Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3893971-c718-3290-8859-855b0a1d8bcf.roa
File:                     b3893971-c718-3290-8859-855b0a1d8bcf.roa (raw, json)
Hash identifier:          67dTAPHon7mxgDeO6Lk5iO57KnJE81etuOz2186R0aE=
Subject key identifier:   36:F7:40:4A:EA:06:75:DA:4F:48:F9:0F:37:7B:7C:AF:77:8D:3C:3B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFA6FA883A1B778CDDC23C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3893971-c718-3290-8859-855b0a1d8bcf.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33652
IP address blocks:        2001:559:83dc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fa:6f:a8:83:a1:b7:78:cd:dc:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=8a5f4afb-0995-4857-9f1f-b1682f5bdc54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d9:c4:0a:6a:1a:c1:3c:15:fc:34:c1:80:12:
                    d7:52:10:0d:92:e6:99:db:b4:20:67:68:fa:db:03:
                    ff:21:91:04:93:0b:84:31:9e:3d:f7:6b:b9:90:49:
                    55:c5:89:cc:f5:34:eb:d9:b0:e8:14:24:26:e8:14:
                    52:83:75:42:cc:bd:b9:6e:c0:fa:bc:9e:24:92:f3:
                    e3:63:e5:3d:72:ee:1c:fb:94:26:b4:7e:e9:00:31:
                    d5:93:df:b6:58:8f:d3:df:3e:c9:a3:a1:b5:bf:71:
                    15:50:88:13:e9:ea:e3:7c:50:13:e8:cc:11:37:41:
                    61:6b:28:50:96:c1:07:fc:87:26:54:57:27:f0:a2:
                    a7:29:60:e0:6a:4f:04:30:c1:c0:d9:66:59:9a:33:
                    8c:4d:ed:f8:27:b8:5d:ba:10:b4:4b:a4:b3:e6:1a:
                    4c:3f:31:0b:d9:35:87:99:82:51:94:61:e2:72:eb:
                    e0:af:e5:74:e1:a4:bc:1c:86:25:6a:c6:83:30:63:
                    53:2e:2d:cd:88:1d:cb:31:79:bf:eb:11:d2:27:78:
                    e2:e7:94:74:18:e7:fe:d3:d7:e3:27:33:98:e7:cc:
                    97:b9:e7:f8:b7:ae:1d:d1:51:f3:9f:74:9f:36:aa:
                    00:cd:09:95:97:8a:68:84:1b:04:88:e6:13:c1:39:
                    16:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F7:40:4A:EA:06:75:DA:4F:48:F9:0F:37:7B:7C:AF:77:8D:3C:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b3893971-c718-3290-8859-855b0a1d8bcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:83dc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:9f:6f:76:80:34:b8:89:1a:8c:a5:0c:5f:8f:3a:70:16:1f:
         6a:69:69:c0:a6:cd:88:6f:cf:3f:d9:58:54:74:40:bd:9c:3a:
         84:63:d8:6a:e5:55:8e:33:96:c9:59:2d:6f:29:70:34:c6:85:
         05:92:26:95:ca:db:89:26:c8:75:7d:a7:c7:ef:25:ca:4f:d0:
         dc:5a:97:92:12:7c:02:06:f5:71:fe:e4:97:c7:32:71:37:c9:
         b4:87:59:19:b2:35:eb:e0:40:b3:df:3c:34:12:fc:2e:c5:b7:
         6f:c3:51:06:84:9c:4e:69:9a:da:72:b7:32:72:61:63:c7:b9:
         af:40:5a:1d:e5:b9:89:cd:1a:0f:d2:9b:55:d8:02:4f:d0:bd:
         d6:7f:c5:c4:e2:85:34:b9:21:68:71:83:69:25:aa:7a:d3:39:
         60:83:4f:5c:b2:92:2e:4a:7d:80:22:0b:58:d6:8d:83:9c:ab:
         40:96:53:f0:60:7f:32:83:31:b4:60:5e:f8:a7:42:b5:a7:8a:
         90:43:65:b7:ea:72:1b:be:06:7c:bc:a6:94:23:55:9f:2f:2c:
         f3:d1:6c:df:ef:1b:84:40:5f:a1:f0:67:e4:64:3f:ce:53:2c:
         00:30:58:b8:f8:27:3a:47:04:44:3c:1b:4c:4e:c0:ad:1e:75:
         fb:81:a1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:10:43 2024 by rpki-client on console-ams.rpki-client.org