Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19508c56-7b60-362b-b120-3382295377f1.roa
File:                     19508c56-7b60-362b-b120-3382295377f1.roa (raw, json)
Hash identifier:          lsPTtJKibkDX1aJns6e2WCel1LszThOAuFApWnJZggk=
Subject key identifier:   0F:34:27:D5:F1:E0:EE:B3:80:54:47:60:0C:0A:57:3B:D5:9C:C7:9C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF813B1B221366A18F854C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19508c56-7b60-362b-b120-3382295377f1.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33657
IP address blocks:        2001:559:c370::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:13:b1:b2:21:36:6a:18:f8:54:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=2af511c5-3305-4fe1-8f3f-84a081f95c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ed:26:9a:b1:50:a9:95:09:91:82:b5:4e:62:
                    66:68:96:f8:c2:fa:55:9a:de:f5:cf:b5:97:c0:63:
                    dc:4f:8b:21:cf:10:13:af:44:97:1c:76:85:d5:58:
                    ab:65:6b:7a:e3:45:6d:e9:fc:11:d1:4f:27:68:8a:
                    96:8e:2d:1d:7a:27:f5:a8:27:7c:45:14:33:4d:08:
                    56:66:4c:5c:39:14:c6:51:cb:72:ff:ce:d2:c4:9f:
                    8e:f4:c5:fd:92:5f:a7:aa:9b:21:76:ee:98:82:74:
                    11:75:b8:a1:af:1f:04:1f:2e:98:71:fe:e4:cf:38:
                    7c:d0:b7:68:1a:40:fb:55:3f:d8:4f:a1:5a:39:c4:
                    38:9d:10:93:27:da:f4:12:83:71:88:f0:e8:30:f1:
                    9c:c5:53:8f:3a:48:ee:68:b1:3d:7c:21:c3:ec:da:
                    5e:b3:f7:17:6f:b8:92:46:2e:b9:c2:3a:d1:af:35:
                    d4:48:c9:d0:50:3c:95:1e:30:36:0c:eb:55:55:7f:
                    33:c7:e5:19:80:9d:14:ec:7a:12:42:b2:35:75:e2:
                    d7:5a:cd:f3:4d:1f:9e:2a:4e:63:e5:6c:b9:69:84:
                    9f:79:64:db:60:92:5a:43:c4:71:78:54:90:fc:c2:
                    13:a4:59:a2:79:2f:f4:de:90:f4:76:2e:8b:94:6e:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:34:27:D5:F1:E0:EE:B3:80:54:47:60:0C:0A:57:3B:D5:9C:C7:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19508c56-7b60-362b-b120-3382295377f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c370::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ca:dd:0f:69:c1:41:57:79:2c:b0:44:26:12:7f:51:a7:39:
         10:36:a1:3c:c8:85:72:8a:2c:8f:6d:04:cc:94:59:50:ac:82:
         0b:af:01:16:4c:c5:98:bf:12:33:90:1f:0d:ba:ca:06:35:33:
         f3:7b:23:d5:98:1e:99:2c:65:c0:2b:6d:d1:f0:b3:ed:81:26:
         96:6d:8a:e5:45:4e:89:ea:56:f8:75:97:13:aa:3f:52:56:c4:
         fd:86:24:02:3f:2b:62:d2:c0:8f:fd:c6:28:09:ac:3b:12:43:
         2a:e8:00:81:ae:8e:43:0e:13:cd:e8:13:84:de:ae:83:e4:7a:
         2f:a2:fc:04:99:4a:a4:52:c7:d4:76:ad:29:e1:0f:a7:cd:4b:
         23:bf:d9:11:86:b2:08:96:c4:1b:a3:dc:13:e3:5d:a7:98:ab:
         f7:4a:12:d2:8d:d9:19:fe:f3:d3:ec:e7:d3:bc:7b:a9:49:9c:
         2d:ad:3a:7a:a7:5c:a2:f9:56:e7:7a:ed:b8:c1:8e:9a:46:9c:
         40:75:f3:9b:57:6b:c4:5d:ec:95:94:d7:e0:57:d9:62:9e:42:
         a9:c1:de:75:16:36:d7:12:e0:48:f5:42:9a:e5:74:f6:03:d5:
         1d:52:e3:db:59:5c:d4:49:1a:0a:38:33:4c:3e:01:55:1a:5d:
         0e:5c:a5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:50:12 2024 by rpki-client on console-ams.rpki-client.org