Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/142a10ce-a80a-377b-b4e4-4f4d8a811ed9.roa
File:                     142a10ce-a80a-377b-b4e4-4f4d8a811ed9.roa (raw, json)
Hash identifier:          BydLD/ixztjPZX3Da/h7+rXTw0LPzutx8zcqhPC4wec=
Subject key identifier:   B3:8C:F3:3A:A2:D4:AE:DF:05:BC:46:6B:9F:72:5F:BC:6F:6E:67:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848424B0EF622EF6230C2EC5F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/142a10ce-a80a-377b-b4e4-4f4d8a811ed9.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     36732
IP address blocks:        2001:558:6010::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:0e:f6:22:ef:62:30:c2:ec:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=5f169d5a-027c-4f5d-9b70-fcdfcbb6b4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a4:02:6c:bd:3c:23:ab:02:5a:d4:1a:64:f6:
                    8a:a4:6b:54:1c:39:92:1e:8b:ea:4d:c7:e2:8d:bd:
                    88:21:76:c4:11:25:6b:7a:0c:ce:03:eb:42:bb:d6:
                    3f:1c:12:38:52:85:a5:3d:fa:fb:80:e1:f4:9c:3b:
                    59:09:e9:89:32:c4:ff:20:fb:d4:df:19:cf:43:66:
                    e9:5d:f6:b3:48:c6:c1:df:b1:30:7c:8a:d2:0a:fe:
                    cc:3b:8f:74:0b:91:b3:24:1b:4b:dc:32:ea:fa:b2:
                    ca:e3:c7:52:4d:ce:8d:95:61:1f:40:5c:f8:0f:ec:
                    b2:a4:51:a4:2f:8e:a1:a9:b1:ec:69:ab:b1:58:14:
                    ee:f0:4d:c1:f4:b2:d7:dc:f2:bb:03:b5:af:d7:35:
                    7e:b2:8b:ed:67:95:c6:3c:7b:fc:9e:ad:5d:93:47:
                    1d:d5:f6:1f:50:3f:6b:68:34:1d:c2:07:97:80:f8:
                    e0:f3:97:9e:ce:42:68:77:11:e6:69:2c:5a:d2:35:
                    e4:eb:34:64:ca:43:c7:6e:52:6b:c7:4d:1c:16:ed:
                    5b:09:e7:52:5b:27:31:25:fc:f9:88:20:e5:17:ac:
                    92:a9:f8:05:3a:22:eb:01:d6:fc:fa:e7:3f:c0:c7:
                    7b:76:77:fd:cd:0d:01:1c:3c:a9:cc:00:8b:cb:74:
                    44:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8C:F3:3A:A2:D4:AE:DF:05:BC:46:6B:9F:72:5F:BC:6F:6E:67:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/142a10ce-a80a-377b-b4e4-4f4d8a811ed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:558:6010::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:05:f3:78:e9:f7:c8:15:43:b1:fc:b5:52:79:f2:bc:4d:78:
         22:8c:c4:fa:08:7a:d0:3c:b3:6b:72:8c:c8:db:49:92:e9:23:
         60:36:d6:5a:b9:15:d8:f0:61:f8:91:1e:6a:86:49:e8:f6:fb:
         0c:cf:5b:8b:5a:63:21:44:56:8c:1f:ce:5d:6e:f7:32:b2:a3:
         dc:a2:15:66:35:35:9f:fc:4c:8d:16:ca:81:19:55:21:81:bd:
         58:b1:13:2e:7f:ab:25:b6:0b:87:19:ed:8a:e7:bc:2c:67:45:
         20:33:05:a1:30:bb:56:6f:f8:b0:19:ae:be:f6:a2:91:4f:c7:
         7e:a1:30:b0:70:7e:9b:12:25:7a:7a:fc:1c:bc:98:bf:2f:5b:
         fe:28:d2:68:07:a9:ad:55:01:b8:21:34:4c:40:9b:54:9d:f3:
         03:2c:27:4a:f0:ac:79:f5:21:fd:5c:6e:be:35:c3:ed:af:90:
         ec:ca:4b:81:30:3d:a9:41:a6:65:c0:49:c3:c2:5d:d7:0e:9a:
         d8:38:e2:d6:27:c2:20:60:a4:48:86:a6:1b:48:04:62:d9:2b:
         a6:9e:70:4a:95:54:b7:30:c0:da:f8:43:25:21:02:27:33:49:
         dd:21:85:21:58:44:f6:8c:a2:4c:f5:36:16:7b:cf:66:44:c5:
         f7:9b:f7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:35:38 2024 by rpki-client on console-fra.rpki-client.org