Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/096493dd-4210-36c7-84bd-985c739dff09.roa
File:                     096493dd-4210-36c7-84bd-985c739dff09.roa (raw, json)
Hash identifier:          9YfQbythF0Z4Y+kUuLVe6hiquIsfiJAkYqhFiZeBik8=
Subject key identifier:   74:8B:75:B5:87:66:2A:03:FC:F5:89:E5:0E:DC:68:8B:2F:00:D1:3B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CAE26427F10CBDE12F520
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/096493dd-4210-36c7-84bd-985c739dff09.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33657
IP address blocks:        2001:559:4d7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:ae:26:42:7f:10:cb:de:12:f5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=3d498a29-7f84-4b4f-8cb3-b87e83c40b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:be:8e:00:9e:bb:8a:39:ee:04:44:f0:0c:8b:
                    b0:df:7e:b5:41:ef:48:d1:93:fe:11:f8:d4:75:c0:
                    0a:01:d8:61:36:b6:50:59:4d:2d:fc:24:d2:3b:d3:
                    60:7e:3b:7c:9e:54:c3:9b:47:f8:35:03:32:d1:38:
                    cd:d4:0d:62:c7:73:aa:25:ed:87:bb:36:e8:64:c0:
                    0e:a3:df:6f:c0:c7:26:64:80:f7:a5:ed:4f:35:b7:
                    5c:cc:66:12:1f:c7:e6:b7:81:c5:c8:e3:23:ce:c9:
                    21:6e:1d:e6:16:64:79:49:14:cf:48:0e:96:88:c5:
                    f1:89:5e:78:bb:a5:b0:04:7b:39:fa:63:99:ca:9a:
                    11:d3:06:06:6c:03:ce:22:ee:e0:7b:53:c3:4e:68:
                    5d:ed:ef:b2:e4:80:84:cb:d9:d2:fc:dd:7f:a6:5f:
                    ac:21:12:66:70:e3:7f:bf:90:6f:27:88:ee:23:6c:
                    79:6e:7c:ba:80:82:2a:82:87:26:2f:8a:82:fd:9f:
                    f1:2c:3b:c9:62:47:51:0a:ac:f5:ae:0b:91:85:d1:
                    6c:d8:71:e9:9b:89:33:b2:36:49:a2:d9:8c:96:6a:
                    51:63:3e:e9:87:8d:92:32:7e:09:75:60:33:53:05:
                    cc:e3:01:4f:8f:aa:80:78:25:fe:01:47:ca:46:55:
                    44:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8B:75:B5:87:66:2A:03:FC:F5:89:E5:0E:DC:68:8B:2F:00:D1:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/096493dd-4210-36c7-84bd-985c739dff09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:4d7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:40:01:76:b5:3d:fb:94:e3:b1:92:ed:49:62:ea:90:4a:f6:
         64:93:71:69:4d:ff:dc:5c:ed:86:c6:e6:7e:6b:e2:92:ff:e0:
         9c:d8:90:bf:96:76:de:34:ad:42:a6:49:45:b7:d3:67:62:e4:
         01:1c:7e:e9:b6:06:b0:cf:08:f5:2c:e5:86:9b:f5:da:7f:df:
         1b:2f:1b:2e:9f:8e:5d:0c:c8:22:a0:83:ec:a4:6f:c5:94:38:
         eb:1f:90:ca:ff:ee:ea:36:97:38:96:a3:76:bb:6e:f5:00:a3:
         4e:87:a2:ab:7a:b4:2f:65:98:31:e7:94:b0:4e:37:85:0b:6f:
         6b:e7:44:f0:65:0f:cc:9a:64:85:3c:c6:f4:cf:de:e4:9e:3d:
         c8:ce:9a:bb:7a:a0:43:28:c9:f5:71:9e:29:bb:26:d0:14:d0:
         0f:70:4c:da:30:5c:17:e0:85:9b:83:aa:bf:95:b9:b0:3f:56:
         fd:55:92:ee:d9:51:11:4a:c2:81:24:fa:0b:16:95:20:8d:d4:
         ea:36:19:31:90:25:af:48:12:48:ca:35:51:c8:39:86:1d:26:
         e7:a3:49:5c:ef:fd:ea:d2:bb:7d:fa:30:ed:b9:dc:46:95:18:
         8a:6e:41:23:43:46:c3:be:48:cc:32:a3:12:13:d0:ae:1f:d4:
         67:6b:13:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:24 2025 by rpki-client