Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f72834c2-665b-315c-936c-f006e522eae7.roa
File:                     f72834c2-665b-315c-936c-f006e522eae7.roa (raw, json)
Hash identifier:          5swi683t0ggVyNVxMFdAR/fHhcbzHyfABAPS5m3TTrU=
Subject key identifier:   08:1C:27:6A:74:26:04:45:D3:D0:45:7C:4C:BD:3C:84:2E:6A:D6:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAD90A2021D931E367B0EA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f72834c2-665b-315c-936c-f006e522eae7.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7016
IP address blocks:        2001:559:194::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ad:90:a2:02:1d:93:1e:36:7b:0e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=dd20a2cb-c6c4-4b52-b4d6-6b422016020a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:95:bb:98:74:26:5e:de:89:f3:56:08:f0:
                    03:08:93:36:24:ad:a5:26:ec:f8:57:ba:18:8a:aa:
                    79:8e:07:80:89:ba:95:83:4d:87:f7:b7:06:51:01:
                    27:25:87:98:1a:96:e0:bb:1d:a8:af:15:fd:fb:96:
                    36:91:49:d0:07:3d:17:96:ae:d5:5a:08:8b:3f:c4:
                    52:6b:66:4e:b6:9b:f5:9a:d0:82:fd:1a:bc:a1:66:
                    ae:59:e8:f6:c0:58:fd:73:19:e5:b5:3f:da:3e:ae:
                    e7:42:99:d6:b8:fb:93:01:6d:55:13:1d:7c:ea:77:
                    d4:c6:6b:bc:09:ee:9d:59:22:0d:13:13:42:0d:84:
                    3b:03:cc:c3:52:fe:c0:50:2a:b6:a9:38:86:b0:d0:
                    93:78:05:e9:ae:f4:96:9a:9d:3c:d1:74:5b:f4:ad:
                    0b:d2:71:82:8e:c5:55:c6:bd:4e:71:2d:31:8a:e2:
                    42:20:f1:a9:47:45:85:7a:44:99:b9:20:0b:76:8e:
                    8d:18:32:72:50:b1:65:00:b9:84:58:39:e5:9a:2d:
                    0f:80:72:17:6e:2b:36:c0:db:ac:34:10:13:fb:ce:
                    db:60:06:06:a1:8c:9e:98:f8:31:17:37:01:85:77:
                    ed:9d:4a:89:a3:ea:59:50:2c:5e:27:f6:0e:2e:c2:
                    8d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1C:27:6A:74:26:04:45:D3:D0:45:7C:4C:BD:3C:84:2E:6A:D6:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f72834c2-665b-315c-936c-f006e522eae7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:194::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:e7:8c:d0:8b:9d:56:e1:af:6d:eb:19:30:db:f9:75:57:53:
         92:a5:a6:21:f5:87:ab:22:32:fc:f0:9d:ed:d9:24:a8:98:09:
         c8:30:00:74:27:7e:3e:7c:7d:0d:52:3b:fd:43:ab:f1:b2:9a:
         0e:e9:34:d3:58:87:2c:54:21:7f:c0:51:8d:27:ce:9a:40:c0:
         a2:82:f1:fd:6e:34:ec:5d:a8:11:9d:7d:ba:8c:ea:67:c0:52:
         0e:22:48:40:c8:74:3e:45:34:bd:8d:28:8b:3d:0c:1e:d7:bf:
         74:8e:e7:b4:1d:07:d9:e3:64:62:a5:02:0e:7d:c3:37:0b:af:
         d0:36:58:6d:df:9c:37:70:c8:3b:b3:c9:f5:6f:cc:18:60:ee:
         9a:60:80:1d:0c:5c:44:d0:38:d0:59:7b:15:be:3c:d8:89:ed:
         35:d4:03:1e:f5:da:96:13:61:7c:bc:be:3f:ef:64:33:14:ff:
         9e:fe:db:b2:e2:0d:d9:31:11:9e:89:2f:9b:2a:81:e0:04:19:
         de:c4:5b:e0:35:4b:64:b6:99:81:6d:39:d4:db:e8:e6:ed:44:
         e5:23:dc:f9:9a:df:66:18:38:5f:ad:eb:7e:06:e0:a0:02:26:
         eb:32:bf:63:64:b5:6a:bc:9b:45:1e:92:63:f3:2f:eb:2c:e4:
         db:63:3d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:00:08 2024 by rpki-client on console-ams.rpki-client.org