Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/599212af-8b2b-3e93-8f20-0805ea5a49b3.roa
File:                     599212af-8b2b-3e93-8f20-0805ea5a49b3.roa (raw, json)
Hash identifier:          bN+0A8bD5PwRwoFAPf+K+a93NGBsETX6gVoR5xXGr0Y=
Subject key identifier:   30:FD:00:A9:C5:22:FC:EB:80:7C:AB:F9:63:A3:B1:2C:5C:C9:25:28
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFBE16C90C232970CADB140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/599212af-8b2b-3e93-8f20-0805ea5a49b3.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        2001:559:864c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:e1:6c:90:c2:32:97:0c:ad:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=8010a79e-ee84-4ffc-856f-61d7fd1de36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:04:59:96:8b:88:34:e2:da:a1:39:4e:f9:
                    35:d9:4f:4d:ae:d9:b3:4e:e7:a4:db:45:7d:b0:7d:
                    be:f5:a4:f1:a9:bb:60:45:15:ef:b4:04:45:e5:a9:
                    e0:98:bf:1d:26:f3:6a:5c:43:3f:91:61:a0:6f:21:
                    9f:5e:57:73:5c:14:fb:2b:f1:7d:51:ab:70:60:f6:
                    3a:34:55:97:1b:63:ce:5b:fa:9f:17:5d:c8:82:35:
                    03:7c:a8:9e:8e:60:42:c3:f1:a5:d3:d2:cd:15:5e:
                    af:15:8a:b7:23:a0:7d:45:33:52:8a:02:6c:7c:c2:
                    da:07:b8:2b:ee:bb:bc:14:26:fa:22:1c:33:f4:28:
                    23:ba:82:09:fc:54:be:5e:c0:a9:4b:e0:28:b0:a8:
                    02:07:c4:de:66:bf:36:8b:4c:97:ba:a0:5d:0a:8f:
                    99:70:10:b2:7e:c8:2b:a0:59:94:39:53:af:a8:65:
                    10:27:aa:72:81:25:68:ab:25:00:d0:70:23:2d:50:
                    29:a0:78:1e:8e:22:84:8b:bd:cc:fc:e7:7f:87:a0:
                    41:0a:ea:a3:c8:43:1b:0b:e3:d8:95:76:6f:e8:b7:
                    34:95:1b:cf:c1:95:85:9d:32:d2:c4:94:c4:a5:31:
                    d0:73:33:18:a3:cc:56:ed:b9:fe:02:6f:a7:5c:73:
                    d0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:FD:00:A9:C5:22:FC:EB:80:7C:AB:F9:63:A3:B1:2C:5C:C9:25:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/599212af-8b2b-3e93-8f20-0805ea5a49b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:864c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:7b:eb:9c:4e:27:d3:a8:62:c4:0a:e8:fa:90:f5:90:d4:8b:
         f9:c4:22:61:28:92:4c:4a:c9:fc:28:da:36:1a:08:22:3c:ad:
         1a:c9:58:e5:21:59:a1:82:4c:d3:34:7b:19:59:99:96:25:24:
         2e:aa:62:64:d5:75:ae:97:64:2f:f7:b1:e3:14:ca:f2:e3:28:
         53:59:90:b5:83:fb:fd:cc:9e:d9:1c:18:76:07:6b:10:e4:bd:
         ab:72:b3:e3:7d:c8:93:e3:83:78:26:51:34:e3:bd:1d:da:8b:
         8b:77:32:f6:81:dc:0e:92:d7:12:38:8d:d9:fc:1e:40:08:91:
         54:9e:2a:1d:93:cc:3f:ac:dd:37:a1:07:fa:2f:4f:c8:8b:fa:
         73:31:96:63:a4:35:e0:3a:fb:9c:c2:07:60:b1:24:4e:2a:cc:
         d9:02:b1:ed:82:cb:4f:12:3f:da:ff:db:ee:26:66:3a:52:07:
         71:72:f5:19:e9:fb:76:0b:0c:32:94:ed:6d:69:85:fa:99:0d:
         ad:79:0b:20:2c:1a:fa:89:c7:28:6b:00:bd:9f:f1:7d:de:19:
         18:11:0a:51:77:2f:42:13:1d:0d:03:fd:f6:7d:a1:3e:f7:05:
         65:81:bb:c6:1d:de:e8:75:15:ac:a2:0d:d4:26:27:4a:31:e6:
         f2:9f:72:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:12:02 2024 by rpki-client on console-fra.rpki-client.org