Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2eab2a6-259e-35da-8639-fa6b97ce3617.roa
File:                     e2eab2a6-259e-35da-8639-fa6b97ce3617.roa (raw, json)
Hash identifier:          QWOqTLFldKePF2Jk39RFpJxx/hKQQUP8ns6zCEB6NOM=
Subject key identifier:   11:FF:69:38:4D:84:7D:A0:B6:27:AB:74:D7:64:A4:DC:90:2E:F5:3E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FB056A209E42903B8E43780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2eab2a6-259e-35da-8639-fa6b97ce3617.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33657
IP address blocks:        2001:559:874c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:b0:56:a2:09:e4:29:03:b8:e4:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=034277f5-2ca0-46e9-a3c8-3895ef2c75ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0a:69:41:a6:78:67:bc:c7:c0:e5:e2:3e:05:
                    40:c0:c9:b9:a8:81:5e:9c:45:a1:4a:c0:77:25:2b:
                    2c:0a:70:17:8c:ae:1d:64:77:58:05:e4:de:b8:95:
                    c1:96:84:64:19:c8:13:9e:ac:a2:69:7e:5c:ac:33:
                    fe:96:41:15:3b:36:07:29:fd:ee:a3:82:df:f1:5a:
                    b3:fc:8b:4b:13:d9:08:e1:8a:57:5b:b5:4f:e8:2b:
                    36:a4:75:6d:05:fa:40:54:b2:b5:10:f1:1b:ce:04:
                    ed:3a:04:11:9e:23:a1:7f:5f:38:3b:7c:a1:4e:22:
                    e2:77:51:49:cc:83:73:04:41:3c:e7:33:c8:04:32:
                    e5:8f:99:41:d2:e8:53:53:21:62:62:19:ff:15:0a:
                    f3:f4:a9:15:7a:d9:81:be:25:23:57:9c:5a:80:51:
                    49:89:fd:79:47:b9:d7:77:2e:c2:a6:8d:ba:3d:3b:
                    2b:79:91:a8:2d:48:1b:f9:c4:70:ee:1b:58:16:de:
                    15:03:dd:72:25:5a:65:79:9a:bf:dc:ce:cd:ea:7a:
                    d5:aa:72:f9:e4:81:08:37:c1:97:a6:a4:42:c7:f3:
                    be:64:23:a8:52:fb:cc:9f:a8:fa:d1:ec:e1:11:ea:
                    1e:bc:d1:77:b9:23:37:c0:53:ec:ea:d7:b2:29:88:
                    9f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FF:69:38:4D:84:7D:A0:B6:27:AB:74:D7:64:A4:DC:90:2E:F5:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2eab2a6-259e-35da-8639-fa6b97ce3617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:874c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:4f:50:ec:3d:54:22:64:92:65:a9:ce:15:11:2d:a2:0e:ca:
         c4:76:ff:c4:60:ad:36:38:a3:0e:12:25:2b:58:94:67:40:75:
         bb:c5:b7:90:75:16:e6:d5:c8:97:59:e8:b6:33:02:8e:cd:af:
         b1:38:fa:6e:94:23:ab:95:e6:5c:16:55:4d:ce:98:94:75:10:
         cc:2e:e0:c4:00:5e:d0:11:ac:2f:29:9b:98:e8:ee:4d:3e:6d:
         b1:bd:84:a8:77:a8:ef:31:91:64:0b:0e:82:68:e9:3f:29:dc:
         02:af:2a:e7:0b:c1:25:e9:3f:c8:66:6d:24:bb:b6:99:db:14:
         5c:d6:c0:eb:bb:fe:ce:e1:59:fc:95:5a:15:5a:32:c5:7b:60:
         6b:9d:e3:28:94:65:01:7d:1e:7d:54:8c:05:5c:68:a2:87:35:
         8c:f9:98:18:2e:55:2f:5b:6d:0e:d0:d4:db:f2:9e:37:ce:4e:
         d9:6d:43:5a:25:61:04:14:a5:2e:1b:46:2d:ca:45:2b:74:88:
         7b:d8:66:14:71:cb:cf:62:b9:40:f4:92:3b:25:96:66:0a:c2:
         63:4a:34:fd:82:22:57:ce:20:26:ed:8b:7f:a8:cd:1b:59:36:
         74:40:52:81:c6:bc:2c:bc:23:15:c7:1e:ae:8d:54:fd:c8:3c:
         94:1f:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:23:14 2024 by rpki-client on console-ams.rpki-client.org