Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56380d37-8620-34f2-80b0-2d69eaf73004.roa
File:                     56380d37-8620-34f2-80b0-2d69eaf73004.roa (raw, json)
Hash identifier:          +PCzAuBIHT4/YBRlHshxtBNUA89mvVkdjws/V8rTb9s=
Subject key identifier:   3B:08:CB:0A:15:9E:94:FE:E8:91:4E:24:49:AA:48:0F:0F:BE:4C:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6BFC1843F80ACACDBF9080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56380d37-8620-34f2-80b0-2d69eaf73004.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33651
IP address blocks:        2001:559:55a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:fc:18:43:f8:0a:ca:cd:bf:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=9adcdac9-cc72-45a6-89ba-57852e21db77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:19:19:f9:ce:7f:83:31:4f:58:98:6c:17:08:
                    ad:b9:e4:ae:23:84:95:9c:27:9c:5f:33:91:32:94:
                    7c:bc:d8:c5:83:98:51:22:cd:8d:41:97:3d:61:6d:
                    b3:d8:e9:56:6c:11:55:5a:6a:01:7f:c9:ec:c4:74:
                    be:c9:71:27:02:c9:aa:8a:2f:a7:2b:83:fb:e2:16:
                    eb:26:8e:74:d8:2c:bc:54:13:67:ff:61:ee:3c:24:
                    26:6f:e2:d8:56:7c:5c:42:8c:f1:62:bc:4a:6e:26:
                    94:58:d8:c0:f3:6e:79:71:73:76:55:9d:18:f7:8c:
                    d6:c5:40:f3:2c:62:0f:f2:e0:55:ad:b7:1d:69:10:
                    16:1a:9c:c1:21:59:38:d5:0b:87:59:aa:e2:5b:66:
                    3a:e7:b0:a6:5a:d8:48:2e:17:d1:c7:7c:b1:c1:b2:
                    77:f7:fb:20:f6:f3:c3:47:87:a6:23:72:cb:4c:f5:
                    9e:f0:37:79:4c:b2:22:51:2b:d4:47:7a:77:39:6d:
                    75:49:c1:87:b1:de:7f:c4:d4:5d:69:a4:a3:23:79:
                    ca:df:34:f9:1c:ca:a5:c0:44:5b:8b:40:03:51:2f:
                    16:a4:8d:19:42:69:fe:e3:eb:cd:e2:ea:c3:68:ab:
                    02:b5:39:d4:7b:95:94:02:ab:98:5e:d8:87:67:c2:
                    78:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:08:CB:0A:15:9E:94:FE:E8:91:4E:24:49:AA:48:0F:0F:BE:4C:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/56380d37-8620-34f2-80b0-2d69eaf73004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:55a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:96:cb:22:75:cb:a0:3a:31:fd:fc:cd:ba:29:60:a5:0e:d6:
         dd:0e:2a:c1:c2:8a:dd:7b:04:e2:29:6e:30:d8:d7:38:59:d9:
         84:90:e4:29:ca:66:1b:61:c7:ed:9f:6c:40:17:96:cd:77:8c:
         ab:4d:4b:20:ce:ee:e4:12:87:b2:ef:84:77:5c:11:3b:c3:27:
         61:bb:3d:1d:b8:af:91:70:9a:bc:48:f9:fb:a1:1c:06:d4:8d:
         7d:8f:d0:3b:eb:de:45:79:c2:1b:73:f2:73:7a:9b:23:ed:35:
         12:94:6c:e5:d2:6e:d6:3f:b0:40:4c:0d:81:44:1d:af:2d:8c:
         a2:d0:56:9b:ac:8a:fc:e6:e0:16:32:02:e2:4e:46:11:72:dc:
         b5:e0:34:c2:46:76:bd:89:78:6c:c4:6c:1d:f6:6c:29:3d:37:
         a3:bb:d7:ec:eb:14:ad:01:a6:16:f8:f8:bc:3a:31:ab:c7:2b:
         56:52:17:0c:5e:b2:2b:e2:f6:46:9a:59:59:13:34:07:19:1a:
         bd:f8:5b:66:57:f7:31:23:61:19:3b:35:9b:c8:2f:da:08:9e:
         c2:9c:01:a9:7b:7f:76:bf:87:35:61:3a:45:1e:3f:0b:ad:ca:
         7d:08:e4:91:82:7c:c3:b8:5e:50:23:70:c9:04:8c:b7:cf:8e:
         15:c8:c2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:32:15 2025 by rpki-client