Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc3add4c-a7b8-3045-83ba-4661d142c3f3.roa
File:                     fc3add4c-a7b8-3045-83ba-4661d142c3f3.roa (raw, json)
Hash identifier:          XdbEFIkd/j5VkqxQk83n3Isca89hBwBVlrUpu1DbZt4=
Subject key identifier:   3E:72:49:00:1A:41:50:4C:6D:9F:BC:FD:D0:7C:47:51:60:91:20:DC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAE1DA263C9F6A4081C8B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc3add4c-a7b8-3045-83ba-4661d142c3f3.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     21508
IP address blocks:        2001:559:740::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:1d:a2:63:c9:f6:a4:08:1c:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=897a93e8-1013-4174-a568-b2d8aa02c966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b6:59:d7:e1:c0:65:73:05:9c:a2:b3:83:8a:
                    9a:01:3d:ec:b9:3e:b1:de:75:f2:81:64:e0:b1:e5:
                    e1:27:6d:ef:f5:29:93:e7:b4:14:4f:06:c4:a1:18:
                    33:ad:8a:29:21:fc:77:8e:d3:dd:1e:c3:e1:2b:ff:
                    ab:44:c4:fa:3e:5a:8b:07:83:3f:66:3f:2c:a0:86:
                    8d:6b:92:b3:9b:e4:ca:81:2d:5f:be:a3:4a:c6:5a:
                    cc:f5:d4:50:e6:ab:76:da:d5:02:7a:f2:36:01:17:
                    22:1e:8c:79:fc:c0:38:e5:b1:01:98:55:69:9d:1b:
                    c7:72:41:71:09:27:1f:0d:4f:2f:60:aa:f0:f1:7f:
                    63:71:64:fa:a8:e4:56:1e:e5:25:11:a0:b4:5a:a1:
                    26:93:e3:51:0b:11:3a:c1:41:fd:41:4b:26:44:d5:
                    7b:7b:40:5a:82:23:3c:89:fb:b1:8d:25:a1:ec:2d:
                    a4:de:12:67:47:cb:40:d6:9e:e2:e8:be:fe:56:43:
                    20:c6:2c:b8:47:d9:cc:52:38:56:60:9c:0b:6e:9b:
                    f3:80:6b:d0:3a:3a:7c:70:95:77:b7:6c:d2:68:82:
                    28:d0:fe:87:b5:1e:16:b5:d1:5b:39:08:99:65:7f:
                    e2:be:cf:1f:f3:86:6c:3f:15:86:5f:de:f0:b0:f9:
                    a9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:72:49:00:1A:41:50:4C:6D:9F:BC:FD:D0:7C:47:51:60:91:20:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc3add4c-a7b8-3045-83ba-4661d142c3f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:740::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:36:e0:83:ca:42:0d:59:07:23:f6:80:92:08:bd:77:c4:cb:
         7d:10:05:48:7d:39:66:da:dd:11:67:aa:88:5d:d9:5d:5c:b0:
         e3:43:c3:52:bb:ef:5c:e4:5b:8c:d7:4c:7c:14:ba:db:d2:4b:
         0f:97:b8:18:95:23:95:44:60:49:23:a9:b5:f7:87:70:b9:da:
         45:2c:16:39:54:8d:16:0d:44:0f:11:76:39:59:b9:89:4b:20:
         3d:9a:56:58:de:77:a2:6c:8a:2b:2b:f7:82:5b:51:44:b0:74:
         3e:17:75:ad:e3:a6:cd:e6:6f:12:8f:25:6d:b7:d5:56:2e:38:
         67:77:5a:9c:6b:5e:d9:bc:d8:4e:09:fb:6f:35:b5:50:0a:4a:
         5b:4f:d0:c2:df:0f:52:d8:66:bf:56:45:9b:4f:a5:ad:89:9e:
         0b:40:48:06:14:d1:3e:b4:5a:93:2b:13:bd:49:98:90:25:99:
         f3:f5:c1:24:17:b0:db:ec:9f:a6:c4:d3:53:78:e3:c6:79:46:
         ae:dc:4f:d9:6d:02:5d:f6:09:8c:e3:c9:d7:fa:b1:0e:59:9d:
         89:35:12:9c:55:58:27:11:d0:83:d9:06:0a:a3:fa:f5:0a:8e:
         c7:51:f7:48:29:51:ba:e7:00:b3:8d:39:1b:c3:26:02:56:8f:
         4a:e6:20:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:49:40 2024 by rpki-client on console-fra.rpki-client.org