Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/420d58f4-09fc-3fb0-a886-539007aa268a.roa
File:                     420d58f4-09fc-3fb0-a886-539007aa268a.roa (raw, json)
Hash identifier:          wjuzUyoj5ZdaJpOUs6LXzEFo5xhGiHhyFP2wlMlJrJk=
Subject key identifier:   04:30:E3:87:C6:B0:62:88:0D:81:B1:24:FE:7D:30:45:F6:AF:6F:DD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFBDD2727A399BC9E076920
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/420d58f4-09fc-3fb0-a886-539007aa268a.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        2001:559:81fd::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:dd:27:27:a3:99:bc:9e:07:69:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=2949637e-aeaa-475f-8ef9-93b6946dd6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:c5:54:13:0c:fd:8b:c5:49:20:b1:97:56:
                    6c:0b:d8:69:c6:76:75:77:11:d7:9e:e3:52:fc:cf:
                    8d:76:4d:d1:be:d6:28:7c:dc:fc:f9:01:58:86:86:
                    eb:51:c5:ef:38:6e:58:34:d9:1c:fe:ab:75:6f:5d:
                    54:3b:d5:6d:c5:9c:a1:f9:06:0f:85:2e:cb:29:39:
                    67:f7:32:94:1d:2b:c9:e3:24:e1:4e:b9:b7:12:54:
                    59:fd:d1:16:ca:98:18:fa:5d:11:58:a4:d4:d4:bf:
                    e0:c0:95:a2:83:52:ab:ea:7d:96:1e:d0:cf:9e:c9:
                    15:93:9f:59:60:f1:45:40:6d:8b:1a:6d:79:16:0d:
                    b2:a1:88:c7:09:a9:b2:9c:f0:b7:22:e3:60:0f:4c:
                    94:34:a9:63:91:24:76:6e:1f:80:f9:60:38:68:1e:
                    3c:13:b2:e6:a3:76:60:30:bb:17:bb:ca:bc:cb:83:
                    d2:31:c3:c9:2e:d9:7f:08:e7:ad:ea:8d:14:59:1e:
                    63:1e:e3:86:0a:98:f7:b7:73:0f:e0:b3:5c:1d:90:
                    8f:5a:aa:2c:0d:69:94:9f:a0:2c:a0:f4:91:cd:f6:
                    f8:71:75:41:57:08:83:a6:88:d5:d3:66:06:3e:73:
                    5b:d6:e4:25:86:b5:46:ac:b0:0e:83:b8:a6:c4:36:
                    ef:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:30:E3:87:C6:B0:62:88:0D:81:B1:24:FE:7D:30:45:F6:AF:6F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/420d58f4-09fc-3fb0-a886-539007aa268a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:81fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:22:35:41:59:b3:36:fa:7c:5b:b7:54:09:56:d1:b0:74:46:
         91:40:95:76:f5:73:bf:1f:6a:22:81:f9:ed:f7:d6:fe:28:70:
         fc:16:1f:7f:bb:e5:1b:4e:21:0c:41:2c:07:68:2d:d0:dc:c8:
         63:4b:d2:ec:aa:20:54:a6:54:df:6f:cf:50:fb:14:e1:b0:29:
         92:5d:6e:c4:be:1f:f8:69:be:3c:98:eb:7e:60:11:92:22:a9:
         8a:2d:1b:0a:91:67:d5:e5:09:f0:23:49:73:7c:26:87:e2:bc:
         3f:a7:7b:68:dd:1a:db:74:cd:97:49:2d:11:13:39:b3:24:f2:
         7b:65:eb:07:52:44:03:1e:ec:86:ee:20:2d:32:1f:17:d5:9a:
         ec:ed:c4:4d:c4:18:d8:e5:b4:b7:b5:cc:39:5a:07:fb:3d:60:
         e4:97:d6:c2:f9:89:99:55:36:75:1d:81:5e:0b:d4:2e:c5:b0:
         4a:88:de:1e:96:14:a3:bd:ed:1e:1c:ca:0f:80:2a:e1:a2:81:
         1c:ff:91:2e:8d:61:39:d0:c1:d3:f1:c9:2f:d5:f2:d9:ec:56:
         cc:cf:20:a7:59:2d:07:42:cb:b3:29:15:af:b7:58:8e:f6:0d:
         cf:35:f9:9a:06:04:80:b0:48:69:f9:da:bb:80:40:8e:04:91:
         86:2d:1f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 12:54:16 2024 by rpki-client on console-ams.rpki-client.org