Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48cc5381-b99e-3a61-a019-de6642acfe2e.roa
File:                     48cc5381-b99e-3a61-a019-de6642acfe2e.roa (raw, json)
Hash identifier:          9TLa9jGZr0iLMobUj+dnvaMTbzFbnuKvPfMwke/K8PM=
Subject key identifier:   E9:84:35:94:F6:DF:F3:F3:0A:56:F6:18:69:1A:50:78:CB:9A:85:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF803C49565CB75E72A7F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48cc5381-b99e-3a61-a019-de6642acfe2e.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        2001:559:c44c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:03:c4:95:65:cb:75:e7:2a:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=12f5fc52-fb59-480b-9ea4-48b3ee995de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:88:ec:3a:35:0b:38:87:a1:29:0c:0a:45:
                    65:44:6c:23:20:b5:cc:65:2e:1c:d4:d1:02:d0:38:
                    d0:1d:44:79:d4:d5:a7:3f:3c:ed:0f:f8:75:33:3d:
                    a2:e5:7b:3e:63:fa:81:5d:a6:8c:e7:59:13:5a:e6:
                    3e:17:64:92:35:ef:ae:37:0e:b5:7d:67:1c:64:1d:
                    42:b2:d5:62:cc:27:8e:a6:b5:77:53:89:09:66:b3:
                    a4:48:5f:fc:e2:a9:91:2d:33:2a:65:b4:f4:26:07:
                    19:d4:6d:94:78:a1:0b:7d:c7:9f:29:2c:c0:dd:a3:
                    7b:97:82:7a:4d:6b:66:0a:ec:2f:07:ae:48:9d:61:
                    72:d2:41:53:b7:89:eb:dc:d0:ee:04:21:f8:d8:ad:
                    ce:d6:91:f2:c2:71:5c:cc:67:fe:e4:50:58:f0:6d:
                    a5:6c:70:3c:b6:eb:ec:c8:28:29:b0:e7:fa:20:29:
                    3b:44:58:76:14:5c:1c:86:e2:69:cb:3c:0e:5a:3e:
                    3b:d9:c6:f2:a1:c9:be:91:96:89:30:ba:48:f3:0a:
                    43:ba:25:e2:38:59:d8:3b:46:ac:a0:e0:0c:9c:2e:
                    d4:45:55:78:c9:62:10:2c:e4:1e:fc:8b:24:d1:d5:
                    bf:ca:36:68:9f:7d:00:48:f7:5f:21:b7:97:ef:b6:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:84:35:94:F6:DF:F3:F3:0A:56:F6:18:69:1A:50:78:CB:9A:85:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/48cc5381-b99e-3a61-a019-de6642acfe2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c44c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:88:52:8a:8f:f4:64:8e:89:ec:18:9a:80:bc:2d:7c:c9:53:
         4c:99:6a:5c:2d:a5:30:ea:31:0b:b1:78:a3:22:09:b7:78:bd:
         99:4a:5a:92:52:ce:5e:bc:74:a1:7f:5f:77:3d:aa:60:df:45:
         5b:8b:aa:5c:fe:68:11:65:86:b7:09:a3:6a:c2:3f:64:ec:c8:
         00:86:97:8e:11:92:ae:3e:a7:cf:47:d8:4e:3f:69:cd:af:94:
         46:84:c3:98:78:e3:fd:2a:1f:c1:68:a1:64:ff:a2:7a:cb:56:
         24:de:5e:cd:74:e5:56:ac:ea:cd:b0:bd:26:b5:97:2e:9e:76:
         2d:1f:1b:43:ea:2c:08:79:b5:63:3f:7b:4f:c2:9c:ad:ed:72:
         98:52:ad:4f:11:98:e9:17:ea:a2:51:10:2f:53:5b:a4:a5:42:
         88:5f:22:7d:e0:7b:ff:b2:06:8d:af:2c:2e:56:99:66:6b:87:
         3a:e7:b2:da:49:8d:37:d9:15:01:e6:9e:84:f5:bc:cc:22:22:
         14:ee:7d:7d:a7:dc:e5:c2:59:08:25:50:e1:44:f7:1f:f4:06:
         5e:c1:52:e1:52:79:ae:e4:50:2d:bf:4a:a1:be:3b:ba:a9:47:
         b2:7f:08:51:3b:f1:dc:b7:08:e7:a0:b4:db:f8:13:f5:e4:89:
         f7:3a:73:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:09:17 2024 by rpki-client on console-fra.rpki-client.org