Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bf61842-dda6-376a-87a3-78e45ccab6a0.roa
File:                     5bf61842-dda6-376a-87a3-78e45ccab6a0.roa (raw, json)
Hash identifier:          wfuGSOk/zx6nuYMVRl7kfmU+dJFiztvcdwb5bJTEWWk=
Subject key identifier:   E8:25:EB:D6:CC:1C:53:76:31:9C:C6:7E:B1:01:A6:46:68:77:F2:74
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFAF2C90A5504F5965E5400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bf61842-dda6-376a-87a3-78e45ccab6a0.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7015
IP address blocks:        2001:559:8382::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fa:f2:c9:0a:55:04:f5:96:5e:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=088b89e7-52e7-4582-aa70-0c435e9012e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c3:2f:d6:e8:9d:93:3f:6c:23:1a:37:49:a8:
                    2d:06:de:d4:25:08:d6:b5:3a:96:a0:9b:f2:7b:31:
                    d5:27:51:97:41:3d:f0:d5:01:e5:6a:54:47:75:74:
                    f4:3c:a5:1a:67:8c:10:ce:2c:34:6b:56:58:10:88:
                    66:d4:4c:30:0c:47:91:21:b9:8c:e6:e1:7b:9a:cd:
                    20:e3:2b:0f:e9:b0:10:19:4a:b0:88:b1:e4:4d:a4:
                    6f:11:02:19:7c:95:6d:95:46:17:83:13:ae:2d:5b:
                    86:e2:6d:e1:f6:21:be:1a:46:09:e2:80:c5:1b:54:
                    58:3d:88:01:b4:5d:b2:79:00:98:12:b5:f0:c0:93:
                    e2:76:c3:51:48:6f:70:a6:b9:f8:99:ad:ab:90:e5:
                    57:d4:6e:5d:de:be:c2:f6:37:6f:fe:20:24:be:e8:
                    00:e2:cd:ae:84:de:c7:c2:ac:d3:cf:70:fe:ed:db:
                    15:b8:ae:84:fb:25:fa:67:d9:05:e0:90:12:49:fc:
                    bc:dc:0a:f0:76:41:a2:f9:b6:63:74:5e:4d:76:e9:
                    30:1f:14:21:f0:e8:80:47:1c:17:35:27:53:cf:65:
                    5f:4c:f7:91:b4:3c:29:17:54:1f:bd:18:be:a3:fd:
                    3e:d0:53:9b:e2:2b:fd:b1:bc:a5:c2:ce:05:01:ac:
                    da:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:25:EB:D6:CC:1C:53:76:31:9C:C6:7E:B1:01:A6:46:68:77:F2:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bf61842-dda6-376a-87a3-78e45ccab6a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8382::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:19:54:99:2b:19:75:1e:e1:c3:c4:58:e4:55:f6:57:49:35:
         a6:c3:cb:e3:42:d7:07:37:55:72:3d:fe:76:17:ae:84:63:8f:
         e2:3a:aa:84:c4:36:a5:58:31:0f:6e:1d:ce:d5:b1:24:99:32:
         05:78:72:21:ca:af:bf:d2:ab:12:2f:e5:3a:db:03:3b:13:54:
         a9:93:dd:a3:c6:3e:06:5b:47:bc:c1:e4:57:af:ad:f1:0d:3a:
         f9:bc:3b:68:8a:62:ba:1b:88:6e:00:f0:27:0d:95:ce:d4:ee:
         67:69:a4:9a:bb:fa:91:1c:e1:2b:57:a0:a0:dd:46:ee:40:ca:
         b8:20:9d:76:b5:6d:df:83:b7:19:5e:1b:81:a7:3d:42:2b:6b:
         cf:b7:44:bc:6c:4a:d1:2d:d8:b6:f1:32:0b:3c:0c:7d:7f:68:
         d1:74:75:f4:4f:ee:48:53:a9:34:45:70:0b:aa:c8:70:81:a4:
         4b:4f:ec:15:f8:14:a2:e5:17:51:e6:73:3c:91:33:47:8a:c6:
         e8:d5:21:82:81:d0:0b:dd:e6:db:5c:82:fb:4a:26:28:f9:7c:
         cb:3e:90:4e:08:db:9e:a8:02:cf:b1:d3:99:ac:e1:ca:d1:1f:
         fe:6b:0d:77:63:4e:8a:f3:44:0d:57:49:0a:c9:42:a3:30:a1:
         56:13:7c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:59:23 2024 by rpki-client on console-fra.rpki-client.org