Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3481db29-c0c7-34c4-83d7-41ba7040b80d.roa
File:                     3481db29-c0c7-34c4-83d7-41ba7040b80d.roa (raw, json)
Hash identifier:          yjliXR+9WZ5m3ANsQpL5TFfTjMAa5UZlSOAgz0ED9oY=
Subject key identifier:   95:82:CF:65:18:A6:DD:68:A5:F8:97:08:AD:A7:4B:10:83:84:8B:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF72A6893C4227BB4093840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3481db29-c0c7-34c4-83d7-41ba7040b80d.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7016
IP address blocks:        2001:559:877d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:2a:68:93:c4:22:7b:b4:09:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=0b98d72c-dc54-42c7-97e4-6cc1dc112f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:34:9a:56:0c:3d:42:01:05:04:3d:4f:80:
                    68:51:1d:9e:96:7c:6c:70:54:6d:77:9f:b0:a8:79:
                    fc:34:a9:0b:42:3e:47:e3:7b:f1:a2:03:7a:a6:13:
                    be:08:a4:a8:13:6d:01:66:f4:86:50:0c:89:eb:be:
                    5d:66:77:98:54:a2:2b:c4:c4:89:d5:1d:69:1f:b7:
                    4d:f8:b0:f9:3e:55:e6:5b:f0:fb:ac:03:e6:fb:56:
                    ac:6d:ba:41:d4:e0:84:df:b2:5e:7a:85:48:da:85:
                    de:57:51:90:4c:ae:bb:a0:eb:13:ac:f3:3f:df:c5:
                    e7:eb:b1:5d:5e:ac:21:9e:89:be:23:7d:ff:79:55:
                    6f:2b:5a:e8:d8:c3:ed:4f:d6:3e:4b:31:00:90:f9:
                    b1:0d:4e:84:af:62:be:35:73:15:d1:44:15:a7:4b:
                    20:43:59:00:36:09:f0:33:11:69:73:f6:fa:24:e6:
                    09:cf:c1:69:4e:a3:ac:d4:61:d0:7d:4f:96:38:c7:
                    7b:f2:07:02:2d:15:f9:8f:76:7c:4a:dc:2a:9f:e2:
                    9a:b9:bf:68:56:1e:4e:cc:67:f5:40:7b:71:3f:c3:
                    e3:f8:16:6c:08:01:32:67:98:af:fc:69:b4:1c:c8:
                    2b:ed:b9:22:62:58:eb:5b:33:36:16:d2:b3:7c:e3:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:82:CF:65:18:A6:DD:68:A5:F8:97:08:AD:A7:4B:10:83:84:8B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3481db29-c0c7-34c4-83d7-41ba7040b80d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:877d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:36:57:80:ff:4f:62:4e:78:a3:61:a7:8d:93:07:0a:0e:4a:
         18:b7:80:89:09:ef:3f:14:4d:14:e7:18:22:66:72:e8:c2:9b:
         88:e6:2a:ae:52:bf:0c:84:35:f8:88:59:0e:70:35:5a:3f:c0:
         3d:b1:0c:0e:34:2e:4d:cf:0d:dd:66:46:f2:8e:a5:e7:20:a1:
         83:ab:fe:e5:bb:f9:46:03:d9:ae:d3:18:58:15:43:b2:fa:a4:
         c3:63:a8:4c:95:d8:7a:e6:71:d7:94:01:3f:72:16:7a:a4:59:
         78:77:1e:1d:ef:ac:55:45:66:bf:17:40:65:5d:f6:78:72:2a:
         32:ba:63:a8:e6:b1:5d:84:46:de:f1:a6:a3:19:9b:b2:dd:b6:
         27:49:07:31:51:b7:ad:0d:09:a2:49:c7:29:f4:67:92:f9:ab:
         10:50:0b:ca:39:c1:70:c6:28:e5:b7:55:fd:e4:ca:7f:6c:3b:
         df:25:a2:b8:d3:a1:2f:46:68:2a:2a:e1:6a:21:37:03:ce:2c:
         18:42:ff:4c:68:63:5d:f9:93:d1:93:e1:ac:93:48:64:ed:82:
         96:c8:ec:f8:6b:6e:69:02:20:21:95:ff:f2:97:6b:8e:7c:c4:
         66:04:d1:c4:8a:1f:af:14:2c:23:da:f2:fc:c6:9c:77:6c:ac:
         d3:c5:1f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:59:09 2024 by rpki-client on console-ams.rpki-client.org