Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/283564f5-1ae0-3f53-9927-3f454ac2602c.roa
File:                     283564f5-1ae0-3f53-9927-3f454ac2602c.roa (raw, json)
Hash identifier:          TKVFI3yics+Jh4nh81pu0DGaIxQtAdURutvm8JCpmFY=
Subject key identifier:   19:A4:81:46:14:77:4A:64:85:3F:1F:EC:26:98:AB:9F:6A:7D:7C:7D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847994673CDFF43C246418D3EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/283564f5-1ae0-3f53-9927-3f454ac2602c.roa
Signing time:             Sun 20 Oct 2024 01:00:30 +0000
ROA not before:           Sun 20 Oct 2024 01:00:30 +0000
ROA not after:            Sat 18 Jan 2025 02:00:30 +0000
asID:                     33491
IP address blocks:        2001:559:7004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:99:46:73:cd:ff:43:c2:46:41:8d:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 01:00:30 2024 GMT
            Not After : Jan 18 02:00:30 2025 GMT
        Subject: CN=aee14ad9-c917-48f9-a429-c08426bdfcbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:94:0d:b5:08:8f:ba:08:e1:8c:b8:dd:74:ce:
                    4b:4f:4c:9f:a6:8f:3a:79:5b:14:14:d2:89:58:40:
                    42:6f:2c:8e:80:4e:b9:e6:f5:02:4e:e1:f3:34:09:
                    59:e8:e7:73:13:2c:4f:73:e0:3e:0e:ac:d4:e9:1d:
                    05:38:ce:9d:5e:39:a0:a8:b9:32:17:79:1e:ad:5b:
                    2e:20:ce:5d:08:bc:b3:70:e1:ff:79:33:79:84:39:
                    ea:64:62:43:22:7f:58:90:3e:d6:ae:8e:3e:8c:b7:
                    3a:27:5d:08:cb:d4:c7:fb:ce:dd:c2:b3:42:b7:fa:
                    49:ef:49:79:63:26:51:c1:81:26:1d:e7:af:4b:56:
                    0e:95:84:a8:32:f6:b7:a8:60:91:51:c0:c9:11:de:
                    65:d2:ac:86:42:f0:39:0c:27:21:d5:39:9e:c4:c7:
                    07:db:f9:8c:37:67:2c:d6:f1:1d:36:97:79:64:86:
                    c2:d8:87:67:ab:b7:d3:7a:8a:01:d4:0e:b5:e0:a0:
                    0a:49:ca:88:25:92:f4:d3:82:7c:44:01:2d:64:c5:
                    ca:c4:83:df:bf:c6:aa:2b:59:a0:1a:9c:51:21:74:
                    46:2e:01:6c:24:05:69:07:59:1a:4d:fd:f1:99:22:
                    4c:bb:07:3a:36:36:74:07:9b:88:a8:10:26:d4:39:
                    76:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A4:81:46:14:77:4A:64:85:3F:1F:EC:26:98:AB:9F:6A:7D:7C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/283564f5-1ae0-3f53-9927-3f454ac2602c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:7004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:0f:70:86:8f:58:f9:d7:21:79:17:89:02:60:cf:ff:f3:0e:
         f6:71:8f:ad:7b:a0:21:eb:0a:01:bd:81:ca:39:b6:dd:c9:42:
         b6:b2:54:52:bd:82:f8:32:d8:73:44:88:0c:43:a4:27:98:8a:
         d2:12:3d:ec:2f:73:68:72:6d:8a:80:67:fe:48:7c:58:1c:24:
         38:45:ee:00:4f:5c:d8:14:42:99:4f:8a:7e:af:b3:76:b2:e9:
         38:1d:2e:59:ae:79:3b:fe:39:3f:00:d7:bf:9b:cc:b3:b9:1f:
         c2:f0:e8:02:f1:ce:35:73:33:06:ca:d3:86:ed:4f:c4:79:d3:
         ca:f9:30:ff:c3:53:00:ee:81:8f:23:24:18:cf:96:28:a6:fa:
         e5:9c:d5:04:93:e6:72:90:44:4b:bc:23:38:18:af:9f:ec:04:
         47:5f:45:3e:3d:fa:05:00:e2:d0:5b:cb:ef:22:ff:ba:ad:bf:
         c3:36:ca:30:56:30:57:78:b5:20:ba:f6:bb:4a:47:f4:40:56:
         20:d2:8a:de:6a:c5:7f:f3:81:08:29:ec:67:8c:b2:32:58:9f:
         19:96:4f:9c:f8:95:29:b9:bf:96:1b:f9:6b:64:be:ac:89:2d:
         a7:91:d7:b0:3a:eb:da:e2:a6:4a:69:eb:4e:c6:9a:29:be:99:
         d0:99:00:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 16:14:08 2024 by rpki-client on console-ams.rpki-client.org