Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31a49071-e840-3b24-8c5b-b668b58cd0ca.roa
File:                     31a49071-e840-3b24-8c5b-b668b58cd0ca.roa (raw, json)
Hash identifier:          tcxehOodLLUc57VtgVsVo3KOXwFEFZf2dy/Ll02t4Kg=
Subject key identifier:   1F:D1:52:B6:70:EF:BF:4F:6B:01:02:71:95:02:93:16:C0:F5:5F:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFA3656F26310222CB22B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31a49071-e840-3b24-8c5b-b668b58cd0ca.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33651
IP address blocks:        2001:559:3a7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fa:36:56:f2:63:10:22:2c:b2:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=f1b17ad8-799c-4060-9eab-6109f65abab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:44:6b:69:1a:2a:dc:6f:83:82:43:c4:54:64:
                    40:e6:b3:86:93:5e:1d:b7:df:c0:bc:24:7e:c6:21:
                    bf:1a:a2:3a:8a:29:f9:f5:65:e7:34:eb:bf:41:4a:
                    60:5f:6e:c0:58:61:ec:ba:2e:58:83:bf:9f:1b:38:
                    95:df:a2:8f:e3:86:9e:02:17:43:51:c3:fb:2f:36:
                    34:e0:bd:7e:0d:ee:2c:0a:58:10:08:f5:4c:1d:79:
                    4d:d1:25:22:78:9c:5d:ee:8e:04:1d:d7:94:26:46:
                    d8:d4:df:05:47:60:30:4f:87:a4:fe:2d:fd:c3:59:
                    50:e3:5c:b5:80:eb:8b:ba:ec:f8:1c:b9:58:a5:71:
                    96:de:12:a1:e9:04:cc:25:59:88:2c:26:bc:cf:25:
                    81:0d:21:c5:1b:93:c8:6b:48:96:a1:be:93:73:dd:
                    ff:ef:79:72:a4:7b:94:b0:30:d9:05:40:db:15:ab:
                    cf:9f:a8:ba:e4:4e:61:39:a0:16:85:76:1a:3e:57:
                    bd:f1:ea:99:e1:ff:25:77:a4:c7:65:c4:07:88:1f:
                    5b:c0:ec:9b:8f:c3:4a:c1:91:df:04:cf:38:6f:24:
                    7e:3e:fd:8f:bb:c3:7a:98:22:a3:e1:fc:44:5e:2a:
                    e5:43:cf:bd:80:9d:9a:b3:89:92:cf:0e:34:9a:57:
                    f5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D1:52:B6:70:EF:BF:4F:6B:01:02:71:95:02:93:16:C0:F5:5F:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31a49071-e840-3b24-8c5b-b668b58cd0ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:3a7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:dc:e3:d2:01:5b:c9:3a:fc:cb:0e:17:bc:7d:76:0c:6c:b1:
         f8:52:d0:7f:d3:58:67:4e:f5:d7:05:34:14:0e:09:b6:db:0c:
         cb:f0:cd:21:f1:38:31:df:26:cb:4b:0a:36:64:4e:03:c1:ff:
         73:52:21:6e:bd:a8:9c:0a:ba:80:34:0a:a3:4f:38:12:31:48:
         53:c5:e4:f4:13:2d:c4:4d:0e:11:19:73:aa:9d:7b:e5:a7:ba:
         41:42:ac:98:29:e4:00:c8:1a:49:02:f9:e1:51:a6:ec:3c:d2:
         04:96:4a:78:1d:c7:3f:c6:78:44:4a:95:a4:04:d9:2e:57:21:
         65:67:40:0f:d4:07:c1:29:d2:ca:dd:aa:f8:1b:16:76:b0:c8:
         2a:f1:b2:91:27:33:a9:c7:16:ac:52:fb:fc:02:c8:5b:06:4b:
         1d:4e:e0:cc:5a:6c:13:63:24:7d:58:87:c8:e2:a9:26:de:20:
         8b:dd:1e:61:20:50:6e:2e:d6:72:4c:0c:fa:7e:45:ad:2d:c8:
         42:4f:88:d2:a5:5a:7d:29:ca:f2:bd:2c:90:f4:01:b3:c2:87:
         57:30:76:1b:d2:23:89:1c:04:16:06:b6:d2:51:cc:2a:71:56:
         d3:89:2b:f2:e1:87:b9:92:d3:f4:03:fa:3b:cd:e0:3a:11:f5:
         94:c9:58:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:52:19 2024 by rpki-client on console-ams.rpki-client.org