Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a95cb9d-f9ad-3663-8195-9e88d1c824bf.roa
File:                     0a95cb9d-f9ad-3663-8195-9e88d1c824bf.roa (raw, json)
Hash identifier:          6guJrWw6VfqXx0cgH10xKiNPXJwj/2dpa7goF6NsoDE=
Subject key identifier:   25:BE:E2:67:52:13:0B:0D:24:D0:A7:14:56:36:86:0C:69:02:3E:89
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7788C222116FA06C32F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a95cb9d-f9ad-3663-8195-9e88d1c824bf.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33652
IP address blocks:        2001:559:c212::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:78:8c:22:21:16:fa:06:c3:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=2664e40d-0e63-47b7-8f63-a860733723f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6e:38:d5:26:7e:00:08:f4:a6:a8:48:dd:17:
                    1d:d1:f5:98:c0:db:b5:6e:05:48:a8:cb:0d:05:8e:
                    a2:99:94:97:56:96:2f:73:1a:7e:aa:f9:60:5e:a2:
                    41:df:13:43:3e:2c:7a:39:bf:5c:2e:15:1e:85:f8:
                    9f:ee:0a:d4:3f:29:63:6c:d7:b9:75:2b:02:94:81:
                    09:14:af:2a:52:00:f2:c1:bb:da:3b:c9:61:07:55:
                    ce:54:0c:2e:2c:32:63:49:72:91:40:28:45:4e:dd:
                    5c:58:70:7c:b3:c5:0b:89:07:b9:4f:46:82:a9:69:
                    b0:31:ac:17:9c:9c:84:18:14:51:c2:ae:82:ea:2f:
                    f3:21:d7:28:80:a0:30:88:0a:b7:04:1b:a7:fd:42:
                    bf:7a:af:06:6c:b4:6d:00:b8:ff:a8:58:b2:fb:46:
                    d9:f5:1e:b7:a6:7a:dc:5b:c8:dd:f7:1b:71:3e:e4:
                    ac:31:28:39:5c:f5:c5:1c:db:74:27:54:80:c1:6d:
                    71:6e:69:a9:4c:30:45:cc:d9:98:18:fa:e9:f4:3c:
                    bd:32:db:28:92:c2:16:ae:00:cd:8a:00:ff:7e:92:
                    2f:1b:83:51:5f:9a:f7:7d:18:43:11:82:c3:15:e9:
                    88:4f:4c:e0:6e:b4:72:2b:a7:55:5a:e0:fa:56:05:
                    d1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BE:E2:67:52:13:0B:0D:24:D0:A7:14:56:36:86:0C:69:02:3E:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a95cb9d-f9ad-3663-8195-9e88d1c824bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c212::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c1:4f:7e:14:ad:5a:a7:b9:84:13:4d:6f:a7:0e:21:23:14:
         b6:f7:f3:36:26:3d:01:0f:35:a1:fb:61:29:6b:f3:e5:7b:f9:
         2d:ba:b4:4d:9b:ef:fe:61:b1:92:60:08:1a:71:5a:c7:b9:f0:
         8c:5c:cf:9d:06:36:20:41:33:de:da:2b:35:5f:8e:4e:21:d3:
         5f:02:2b:f3:13:96:b5:3f:74:5f:54:5f:37:87:47:b1:36:b3:
         47:36:44:72:07:58:52:2b:fa:37:d3:8e:1c:d0:c5:55:c5:52:
         bb:47:a6:74:91:90:96:c4:de:8b:6a:10:99:3e:6f:40:4b:bc:
         2d:44:65:9a:33:3b:4f:71:b5:a3:f7:f6:e1:4b:61:7d:f9:00:
         08:b7:09:97:29:42:da:bf:b9:a0:81:c1:74:14:a5:35:03:7d:
         c2:a0:a6:02:1a:b1:0f:42:31:19:2b:e9:b9:fb:ad:d2:e4:f0:
         62:48:73:8b:51:58:ac:af:06:6e:15:7e:15:8b:28:b3:59:cf:
         8c:98:85:b4:12:77:8e:af:f9:5e:9f:69:2b:d0:e3:90:ee:5a:
         69:4e:43:8c:54:d7:57:04:6e:2a:3c:ee:a1:92:3d:5c:1a:79:
         d3:d5:7e:0c:33:b5:7c:c5:d6:63:16:2a:fd:34:50:fc:dd:9b:
         5b:cc:59:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:55:08 2024 by rpki-client on console-ams.rpki-client.org