Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cc0681f-926d-3ccd-8ae4-a09f980eae4f.roa
File:                     4cc0681f-926d-3ccd-8ae4-a09f980eae4f.roa (raw, json)
Hash identifier:          hDH5A8aQ2nwyyzzeHY0w/eNUIrRfllYK+K2V9Jd8HYw=
Subject key identifier:   65:CB:29:64:C7:28:48:FF:28:5A:A0:2C:7B:56:5D:EB:6F:61:13:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF785DA1F2A52523BF22EE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cc0681f-926d-3ccd-8ae4-a09f980eae4f.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33662
IP address blocks:        2001:559:c200::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:85:da:1f:2a:52:52:3b:f2:2e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=3ac0b25a-c99f-447f-a3ef-cfcffd590e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e1:3c:16:d3:46:7c:1e:12:db:31:58:2f:4e:
                    95:cf:26:a8:c7:85:ab:6b:d8:7f:1d:ef:ee:cf:c7:
                    74:6c:0d:d7:f4:63:75:98:f6:81:80:9f:f1:73:38:
                    08:61:14:87:ef:8e:3a:2a:e7:0c:1a:cb:b6:a1:d1:
                    14:f1:2e:f4:a8:cd:17:2b:e0:74:a7:3e:6b:1e:cf:
                    16:c5:fc:46:ac:ee:c9:e8:e8:a4:71:05:20:33:02:
                    60:a1:db:31:ef:0a:63:5c:48:fa:a0:94:76:b6:a4:
                    37:97:91:1d:42:17:8c:c6:f9:c0:aa:2c:be:d4:a5:
                    02:84:04:3c:eb:12:66:ad:84:b9:73:c7:49:8e:7b:
                    72:70:e9:65:81:46:ff:ac:ae:f9:e0:29:c6:5e:7d:
                    0d:03:68:52:1b:58:75:78:12:5c:18:f8:41:8b:61:
                    d8:bb:58:83:9c:af:bb:b3:26:5d:25:51:93:e5:9f:
                    9e:d9:90:22:60:6c:2c:13:7c:95:da:d9:f0:ae:5a:
                    70:ea:8a:32:1c:04:a2:d3:34:20:5f:31:70:26:88:
                    7f:d7:4b:5f:78:1d:94:88:a8:de:07:0e:f3:1b:ef:
                    ee:af:26:4d:cf:a2:6b:85:47:e3:13:fe:05:a2:20:
                    5e:e7:c6:8f:3f:57:52:65:68:07:6c:40:8e:eb:b4:
                    bf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CB:29:64:C7:28:48:FF:28:5A:A0:2C:7B:56:5D:EB:6F:61:13:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cc0681f-926d-3ccd-8ae4-a09f980eae4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:b0:4f:fd:0f:1d:b7:06:9b:7a:fb:93:a2:28:44:16:27:65:
         d5:2e:19:61:2b:42:02:79:e0:ee:02:af:32:98:8a:bb:1c:42:
         f1:3c:ac:b8:4e:80:31:ca:cf:8c:7c:55:bf:82:82:ce:ce:22:
         c3:97:58:23:97:ee:2b:d4:3b:0f:70:8e:74:0d:f0:50:5a:30:
         7d:3c:4e:65:25:d7:39:64:0a:09:26:29:87:74:74:22:f4:c0:
         f4:da:20:9e:07:54:d6:d6:ba:7e:6a:9e:eb:06:7c:45:a9:e8:
         97:19:a1:03:4d:ee:2c:11:8a:e5:7a:23:3e:94:8b:c9:93:e7:
         a7:66:71:34:90:93:03:40:75:8f:4d:ce:fd:aa:4a:b1:3a:d8:
         b8:b6:e4:fe:f7:c7:2c:a3:d7:96:31:81:fa:ee:79:04:72:44:
         3b:d3:0a:17:3b:92:9b:8c:f1:7e:21:d5:8c:03:96:1b:b4:2f:
         30:11:53:c7:8a:0e:56:f5:17:41:6b:c1:24:6b:50:65:12:3a:
         50:67:a3:01:39:b9:13:df:b3:10:b3:78:24:57:d7:86:5f:e6:
         96:22:4f:9a:15:78:21:be:b3:23:9c:11:03:9f:03:36:80:be:
         92:50:05:98:fb:58:2b:37:59:fb:a2:68:cb:44:0b:b5:09:58:
         d9:ed:7b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:01:27 2024 by rpki-client on console-ams.rpki-client.org