Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b974def-53f4-310d-9718-717a23ade996.roa
File:                     4b974def-53f4-310d-9718-717a23ade996.roa (raw, json)
Hash identifier:          IM8c1iYnAHA+MRBhMsS3t7SgtVSHxqJGY9JVNvItMr0=
Subject key identifier:   7B:CC:F2:89:A8:CD:EF:81:36:CA:AB:F6:25:4F:64:4C:28:BE:92:1B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF72A7F5F08B8BA66DA9B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b974def-53f4-310d-9718-717a23ade996.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7016
IP address blocks:        2001:559:c005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:2a:7f:5f:08:b8:ba:66:da:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=00f4698e-bf74-49d0-b5d8-c2f910e51cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:e1:8b:37:d5:f7:55:71:a4:6c:b0:bb:fb:
                    64:34:80:75:48:5e:5b:d2:3b:6c:f0:1d:5b:a0:25:
                    c4:2c:98:b0:6c:f8:85:5e:b8:48:12:3e:3e:7c:60:
                    79:5c:7c:ae:6f:87:43:5a:19:23:98:7d:eb:4b:4b:
                    ff:c6:8c:9d:c7:c4:50:76:2d:7b:75:67:a9:09:14:
                    79:d0:80:c1:ba:30:5d:d6:fe:60:91:a2:7e:33:ad:
                    c6:ed:17:93:05:e3:7f:a8:ba:d5:56:c1:70:b5:d1:
                    4c:12:70:91:a1:a9:81:46:2e:2d:99:99:97:2f:4e:
                    b9:51:28:7f:23:16:89:78:66:0c:92:8f:8a:a8:82:
                    a8:fb:f8:dd:b3:a1:8a:37:ab:f4:bb:34:3a:ff:9e:
                    18:e3:36:61:09:35:2f:e7:a9:1c:bd:cd:6f:f3:88:
                    65:20:ea:2b:4a:d6:52:ff:71:b6:49:a0:6b:22:c6:
                    75:f6:ca:c0:64:96:e9:fe:ab:94:c9:92:29:a8:3b:
                    a3:1f:c3:d5:da:23:68:05:a0:59:9d:d6:0c:b3:7d:
                    2b:72:43:c9:79:78:6e:c5:d7:34:5b:4b:5e:22:ea:
                    e5:6f:92:93:cb:07:b2:7f:ad:22:92:d6:04:98:49:
                    72:e3:05:bd:86:32:f1:5f:97:d1:25:e3:fe:22:70:
                    1f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CC:F2:89:A8:CD:EF:81:36:CA:AB:F6:25:4F:64:4C:28:BE:92:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b974def-53f4-310d-9718-717a23ade996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c4:da:a0:b3:d0:ad:12:9a:9a:70:1d:2d:3c:78:28:39:3f:
         59:7b:29:97:7c:1d:33:e5:03:5f:43:36:2b:25:49:5b:f9:ca:
         a2:d6:dc:fd:64:2b:74:54:89:81:9f:03:e8:79:d6:ae:7f:7e:
         94:83:99:6f:ef:01:86:8c:92:36:0d:8d:4d:cc:a5:2d:53:42:
         73:bf:f6:98:c5:a4:1f:75:96:7d:ac:7b:c7:c4:e1:e4:ed:5b:
         27:7f:be:6e:39:6d:8a:30:9d:fd:58:31:99:22:fe:ed:a3:54:
         3f:95:4b:bc:c9:3b:c2:b7:31:ec:fd:39:9d:44:1a:97:7a:63:
         33:2c:ff:86:d9:7f:d9:93:a4:93:60:53:46:8a:95:9c:2e:1c:
         8d:91:d3:a4:ac:3a:6f:22:9b:72:70:46:d8:ba:a6:70:f0:e8:
         e8:b1:1d:21:d2:ad:4e:e1:45:19:6f:d6:85:14:7d:2d:6e:0b:
         d9:15:a2:75:3a:68:c3:08:42:55:6d:01:e7:ef:ec:ba:aa:f6:
         3d:96:38:7f:43:98:d9:df:a3:35:e5:72:f7:b0:f2:9e:d8:4a:
         22:2c:ef:43:ef:1a:ce:58:5e:f1:ec:c6:15:d5:8c:d4:cc:7e:
         73:fe:96:7f:bf:14:67:cb:bb:ab:75:77:78:37:ca:f2:41:aa:
         25:5c:99:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:35:11 2024 by rpki-client on console-fra.rpki-client.org