Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d90ee79e-feec-3fd2-9e0e-3dc2bf98a905.roa
File:                     d90ee79e-feec-3fd2-9e0e-3dc2bf98a905.roa (raw, json)
Hash identifier:          Do5zo2gYqqZ5qrXu0hULVtlSPnfKowdtaXbNCF92W64=
Subject key identifier:   5E:02:5C:C6:7B:EB:F2:6C:5A:7E:80:83:60:E6:95:8C:4B:FF:97:6A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAD129461566418BC802980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d90ee79e-feec-3fd2-9e0e-3dc2bf98a905.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        2001:559:e6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ad:12:94:61:56:64:18:bc:80:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=335129c9-7ca5-47f6-93a6-b110c10e891f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:94:51:52:b7:7b:3c:5d:22:bf:64:5b:45:9d:
                    7f:ef:8e:ef:e0:96:01:38:e0:f1:57:bd:50:7f:c7:
                    29:40:10:3a:db:6b:e8:4c:45:71:87:12:7e:5d:5f:
                    fd:f9:bc:01:e5:09:4b:79:45:7e:2e:ff:84:c7:d2:
                    42:fb:b3:0e:04:c7:13:c5:80:7c:5e:23:66:ee:c1:
                    c1:da:8a:23:6a:c4:4b:74:9a:c3:74:17:05:96:a6:
                    3e:6f:50:40:5b:17:38:4d:d2:ee:62:7a:47:6f:78:
                    94:16:39:6a:58:1d:57:42:65:24:8a:c4:bf:b7:de:
                    5c:e1:3c:53:b5:e1:79:53:b4:66:db:8a:28:a2:dd:
                    e6:dd:55:fe:5c:f4:e8:67:a2:43:bb:32:d4:79:9b:
                    5d:77:fd:c7:a9:5e:36:9f:ab:f2:cf:82:3e:12:06:
                    11:18:b8:75:7c:c8:d1:60:33:d9:9c:c1:4f:50:84:
                    d0:5d:8a:e7:04:97:bb:1f:4a:45:e2:77:95:ce:0e:
                    76:f7:a8:73:48:06:55:32:4c:bd:b3:43:3b:66:5c:
                    cf:34:64:76:8b:a7:c4:4d:94:16:f3:20:70:07:c7:
                    db:07:43:98:0f:ef:86:0b:b6:55:f4:8e:3c:91:19:
                    48:b5:e0:04:53:31:85:99:81:6e:62:2f:9b:21:fd:
                    0b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:02:5C:C6:7B:EB:F2:6C:5A:7E:80:83:60:E6:95:8C:4B:FF:97:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d90ee79e-feec-3fd2-9e0e-3dc2bf98a905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:e6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:85:a9:ab:2a:8c:19:2e:4e:6c:a1:da:bd:f1:35:7e:2a:b8:
         b4:98:f0:c4:e1:fd:6b:8b:8c:db:f3:82:00:d2:93:b4:63:2e:
         38:dd:30:ad:00:d2:a9:66:3a:6a:3a:15:54:a6:8e:69:8e:7e:
         9f:9d:ba:0d:82:8d:1d:91:51:e1:5a:f0:50:d9:a3:8a:47:a8:
         06:26:14:da:78:d4:7c:b7:48:eb:01:c4:14:c1:14:e8:c7:a0:
         cc:69:fa:11:65:e7:aa:0e:88:3e:97:76:57:73:23:ac:3b:fb:
         1d:da:15:c9:5e:fa:b6:3f:91:0a:ba:22:23:b2:8a:83:31:46:
         5a:20:68:ad:a8:a6:a9:29:12:78:15:98:61:1b:b0:a4:05:3b:
         90:7c:22:5a:32:99:b1:e2:c6:40:e0:3d:77:f8:fd:b8:7f:9f:
         68:0b:0c:e5:99:82:86:0f:33:30:7b:13:bc:c6:59:4f:7a:71:
         8a:24:04:22:74:bf:e3:18:ee:a1:50:d1:e8:5a:91:01:53:eb:
         39:c7:74:f1:d9:b8:50:57:b6:03:f7:44:4a:f1:49:f9:b6:26:
         51:3c:11:3c:de:2d:1e:c7:0c:80:a3:f7:e4:b8:2e:7d:f0:c3:
         a9:35:31:8d:e9:9e:78:ae:04:db:b0:8c:bd:a7:42:c3:16:da:
         2a:d0:c8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:58:22 2024 by rpki-client on console-ams.rpki-client.org