Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5f58b81-b242-38ba-9280-19e61f5376bc.roa
File:                     f5f58b81-b242-38ba-9280-19e61f5376bc.roa (raw, json)
Hash identifier:          dgR6ETuR3oR1rEZBXxqRC6FzTKtY12imwxN6WYG8aHo=
Subject key identifier:   2A:E3:73:11:FF:6D:AF:7F:F4:12:D4:C5:EB:5D:67:7E:7A:00:B5:C4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB59ECE8B6130E265702F8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5f58b81-b242-38ba-9280-19e61f5376bc.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7725
IP address blocks:        2001:559:501::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:59:ec:e8:b6:13:0e:26:57:02:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=4f691f6b-c7d5-4afd-8d1b-93ab8446546a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:58:30:a4:74:0c:49:bc:7b:39:2e:e9:0a:
                    c9:c3:47:fb:02:48:11:33:21:da:b6:35:4f:68:d3:
                    d3:9d:de:61:4e:4c:f1:55:cf:63:e9:c0:cc:7a:1a:
                    ee:3b:be:23:a3:b4:90:eb:de:d0:ff:01:ae:5f:1e:
                    e4:64:7b:55:f9:47:c8:fc:92:d0:8e:8c:ee:bb:f7:
                    a1:6a:cc:a5:2e:49:21:16:22:12:a5:4e:55:dc:27:
                    57:47:5c:91:a3:9e:5f:79:09:40:0e:5d:ce:60:69:
                    7f:61:1c:87:88:cd:a1:f7:c3:7b:ce:f9:a4:c8:df:
                    84:45:c2:fc:3e:09:db:52:72:73:2a:dc:5e:bc:d9:
                    75:05:19:d1:0b:95:8a:ad:c8:3a:09:ed:36:78:c8:
                    40:a0:df:60:27:ba:ed:2e:b2:87:ff:dc:6a:84:f6:
                    e2:10:21:0c:2a:7c:63:8a:46:5a:eb:bf:46:cc:97:
                    64:a4:95:5e:55:42:30:56:8f:57:73:f7:58:67:cc:
                    4e:b2:99:04:6e:ed:fb:73:98:65:30:6a:6e:22:66:
                    ae:10:d2:17:61:ff:26:ca:a5:02:f2:55:b7:ce:7f:
                    d8:7f:64:3f:c5:f8:1e:a9:cc:ad:db:23:09:dc:4a:
                    ca:a7:11:8c:cb:c1:51:8f:51:2d:f2:6f:6a:37:88:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E3:73:11:FF:6D:AF:7F:F4:12:D4:C5:EB:5D:67:7E:7A:00:B5:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f5f58b81-b242-38ba-9280-19e61f5376bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:501::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ac:fe:19:04:70:45:56:07:b6:43:4c:56:12:1a:f1:f6:61:
         43:7a:8f:f1:13:dd:1e:73:15:9e:cf:7f:83:f8:22:36:2b:81:
         6d:f6:5f:f0:7f:1d:6a:66:f7:a0:dd:6f:28:11:dd:33:38:c6:
         83:04:a6:a3:e4:63:a2:39:e7:e7:f3:0f:94:fc:75:84:2e:36:
         01:82:39:71:65:ec:b4:1d:20:6f:a6:61:d2:5e:b5:7e:18:2e:
         af:43:00:17:f7:8d:43:bf:b8:d6:bc:f2:86:11:e5:87:22:e4:
         54:d8:47:6c:c2:fc:83:37:85:64:25:12:d6:9b:ed:db:a7:55:
         24:2d:19:92:a9:cd:cf:1c:d1:7e:0a:2f:6f:33:a5:6a:b8:1c:
         74:2d:47:11:c9:09:15:d2:11:4c:8c:fe:77:a0:e2:f9:27:cb:
         56:ce:e9:22:40:38:93:40:55:fd:68:f8:c5:cb:f4:0e:11:89:
         48:d7:24:52:a7:94:75:50:56:6d:4c:86:af:2e:4b:fe:27:e1:
         20:e6:2e:52:f2:f2:9a:13:f3:07:3a:58:15:e1:48:a1:70:ea:
         7a:ec:97:2f:80:cc:8f:de:ac:60:97:cc:39:5a:d5:d4:bc:97:
         c0:ad:a1:e9:e7:ee:d1:de:92:13:bb:93:68:68:2a:9e:da:b2:
         13:cb:5e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:24:01 2024 by rpki-client on console-ams.rpki-client.org