Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c871dcc6-e045-34ab-8af9-dabbf0ec928f.roa
File:                     c871dcc6-e045-34ab-8af9-dabbf0ec928f.roa (raw, json)
Hash identifier:          CwPU+/riS1Ng3V+TajbYEaE3R8P8KPXdZEhPbDCK7Nk=
Subject key identifier:   74:75:6A:90:50:26:17:31:E3:E2:BA:1B:FE:A3:1A:22:EC:87:F7:CF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285842F5B7687B65386EA0FF0BD580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c871dcc6-e045-34ab-8af9-dabbf0ec928f.roa
Signing time:             Sun 20 Aug 2023 12:00:00 +0000
ROA not before:           Sun 20 Aug 2023 12:00:00 +0000
ROA not after:            Sun 10 Nov 2024 05:00:00 +0000
asID:                     7015
IP address blocks:        2001:559:e012::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f5:b7:68:7b:65:38:6e:a0:ff:0b:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 20 12:00:00 2023 GMT
            Not After : Nov 10 05:00:00 2024 GMT
        Subject: CN=533f6ec4-f2f6-426f-8ef1-ccc52a540cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:65:73:f0:78:33:1d:cc:dc:4b:c3:ba:8d:
                    80:71:ab:b1:fb:3b:18:40:98:26:ac:79:fd:6a:d6:
                    f9:61:70:95:66:05:ae:0d:98:f0:56:60:44:4f:4f:
                    e9:93:ad:24:6e:08:48:49:e5:e9:74:fe:8e:cb:c6:
                    f6:22:15:29:08:a1:1d:a3:d1:01:76:22:fe:e6:66:
                    5f:a3:18:46:e1:0c:29:11:c5:c5:9c:b5:eb:e1:b8:
                    28:5d:3a:81:a0:7a:25:d0:06:4b:d1:d7:09:2d:2e:
                    51:0d:e4:50:40:f4:b1:6a:7f:8e:50:b6:a8:69:33:
                    31:cf:a3:26:01:a2:58:de:e5:27:90:90:f1:f0:e1:
                    bd:85:c6:8a:38:d0:05:51:43:03:4b:97:64:26:0b:
                    60:29:11:6c:71:13:08:0f:1e:ae:62:37:8a:bb:44:
                    55:63:20:82:64:7f:69:88:63:6b:85:f3:0f:b7:bd:
                    e8:b2:50:e8:8b:d2:a8:e4:d6:71:c1:0e:6d:23:aa:
                    1e:58:26:f6:0b:19:c6:28:8a:73:7b:94:1c:48:e8:
                    32:08:31:4c:f3:06:7d:6b:16:d6:35:b1:30:f0:e5:
                    4a:c3:86:41:a2:1a:49:eb:84:ba:c3:cb:e1:13:8c:
                    22:22:50:e5:69:c1:37:54:80:89:30:19:2a:1b:83:
                    fb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:75:6A:90:50:26:17:31:E3:E2:BA:1B:FE:A3:1A:22:EC:87:F7:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c871dcc6-e045-34ab-8af9-dabbf0ec928f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:e012::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:7b:a8:76:65:fa:10:2b:b0:26:53:e3:32:24:2d:b1:a0:6e:
         ff:ef:da:04:57:ba:26:8f:5d:78:4e:c1:1b:f1:3e:45:13:15:
         92:45:fa:cd:5b:a6:18:2f:e5:b3:6f:46:14:63:db:ad:5a:bd:
         d8:37:20:ce:3f:4e:f9:85:34:75:e0:50:0e:08:d7:9c:49:d4:
         3c:4a:f0:9b:5e:b9:f7:6f:7c:3f:2e:a1:7a:88:fa:b1:2f:e4:
         20:af:1a:45:66:51:1f:e7:a6:16:01:fa:77:ff:47:e8:df:16:
         23:0b:70:26:5f:df:48:6d:ed:e8:56:e1:af:b2:39:c7:ac:6c:
         9c:85:a5:88:c4:22:2e:fe:30:a3:4b:95:c3:6d:2c:4a:2f:91:
         c9:de:ea:41:4e:0c:cc:fc:58:e9:74:20:e7:ef:91:10:85:0d:
         c6:14:b3:76:0e:13:df:2f:7f:0e:cf:c4:fd:a9:c7:7e:22:95:
         fc:a4:f7:04:60:6b:9a:4b:b5:54:d8:32:35:4e:81:cf:2b:87:
         55:7a:ba:5f:d0:fe:41:83:f9:c7:c8:4c:44:32:28:25:10:78:
         a9:b6:2a:c4:8f:33:26:0c:82:45:d7:64:37:5d:4d:92:59:17:
         0d:1e:bd:84:7d:7c:f7:b4:bb:1c:93:b8:7a:a6:9f:e0:38:2c:
         16:2b:5f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:46:28 2024 by rpki-client on console-fra.rpki-client.org