Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b9fc41c-5c3f-3166-8222-91e227cc4c3d.roa
File:                     2b9fc41c-5c3f-3166-8222-91e227cc4c3d.roa (raw, json)
Hash identifier:          SI4lwpb3cGWXy+xTyTRsKHP18dwZxixnirXYYm6d7HU=
Subject key identifier:   B8:CB:FF:0B:17:21:3C:48:CC:9D:85:9E:8D:0C:98:6D:3E:22:DB:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF80FB010DB9C60A03F2B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b9fc41c-5c3f-3166-8222-91e227cc4c3d.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33657
IP address blocks:        2001:559:816d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:0f:b0:10:db:9c:60:a0:3f:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=40775398-bbd3-4315-89be-4e75a59b8dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:64:9f:64:ef:d5:25:55:a4:bd:ac:fe:f7:
                    29:ce:6f:ae:f2:d2:c8:4e:dc:25:3a:9d:c4:e0:9b:
                    99:84:12:16:81:a1:22:5e:6b:a6:49:f1:ec:4a:1f:
                    e6:90:52:39:45:95:d5:10:7b:9d:fd:fc:d1:b3:48:
                    45:fe:4c:cc:1b:ce:0a:81:10:5c:5c:06:34:80:20:
                    77:fe:7e:2e:cc:97:78:41:2f:5b:5e:e0:d3:3a:65:
                    b7:97:f5:43:b5:39:fa:88:8a:33:28:7a:f0:a0:68:
                    d9:a9:a7:70:ad:9c:80:44:2e:4d:08:1b:3a:3e:3b:
                    d0:61:3f:2b:a4:66:dd:5e:cb:b2:46:2c:d8:9e:28:
                    01:b4:60:9c:f8:87:6d:4d:3a:21:09:59:b9:73:7e:
                    e8:9a:4b:1e:69:2a:5c:06:31:f7:db:d8:b8:0e:37:
                    bc:8b:16:3e:2f:63:4a:a6:09:bc:18:bc:db:4e:46:
                    b9:dd:52:22:5b:fb:7b:57:a2:e2:7a:ef:19:16:80:
                    11:14:ca:44:41:41:bf:9a:a2:95:c2:77:c6:a8:fa:
                    d3:82:a5:42:6a:74:e8:42:68:0d:b0:e3:01:f5:7d:
                    33:07:13:02:9e:6c:8a:fe:44:ac:c6:2f:83:a3:e2:
                    c7:e5:9a:fd:b9:8b:cd:75:30:c6:5e:d1:98:74:fa:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CB:FF:0B:17:21:3C:48:CC:9D:85:9E:8D:0C:98:6D:3E:22:DB:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b9fc41c-5c3f-3166-8222-91e227cc4c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:816d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:21:0e:d4:68:cd:ec:3a:f9:ad:18:11:cd:4a:81:e8:3c:66:
         77:65:2a:37:17:30:6c:49:f2:c7:74:a8:fa:43:bb:7e:89:66:
         ef:da:1d:e6:01:2e:6b:92:47:a0:d0:7e:90:a2:d9:bd:a8:2f:
         a0:92:d7:3e:ef:51:bb:f6:bb:1e:b9:55:0a:71:f6:09:32:dc:
         59:f7:f8:88:ed:cd:5c:ec:2a:69:5b:40:f9:50:e2:23:4a:48:
         3a:b1:42:21:ac:a1:03:52:ec:94:55:ed:0d:bd:f0:90:5a:a9:
         e1:f9:41:ab:f9:be:50:b1:88:fd:a7:24:db:09:06:5e:4b:ef:
         eb:9b:48:d7:2f:14:a4:a7:dc:af:12:b8:1f:44:73:49:81:20:
         fb:36:48:23:c2:3f:36:60:54:cf:09:be:b1:80:65:19:58:19:
         1a:75:6f:1a:d5:ec:f2:21:3e:dc:88:b0:d1:cd:97:7a:e1:df:
         61:a9:e1:3f:aa:eb:c6:61:2a:14:e5:7d:e4:58:65:08:ef:7d:
         71:52:60:3c:74:d4:f7:40:09:65:51:77:17:a5:98:a2:d7:97:
         2b:3d:79:cd:b0:7d:0d:3e:75:2e:71:1d:a4:94:04:1f:fe:29:
         31:8d:38:ae:5a:65:60:44:3a:08:d8:2e:06:38:cf:23:8f:5b:
         0f:8b:1b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:36:51 2024 by rpki-client on console-fra.rpki-client.org