Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc7bf528-179f-3d5c-b51d-3cbeccf9bd3d.roa
File:                     cc7bf528-179f-3d5c-b51d-3cbeccf9bd3d.roa (raw, json)
Hash identifier:          VnCYr7wWe32hQOTYQ8X86uOEQuY7LdCHc4ITbBuSVF0=
Subject key identifier:   F6:51:75:AC:7E:7F:FF:5C:DA:D2:8A:71:15:75:1C:AF:2A:AD:07:F4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAF65547E91FDFE2346A040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc7bf528-179f-3d5c-b51d-3cbeccf9bd3d.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7015
IP address blocks:        2001:559:c433::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:65:54:7e:91:fd:fe:23:46:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=f3e899d5-cd4c-4c66-8261-651744540786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4a:f7:a7:59:5f:a6:18:7b:98:e8:87:8b:87:
                    a2:2b:ed:e2:c1:5c:92:c1:4e:08:81:db:fe:79:f2:
                    2c:1d:fb:1e:71:70:38:c4:21:02:05:54:de:13:97:
                    dc:e7:e3:ed:3d:5b:7f:e2:e6:93:ff:c9:b4:6f:0e:
                    06:ee:b9:b6:d5:a0:65:92:e5:53:ec:50:40:85:1e:
                    73:72:6b:23:ed:bb:bc:1e:7c:7b:f0:c0:bb:95:3d:
                    2e:5c:d1:70:e2:a5:6e:d3:6d:4e:c3:78:33:af:21:
                    04:fd:68:40:9f:08:a3:fd:d1:4a:b3:74:b0:46:27:
                    2a:96:80:0b:93:71:a0:ed:dd:de:06:b5:a1:94:5e:
                    93:fd:98:95:ce:d8:6b:1f:26:f3:75:00:68:88:fe:
                    dd:c8:08:d7:a0:f8:7d:c8:6a:05:fd:e9:b6:b9:ea:
                    af:5f:aa:95:32:03:6b:85:0c:1c:a8:58:44:6b:bf:
                    8e:7b:55:0f:7b:12:26:c8:a8:d2:3e:15:aa:fe:40:
                    84:44:34:bf:d3:ee:f8:63:12:31:c6:cb:b7:52:80:
                    c6:10:15:fa:79:2b:a2:93:74:40:ba:b7:7a:52:da:
                    de:b2:08:cb:6e:5c:d3:c0:78:6c:09:0b:6d:f3:fe:
                    bb:9a:53:07:af:26:67:37:b2:be:64:5e:72:f7:99:
                    80:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:51:75:AC:7E:7F:FF:5C:DA:D2:8A:71:15:75:1C:AF:2A:AD:07:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cc7bf528-179f-3d5c-b51d-3cbeccf9bd3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c433::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:b6:a6:ee:3d:f7:ae:32:8d:69:b8:02:72:c0:2d:f0:02:73:
         74:8a:0f:39:71:e6:22:6d:5e:65:23:3e:74:ea:eb:d4:fd:d2:
         01:1b:c9:e7:fc:13:10:d5:7d:d2:f0:e5:75:d7:82:bf:ce:d5:
         41:a0:87:de:19:36:2d:0e:77:49:8f:ef:7f:31:5d:bc:e4:fd:
         01:30:cd:31:b9:09:22:1a:d9:c0:fa:78:ba:55:f2:cf:b0:e1:
         99:31:06:80:4b:d5:72:fb:2d:72:8f:40:c8:6d:22:b0:17:5c:
         e6:4f:7d:f4:17:15:31:9d:4f:a1:a7:26:d1:c8:49:3c:10:31:
         68:27:fd:6e:05:0c:07:b3:37:fe:ee:68:40:fc:09:4d:05:45:
         74:77:9e:b6:67:34:b1:d1:a9:16:cd:9f:04:97:55:17:e5:d6:
         41:5e:0a:4b:da:e0:8f:10:6d:e5:d5:51:a4:8f:4a:d5:4d:fa:
         57:3f:5a:28:9f:49:41:dc:41:38:8f:f1:87:b4:9f:e5:6e:27:
         d1:49:14:d0:71:7a:ea:4b:f3:08:d5:0d:75:ed:81:78:7e:7b:
         fd:4d:a0:e2:d9:5f:68:3a:0e:69:55:e2:db:e1:23:7c:94:8e:
         4c:f1:71:37:af:e3:27:0f:49:81:9d:2b:ab:97:2e:18:a9:7e:
         ca:81:4a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:22:34 2024 by rpki-client on console-ams.rpki-client.org