Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39d4c83a-133b-35b0-8aa3-df2e1347330d.roa
File:                     39d4c83a-133b-35b0-8aa3-df2e1347330d.roa (raw, json)
Hash identifier:          ZO+MD3VhE4gdmS1YV1AQ5W9qscBIFI6mA79F0HUeHPo=
Subject key identifier:   3D:B9:85:10:23:28:AC:A6:E9:7E:73:80:53:43:86:39:51:F4:9C:F4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB00A96C9509802BC792E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39d4c83a-133b-35b0-8aa3-df2e1347330d.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7015
IP address blocks:        2001:559:8788::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:00:a9:6c:95:09:80:2b:c7:92:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=f88b2b56-108e-4572-8acf-003f5a33833e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bc:24:96:77:29:91:70:ee:c3:b5:16:0b:cf:
                    b4:c0:74:ad:ed:d3:44:4e:f0:54:aa:c5:10:21:e8:
                    a8:f4:c5:f3:0d:c0:48:38:c7:24:cb:75:76:25:b0:
                    df:fd:d0:13:38:12:31:f5:64:56:01:cf:c2:d3:f4:
                    ea:0a:43:dc:dc:96:c6:f7:a8:58:b3:e8:e1:3a:91:
                    9e:95:92:77:02:b7:bd:f3:ed:6b:39:5f:0f:fd:89:
                    3a:de:e5:cc:81:e0:1d:3f:fb:b6:11:2b:ac:72:0d:
                    bb:ad:be:dc:db:c9:2b:99:ce:8d:da:da:94:9d:0b:
                    aa:a6:2a:a7:41:49:ba:3a:c6:95:26:24:9d:64:e5:
                    57:1f:7f:4e:cc:1b:cb:94:9f:ad:3a:19:d5:00:4a:
                    06:ff:eb:42:95:69:92:f7:a2:d3:3d:83:1e:8a:80:
                    db:f8:19:ae:c6:38:18:58:ff:b3:3f:9a:8d:91:f4:
                    77:01:3a:51:aa:f7:e3:0f:4c:a6:8f:dc:20:e8:0a:
                    d3:2f:26:8d:65:7b:92:94:d1:0b:9a:79:6c:ca:b9:
                    d9:a8:60:50:f2:0f:25:fb:86:49:c0:df:5a:8f:4b:
                    e6:16:f4:83:90:e3:f8:a0:eb:ee:c5:63:f0:f7:b0:
                    89:3c:f6:cd:ea:1f:57:d2:01:85:06:10:02:d7:51:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B9:85:10:23:28:AC:A6:E9:7E:73:80:53:43:86:39:51:F4:9C:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39d4c83a-133b-35b0-8aa3-df2e1347330d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8788::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:5e:27:be:59:c2:1f:ae:d2:01:9d:a1:63:be:e5:0f:95:28:
         51:db:1a:5a:91:f5:8c:ea:a9:e9:0b:28:37:dc:78:8b:4a:e5:
         cb:95:cd:65:c8:03:54:d9:2a:0b:99:5d:a5:cb:35:f0:c3:38:
         e0:08:3f:d8:52:70:b2:6c:91:34:23:3e:da:60:b5:91:bd:44:
         ca:6f:bb:dc:32:73:41:ca:ae:02:10:a3:de:c7:08:a8:0e:f0:
         f2:6f:e4:b5:c6:7b:03:3c:4e:f5:6f:67:d1:0a:43:b8:b8:7a:
         f9:ec:4b:d0:72:f3:5b:bd:97:56:2a:ae:29:93:a4:aa:e0:02:
         75:03:90:49:8d:aa:fd:fb:4f:68:f8:c5:74:34:91:9d:13:fc:
         da:cc:d9:dd:4e:fc:10:af:7e:22:56:4d:aa:d2:ec:14:7c:90:
         c5:4e:35:79:d8:df:29:83:b5:83:35:26:83:ab:b0:dc:cf:af:
         e6:b1:2d:65:8b:82:9c:03:b1:10:3b:76:7c:f4:82:3b:47:49:
         86:3c:f1:0b:8e:c4:7d:a1:3d:9e:01:c5:b7:ab:58:04:49:4d:
         c3:9b:24:96:3d:80:d9:a9:4d:9b:e9:d7:f2:c5:f8:d6:8d:4f:
         f4:8a:81:7e:e2:57:ee:a5:07:00:97:6e:91:a8:10:b5:b1:88:
         48:31:e9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:22:39 2024 by rpki-client on console-fra.rpki-client.org