Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49a74d88-bf60-3f7a-b11b-2f4849f16fb0.roa
File:                     49a74d88-bf60-3f7a-b11b-2f4849f16fb0.roa (raw, json)
Hash identifier:          1YDe7dZUp5OzHQ7uHod1hGfyfDEAHXslEUxgzKpatWQ=
Subject key identifier:   2A:DE:81:29:92:95:63:C8:94:03:0D:DD:63:7B:73:9D:BD:3B:CB:CC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6BBA08D5EA452379518430
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49a74d88-bf60-3f7a-b11b-2f4849f16fb0.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     7016
IP address blocks:        2001:559:761::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:ba:08:d5:ea:45:23:79:51:84:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=620f3cdc-a3fd-4aa1-8f65-1323ded0b9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:72:91:43:6e:a3:73:78:08:7d:c2:75:05:
                    b6:44:c9:8d:d0:09:a7:6e:2e:b0:a9:a2:93:63:b9:
                    76:47:26:8b:a1:60:d9:14:75:66:f9:30:7c:9d:5a:
                    7f:61:cd:5f:5f:6f:4a:9a:e6:7b:04:e3:73:4d:49:
                    d6:b7:41:28:dc:2e:fe:68:87:0a:c4:fa:77:ad:dd:
                    95:ba:4f:d2:84:c8:60:a7:ea:37:97:e1:d1:38:7b:
                    32:ba:84:64:86:d4:7e:74:16:00:e0:2e:d6:05:27:
                    7d:80:b3:d9:5b:aa:25:6b:8b:62:91:a1:b5:9f:23:
                    be:51:bf:27:dd:00:19:5c:2e:ec:7a:36:04:99:c2:
                    72:02:87:54:37:00:ee:9b:2c:39:f9:ae:0d:2f:74:
                    00:cf:54:83:8f:30:65:32:e6:b3:b7:d4:b8:43:7a:
                    03:85:9c:59:c7:3d:91:df:f0:db:ca:e6:f3:ac:52:
                    16:6b:51:c0:fe:1d:8e:3e:1b:f4:0e:be:2a:95:66:
                    84:25:87:dc:56:d2:e2:83:c4:35:7a:30:81:cc:7f:
                    aa:f2:b1:e9:bf:71:87:b1:34:75:9e:0c:a9:fc:0e:
                    cc:b9:4f:03:2a:60:0d:89:1b:07:ff:b1:a7:e4:5e:
                    17:38:61:6a:71:1c:b8:81:47:b2:5d:b7:c3:0f:a1:
                    bf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DE:81:29:92:95:63:C8:94:03:0D:DD:63:7B:73:9D:BD:3B:CB:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49a74d88-bf60-3f7a-b11b-2f4849f16fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:761::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:1d:88:a0:bd:65:d9:da:c6:82:ee:79:b7:8f:38:e4:c6:5e:
         bc:bf:1c:98:65:39:09:13:78:9c:63:56:af:e3:cb:6a:21:f1:
         ce:14:04:e5:25:51:23:43:35:f7:8d:86:33:3f:3a:60:14:9e:
         8a:98:b8:7f:ea:cf:f4:1c:78:78:9c:10:98:a4:32:ff:0f:1b:
         1a:d9:02:d6:a6:60:94:5c:dc:fa:9c:0e:1c:db:9e:26:26:ee:
         34:27:6d:bf:5c:74:66:8c:44:74:53:ac:c9:55:73:ac:68:5b:
         1e:81:f5:9a:67:b6:7f:4d:d4:c4:d2:86:1b:2b:cd:34:12:89:
         d0:82:95:45:99:a8:12:ed:dc:12:e3:12:30:b7:b0:31:d8:94:
         b5:d8:c7:25:4a:12:f5:22:7b:fa:5d:ea:96:9a:87:b8:0e:bc:
         01:e0:68:b8:9e:b8:4b:d4:6e:53:d4:2a:c7:eb:bc:52:ab:04:
         98:45:a0:7b:f5:a8:59:30:63:5e:d6:9c:09:98:a4:4f:88:8e:
         38:d4:d2:30:96:46:39:22:e2:81:64:4b:75:df:fd:6e:e4:ad:
         39:9c:2d:3d:7c:f3:09:2a:79:ba:da:0a:2f:35:4b:66:4e:bd:
         c7:09:d4:0c:d1:c5:31:39:07:6a:7b:99:0e:96:21:95:e7:97:
         8d:07:60:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:01:29 2025 by rpki-client