Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59934f14-6fbd-3043-8e10-a96570e004ba.roa
File:                     59934f14-6fbd-3043-8e10-a96570e004ba.roa (raw, json)
Hash identifier:          yikyzZJonVewrNptYpUikI2DEA6r9ZQouHjlMNSlnSM=
Subject key identifier:   92:A4:55:60:93:10:B7:F1:66:C5:AB:07:60:DE:E3:AF:34:7F:D7:23
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847C52511D3836DF44BF4DCB560
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59934f14-6fbd-3043-8e10-a96570e004ba.roa
Signing time:             Mon 04 Nov 2024 18:08:53 +0000
ROA not before:           Mon 04 Nov 2024 18:08:53 +0000
ROA not after:            Sun 02 Feb 2025 18:08:53 +0000
asID:                     33668
IP address blocks:        2001:559:3d9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c5:25:11:d3:83:6d:f4:4b:f4:dc:b5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  4 18:08:53 2024 GMT
            Not After : Feb  2 18:08:53 2025 GMT
        Subject: CN=42af52d1-c928-4923-9661-7b8821401e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:24:c6:07:e1:29:af:80:32:0b:ba:f4:5b:67:
                    b6:18:cc:71:39:d0:a6:2e:a9:93:a3:b2:02:96:b4:
                    5f:44:92:fe:40:07:e1:de:77:99:02:b2:6e:4d:fb:
                    ca:89:59:a8:33:35:2e:41:68:4f:31:5b:aa:18:be:
                    23:4f:9d:a9:4b:1f:e0:d9:2f:a5:67:a8:61:98:28:
                    66:c6:1c:17:6e:df:4a:15:6f:af:0d:3a:81:3b:36:
                    77:0d:a0:cb:76:53:56:47:1f:63:fc:8a:9b:c8:43:
                    e5:de:7e:25:0b:09:7a:06:17:a5:5c:a2:fb:81:1b:
                    e6:27:13:c3:36:4e:e4:cd:bd:57:04:c0:f0:ab:62:
                    84:d1:d8:67:fa:3e:dd:d3:58:81:cb:07:91:32:42:
                    88:a4:b5:ae:b8:b6:4c:b6:96:74:ed:40:46:77:e4:
                    61:b6:4a:46:7b:78:63:74:78:a4:e8:5c:c3:b3:bc:
                    c8:f6:cf:4c:24:3a:12:a8:74:0e:53:44:60:e2:f5:
                    6c:9e:05:2a:52:f4:98:08:c4:19:b7:93:91:c6:da:
                    81:af:60:68:4e:10:38:37:06:4a:42:66:3c:5a:cd:
                    70:76:41:73:4d:ac:c7:e8:50:d1:6c:8c:1b:5f:64:
                    35:1f:92:32:c1:ec:f6:6a:78:c2:9e:85:a4:b0:34:
                    e1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A4:55:60:93:10:B7:F1:66:C5:AB:07:60:DE:E3:AF:34:7F:D7:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59934f14-6fbd-3043-8e10-a96570e004ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:3d9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5b:19:dd:4e:2b:0c:9c:2e:16:da:81:26:08:bc:61:9a:63:
         08:3e:a0:86:e2:8b:95:0b:94:a0:33:c2:d8:0b:1a:fd:5d:88:
         24:54:02:1c:ef:2c:42:7a:5f:6a:99:27:20:00:c0:32:96:9d:
         ef:52:ef:09:34:ed:41:68:b9:67:04:98:1f:09:43:81:47:23:
         ce:66:fa:02:f9:de:b8:6f:ac:56:38:74:66:54:50:e9:3f:dd:
         b8:bf:9a:4a:bb:eb:21:c9:e0:31:eb:d2:d5:1d:ec:5c:ad:be:
         af:fc:dc:ce:b2:32:12:c3:6b:38:7b:e8:48:7f:d5:26:3e:37:
         23:94:f6:88:91:14:42:5b:ca:5e:56:c4:cc:d3:7b:24:c7:5c:
         7d:8a:14:1b:4b:69:c3:ef:92:bb:5c:22:0e:8c:3b:f5:74:f6:
         a8:fa:68:5d:e9:bf:91:25:78:98:e4:87:a9:ee:53:34:b2:04:
         f2:b8:e3:c1:26:80:df:15:5f:b0:cb:b0:0f:b7:05:96:ff:49:
         c3:e3:5a:e4:ee:37:66:c0:14:02:cf:ce:20:37:6c:ef:6c:19:
         41:80:91:5d:11:f9:00:2f:01:6f:38:3d:76:d9:e2:21:b8:59:
         63:17:0c:94:d0:55:b5:dc:64:53:b6:0a:b4:70:8e:2f:63:37:
         eb:49:1b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:47:24 2024 by rpki-client on console-fra.rpki-client.org