a6:fc:22:8e:44:33:ff:93:17:87:fc:
         fe:4b:7b:54:a4:8d:11:de:78:ec:61:02:01:9f:e2:f6:48:b4:
         30:88:8f:15:79:3d:ac:2d:92:54:39:d8:b0:ea:93:7b:b2:a6:
         a2:c8:46:2c:94:c4:6b:f2:2a:92:25:b0:a0:ed:c3:c0:97:72:
         83:64:05:97:75:69:39:0e:91:aa:ab:d1:88:2d:12:d3:57:17:
         08:36:02:ce:96:b6:08:eb:5d:4c:fb:e8:13:af:2b:53:5c:c3:
         c1:0c:d4:40:42:52:69:7a:df:8f:cd:a1:99:b1:27:75:c5:6d:
         f7:da:ec:1d:0e:75:ba:0a:ba:35:dc:df:6c:d2:fd:a8:a0:4c:
         d8:a6:2e:4e:3b:6c:d5:08:24:4c:11:4c:ba:e7:78:01:c4:55:
         91:47:93:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:46:20 2024 by rpki-client on console-fra.rpki-client.org