Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ac10425-3149-3c95-8537-cd1f977faefe.roa
File:                     2ac10425-3149-3c95-8537-cd1f977faefe.roa (raw, json)
Hash identifier:          7x5w3KKSy9dJAKRGEk9jtX81QmtSO+Q/CpGBGoASyRc=
Subject key identifier:   71:4C:1C:2E:32:13:A5:DF:A3:09:E7:8B:62:AE:08:5A:87:2B:45:CF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFA470B083EEEDA21F89100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ac10425-3149-3c95-8537-cd1f977faefe.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33651
IP address blocks:        2001:559:c00f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fa:47:0b:08:3e:ee:da:21:f8:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=764892c5-6f76-4ca2-a5e2-b94a644858fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:09:ff:7f:7a:03:05:88:ea:98:33:6e:3f:5e:
                    85:dd:c3:81:d1:61:85:ae:3a:58:1d:21:e6:d9:16:
                    f9:6b:8e:1b:2b:5b:a1:f4:32:af:fb:f2:70:d0:09:
                    e5:2d:44:9a:06:a6:fd:ed:6b:3c:4a:5c:21:1d:25:
                    9e:2f:7c:46:0c:9b:4a:3c:11:d7:df:40:05:d8:1b:
                    ce:69:f0:56:cb:da:48:0e:1d:d9:76:43:b7:aa:48:
                    38:82:9d:59:10:15:a6:ca:c3:5b:2b:2a:3e:ff:af:
                    59:77:9e:08:c4:bc:6b:5e:64:51:f8:e1:7a:c9:ed:
                    0d:34:06:4c:0b:d7:be:6c:aa:4a:93:03:51:f6:f8:
                    ab:60:12:60:93:d4:0c:14:e2:a4:7e:98:c9:68:ca:
                    bd:c5:ae:1c:7e:80:3f:55:a9:2e:70:cd:7d:55:75:
                    db:b1:b6:8f:78:4e:66:b7:be:c9:a7:06:f1:d6:e1:
                    e6:2e:79:88:7f:f1:89:77:cb:24:84:8e:60:2c:04:
                    a9:75:8d:49:68:3c:2a:6d:2d:14:2f:98:bc:ea:93:
                    b8:c1:ef:a9:cf:8b:41:2a:a0:56:53:c0:15:b1:8e:
                    ae:3a:e4:6c:c4:02:aa:c5:7f:56:fe:92:de:e4:c1:
                    60:3e:21:57:25:35:81:71:f4:28:40:c7:7e:b9:ec:
                    16:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4C:1C:2E:32:13:A5:DF:A3:09:E7:8B:62:AE:08:5A:87:2B:45:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ac10425-3149-3c95-8537-cd1f977faefe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c00f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:5a:51:68:88:f5:e4:c3:47:66:36:69:b8:24:2d:9d:55:16:
         cb:82:23:a8:8c:ec:46:ac:0f:ef:85:c4:2b:f8:94:1e:18:84:
         9b:cf:72:42:f8:62:e1:d1:6f:bf:45:16:36:ad:1c:e0:ec:5e:
         93:d1:4f:07:7d:3e:bd:50:84:e0:0c:8c:56:c1:5a:24:57:5d:
         6f:73:bc:15:a4:1e:ad:00:aa:69:8c:0a:86:fa:c9:e7:01:fc:
         d9:85:f7:de:6b:cc:b1:f1:96:d6:28:74:e9:fb:18:bd:f4:ef:
         76:f0:85:2b:dc:de:61:01:d1:1f:13:1a:1f:98:07:23:5f:dc:
         86:74:34:e8:54:41:ad:54:1a:df:42:6b:1d:42:c6:d4:96:43:
         5e:35:45:18:51:79:7a:ba:c0:49:c4:48:8e:21:19:d6:32:8b:
         73:60:6c:fd:8a:ad:eb:3f:fa:02:d2:b9:77:5f:e5:8d:5e:23:
         5b:42:2a:27:2e:89:71:71:7d:c8:a6:e9:e3:3e:14:e6:f6:79:
         20:35:1e:c7:c5:5a:85:91:1a:72:81:17:39:03:7d:8f:67:fb:
         cb:e2:fd:e2:cf:1b:b1:76:f1:fa:60:fc:6e:ee:55:a3:10:2d:
         4b:2c:b8:22:15:12:51:28:f4:3d:da:64:9e:27:c7:38:98:6d:
         c1:81:a3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:51:42 2024 by rpki-client on console-ams.rpki-client.org