Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6732cb0-ba03-3b38-a211-8f4825619db4.roa
File:                     e6732cb0-ba03-3b38-a211-8f4825619db4.roa (raw, json)
Hash identifier:          7BMQwWMB0WSq2UITOYoMeFMwJjHqRk/ddXv2X8ns2Sw=
Subject key identifier:   40:C0:70:E4:52:A0:E0:D5:62:2E:6A:E5:0D:D5:72:BF:32:30:04:5C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF774C9E90551E609D42880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6732cb0-ba03-3b38-a211-8f4825619db4.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33652
IP address blocks:        2001:559:561::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:74:c9:e9:05:51:e6:09:d4:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=ab878d70-96c0-4f75-97f5-37c1375d84a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:59:1c:a9:5a:73:15:58:08:0f:8e:6f:ba:e0:
                    14:a9:a4:3a:41:98:d1:7d:2f:b1:d1:32:7d:82:25:
                    35:6d:8e:0e:b4:fd:66:c3:95:0c:d4:06:2a:83:11:
                    44:87:01:b9:aa:80:93:c5:9c:79:03:a1:6a:47:23:
                    b5:83:36:6f:ee:52:7c:cf:d7:3f:6e:f2:db:b6:49:
                    65:1c:60:05:ad:d2:dc:16:0e:b0:6f:92:ae:23:95:
                    e3:6b:25:ee:ad:69:58:ce:ba:56:4e:c6:00:d3:67:
                    af:9f:19:8e:4a:15:32:75:dc:a3:0e:60:8d:15:53:
                    6b:c4:a6:3f:b6:6a:ab:e5:c5:3f:bd:b0:b7:9b:e8:
                    0b:26:c7:a5:67:83:b3:39:1b:e4:82:a8:74:0a:aa:
                    15:29:f2:d9:37:d7:d3:34:72:23:e3:6d:b0:84:95:
                    7c:e2:55:8e:6a:3a:40:5a:44:f7:33:0f:61:7a:d7:
                    dc:c9:ea:8b:3c:98:2c:46:4f:a1:41:3e:f4:08:1d:
                    6c:b7:55:35:f0:bf:3c:b1:56:00:ae:e1:bb:31:c0:
                    3a:ba:d0:ee:5f:96:2a:bf:1c:c5:57:c2:a0:77:e6:
                    13:ac:0e:ce:0e:60:0a:16:00:bf:b2:3d:ca:72:50:
                    f7:de:00:7f:ec:09:6d:8b:a0:17:b5:f2:29:f3:4b:
                    a7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C0:70:E4:52:A0:E0:D5:62:2E:6A:E5:0D:D5:72:BF:32:30:04:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6732cb0-ba03-3b38-a211-8f4825619db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:561::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:3b:55:9e:b9:ca:b6:88:e5:11:3d:c0:d0:8c:ff:b5:f2:60:
         a4:13:b7:d6:06:89:80:b8:25:ad:a2:a2:9a:84:19:bf:24:86:
         fc:57:ab:e4:11:76:75:5b:8c:f7:f2:fa:36:da:54:e0:7d:96:
         30:3a:9a:52:2b:79:99:68:7b:94:dc:b3:06:59:47:9f:41:3b:
         26:07:1e:be:87:1e:f1:0f:81:8d:fe:11:d4:de:1f:9b:df:1c:
         54:b6:a0:c7:60:e0:8a:fe:39:e0:dd:b0:21:0f:d7:80:69:44:
         57:d3:60:c1:5a:c1:f9:ba:7e:6a:41:9f:12:3a:17:23:86:fc:
         ae:f2:fc:3d:02:46:dd:f4:48:cc:c0:ff:ee:34:61:31:9e:7b:
         da:74:55:3c:37:8c:e8:02:8c:6a:6a:37:95:52:1b:c0:bc:35:
         76:a3:64:79:21:79:25:72:b8:43:ff:bc:28:aa:eb:79:8f:33:
         5b:e6:80:61:c4:dd:d1:9a:58:cf:20:69:5d:b4:ad:d9:52:3a:
         a6:74:e5:13:a8:2d:ac:9d:45:62:a9:5c:1f:83:ec:0b:16:2a:
         33:38:0c:3a:8f:6c:41:be:fb:2e:70:ff:58:d5:b8:af:b2:dc:
         38:9c:ba:ff:7b:d5:58:f3:ec:1b:5e:d7:ae:2d:90:06:42:83:
         b8:21:b8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:47:59 2024 by rpki-client on console-fra.rpki-client.org