Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de8735a2-3243-3360-818d-1697e9507af1.roa
File:                     de8735a2-3243-3360-818d-1697e9507af1.roa (raw, json)
Hash identifier:          NXNZP2GycE/RiBJ4GIdv7Nxemflrbi/umpAVx+PJK1o=
Subject key identifier:   75:10:29:07:10:9F:EC:A2:48:F3:61:96:85:C3:C4:9D:2C:3D:21:9F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845A428C38F69CC2405734000F0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de8735a2-3243-3360-818d-1697e9507af1.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     36732
IP address blocks:        2001:558:d2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:c3:8f:69:cc:24:05:73:40:00:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=0d9c50ec-732d-4d24-a97b-d67bad146a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:46:94:be:9a:f5:c5:75:06:00:cb:72:88:99:
                    29:9d:eb:c5:c8:71:fc:58:34:21:9e:f8:5d:17:6c:
                    b0:45:9e:97:4d:65:b3:f6:33:49:de:6d:d7:84:98:
                    10:78:47:87:38:83:7a:5f:35:7b:e0:3a:0d:e3:52:
                    8a:50:a1:84:bb:db:86:aa:ca:f6:0b:8c:65:77:3f:
                    94:c5:f6:42:15:cd:97:df:65:b1:37:60:b2:b9:b7:
                    6e:7b:6f:e1:53:1e:b9:7e:d7:e9:85:02:ec:9a:37:
                    6c:0e:7f:35:09:83:9a:5b:c0:4e:fe:58:b1:ac:fc:
                    8e:5c:4b:ba:0e:72:5c:5c:04:99:1a:2f:10:d0:cd:
                    54:ca:dc:72:27:90:e5:48:07:44:95:68:eb:e2:29:
                    92:fd:12:45:d2:eb:ac:50:43:73:cd:ab:db:03:58:
                    1d:5b:46:26:17:3a:1b:e3:5b:d9:92:68:70:1f:60:
                    7c:9d:12:f4:8f:d6:cc:6d:9a:53:1d:51:f9:11:37:
                    1e:21:92:08:e6:29:f1:d1:78:0a:de:9b:f8:8e:a1:
                    39:1a:97:95:96:2b:34:89:e4:99:a2:1f:14:1f:08:
                    fd:e0:64:20:65:9f:53:23:9c:f9:1b:91:6c:c8:40:
                    94:80:61:28:19:76:7a:89:f1:ce:19:13:7b:37:8b:
                    9b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:10:29:07:10:9F:EC:A2:48:F3:61:96:85:C3:C4:9D:2C:3D:21:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de8735a2-3243-3360-818d-1697e9507af1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:558:d2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:35:16:c5:21:33:95:f2:9f:33:35:2a:0d:be:62:ba:81:a7:
         93:ed:4c:ad:04:6c:13:26:d5:fb:f9:be:07:f9:8e:ea:80:8b:
         68:63:2c:b8:35:76:2c:64:71:06:f5:cf:98:db:0e:1d:78:96:
         70:94:33:ac:07:2d:39:62:39:15:5f:58:b4:59:81:48:3c:ab:
         b5:c6:07:d6:9f:62:c2:6a:0e:d3:d1:37:de:ad:da:99:c8:ea:
         fd:6c:7a:85:46:e9:6d:63:f4:2c:5f:e1:7c:f2:e8:18:24:1c:
         81:07:47:1f:67:96:cc:af:4e:95:e0:8c:d8:ac:0a:72:9b:4d:
         8d:e6:78:d1:d6:79:b1:c3:6f:1b:97:17:38:1b:d1:ab:39:67:
         60:06:8d:be:11:51:24:09:44:ac:ce:37:6e:ba:ea:66:38:76:
         34:7b:d3:78:5d:3f:92:e5:52:21:ee:87:93:b3:1e:e4:86:e0:
         a4:d5:4b:75:b2:80:19:fc:81:43:e8:2b:56:ae:89:5f:05:a6:
         29:e2:0f:7b:a8:e6:1f:83:e2:81:d2:00:72:f7:da:ac:1b:a2:
         46:47:37:c6:84:cd:81:ee:a5:c7:1f:86:95:3c:6a:95:77:e6:
         94:5c:c2:75:c0:5c:21:6a:c9:e4:e4:6b:29:e4:dd:b2:bf:2a:
         b7:7c:57:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:47:51 2024 by rpki-client on console-fra.rpki-client.org