Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecde073c-e8a7-3294-a69f-5c814949b00e.roa
File:                     ecde073c-e8a7-3294-a69f-5c814949b00e.roa (raw, json)
Hash identifier:          TB+LSkDdpFXCV9vjjnuJk5UnMVgqpLl6EmbIn+Ujqc0=
Subject key identifier:   42:14:95:06:85:BE:0A:A8:42:49:D6:95:87:3D:09:97:89:EF:FA:CB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB8851D9E1479DD779E280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecde073c-e8a7-3294-a69f-5c814949b00e.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33650
IP address blocks:        2001:559:4b9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:88:51:d9:e1:47:9d:d7:79:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=601297c4-788a-4ace-aa4e-707ef8fffe34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:72:3d:3a:3a:d7:3d:68:c0:79:2e:78:02:3c:
                    d9:e9:50:31:20:7a:a0:c3:af:57:fe:c4:6f:68:90:
                    0c:6a:a8:5c:de:f7:7f:52:67:14:f3:1a:a6:0c:38:
                    f2:94:31:03:18:0d:38:4a:cd:ba:8b:73:d8:ba:5a:
                    34:15:50:5e:c8:d1:de:2b:f7:1d:9c:2e:d0:0c:e7:
                    7d:c2:25:6d:8e:27:8e:40:91:a4:08:67:25:00:f2:
                    af:68:dd:e6:8d:94:cc:b4:7e:fb:a7:12:cc:99:6b:
                    d0:a0:c1:27:1e:2e:9b:de:e6:49:56:1c:98:b2:01:
                    86:d1:85:14:55:50:25:53:ec:cd:db:06:48:ec:ba:
                    81:fc:10:2b:2d:56:ad:12:8b:d3:2e:46:35:3b:b7:
                    db:8f:b2:b3:7f:6a:33:de:ff:9e:37:3c:e5:c3:60:
                    d6:57:be:26:af:b4:f4:dc:f4:d4:4d:a3:ae:7d:78:
                    a3:b5:87:61:12:9c:e8:92:17:c3:9d:04:d9:a5:ff:
                    3e:e6:4a:af:7a:e8:8f:ee:5a:6f:38:ff:24:45:19:
                    a1:ce:2b:34:39:7c:ef:88:43:12:7a:3e:45:14:a8:
                    3b:f6:c9:59:fe:c7:50:a8:7b:7f:66:6a:f2:fe:04:
                    8f:b7:71:9a:00:9a:ce:be:ce:19:17:29:03:58:e3:
                    f8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:14:95:06:85:BE:0A:A8:42:49:D6:95:87:3D:09:97:89:EF:FA:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecde073c-e8a7-3294-a69f-5c814949b00e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:4b9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:fa:f2:29:fc:15:5a:83:97:cb:3e:9a:50:fc:cb:51:a0:db:
         94:32:c4:8c:b5:aa:33:6e:3f:12:a9:45:2e:75:55:aa:93:0d:
         fd:da:43:c6:3c:7f:a1:cf:05:7e:66:90:5a:5f:10:45:b2:1e:
         49:5b:2c:80:03:16:8a:84:cd:b7:43:86:70:74:6b:6d:77:2f:
         8e:fd:0f:18:84:b2:12:d2:07:45:6b:4b:42:3a:08:ea:31:56:
         71:eb:e8:69:bd:67:9f:d6:2c:98:8a:1c:dd:2b:e2:98:77:7a:
         17:70:8b:3d:a9:90:df:92:9f:20:08:5e:20:32:f3:45:76:15:
         50:fd:35:ee:d2:b2:c4:ca:9a:23:29:0a:73:4b:94:69:d3:3d:
         38:53:06:1c:b4:75:50:03:fb:7e:5b:04:dc:c1:8a:6b:d9:cc:
         f5:9e:55:16:74:22:11:47:04:e5:ab:e6:e4:3e:fc:46:0a:30:
         30:36:97:0e:69:29:2f:d1:1f:8b:25:3a:69:81:88:b1:32:52:
         d2:2f:42:da:e7:29:17:d4:c6:96:9f:49:8f:17:e7:06:26:06:
         5a:94:bd:4b:7b:50:a5:f7:7d:31:f0:ee:7c:a0:a9:41:d3:bc:
         34:f6:5c:8f:ef:81:bf:51:b0:9d:54:94:44:ea:6f:ae:b2:1c:
         dd:aa:4a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:58:21 2024 by rpki-client on console-fra.rpki-client.org