Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/652910dd-608e-3946-8a60-67e380aef3df.roa
File:                     652910dd-608e-3946-8a60-67e380aef3df.roa (raw, json)
Hash identifier:          jLtYSKo/YAOHUmt1AHdLbIQUKpYBVe/cK0LNA5wSBW0=
Subject key identifier:   1A:B6:72:2B:7A:16:43:82:25:F2:B8:65:BB:FB:53:BA:E8:19:FA:01
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF76126FF5A74E41BAEF000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/652910dd-608e-3946-8a60-67e380aef3df.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33650
IP address blocks:        2001:559:c211::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:61:26:ff:5a:74:e4:1b:ae:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=a0862e0d-6c16-4bb7-b470-eab4cc7aa46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:c2:a5:a5:62:4a:ff:3c:1a:07:d9:98:bd:
                    f3:02:16:3b:d4:ee:aa:c2:7c:ef:34:e4:34:ab:a3:
                    87:0c:e2:db:da:6f:fc:c1:9b:3f:07:6d:78:ef:95:
                    97:92:0d:c7:69:d2:5b:3d:a6:03:95:40:d8:31:85:
                    96:7c:3c:21:37:22:95:74:5b:23:eb:ad:1b:81:a0:
                    6e:77:6c:06:c2:c6:80:db:ff:0e:39:cf:68:a7:5a:
                    d5:de:f7:fd:00:05:f4:33:a3:d1:f2:c0:3d:39:2d:
                    da:77:f1:3b:be:68:8b:ae:fe:a0:43:32:eb:54:7a:
                    51:b7:8d:1b:7d:25:ea:5e:07:4b:c6:cb:dd:1f:d6:
                    1d:94:15:f3:98:68:44:6f:7d:bd:d6:bd:2a:66:ab:
                    32:27:7f:63:a7:12:fb:d0:c0:8d:fd:12:58:cf:b1:
                    6a:fe:b6:9e:27:5b:28:e2:a9:ee:f2:b3:09:07:02:
                    8f:80:2e:01:5c:be:93:e8:fb:37:22:c7:58:27:9a:
                    19:3f:16:9a:6c:d6:73:09:bb:70:bb:39:4f:5f:09:
                    ad:e2:e2:af:1f:58:e9:07:6f:1f:88:31:c8:e5:99:
                    e7:7c:71:38:1c:62:e0:ed:83:f1:c3:a7:04:ce:3b:
                    6c:37:cf:bb:41:56:0a:a5:d0:1c:26:0d:d0:0c:2d:
                    ab:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B6:72:2B:7A:16:43:82:25:F2:B8:65:BB:FB:53:BA:E8:19:FA:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/652910dd-608e-3946-8a60-67e380aef3df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c211::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:6a:1e:28:60:ac:3a:53:48:bc:f8:21:12:12:b3:6f:8d:b4:
         a3:7a:76:8c:9c:21:05:5b:b8:27:d7:51:0f:7a:46:49:e4:31:
         e2:b2:ec:8e:d5:df:8e:44:ec:18:7b:bc:1a:40:e8:9d:f0:99:
         28:4d:80:ef:d7:5f:78:6d:77:f8:83:a9:97:ec:82:ae:34:92:
         a9:16:12:12:b4:06:10:db:eb:aa:d3:26:ab:91:9a:bc:d3:14:
         78:ff:e1:60:71:f9:e4:d3:19:e8:d2:bf:7f:14:35:b4:73:eb:
         57:05:f2:f8:f5:ff:ec:85:e0:1e:d2:0c:69:9a:da:03:29:91:
         f7:5e:4a:da:3e:d6:f4:b4:e9:d5:33:13:b8:ac:83:de:37:46:
         f6:b6:93:1a:a8:f6:44:97:29:5a:fe:a7:a7:75:ae:df:1c:4c:
         cb:9a:16:ce:9a:8c:51:0a:d9:01:35:72:2b:a3:a0:07:a0:12:
         2f:2c:e7:3b:b1:40:7b:50:cb:15:a5:52:51:f7:5c:e0:f8:a3:
         cc:c1:a2:3b:eb:47:e4:3f:76:6f:02:8c:8b:53:15:b7:65:73:
         45:91:e4:20:af:d1:2e:0e:2d:ba:8c:e2:11:5e:7b:93:38:66:
         86:10:a9:be:fe:77:5d:f9:b5:dc:fa:81:17:47:7a:c4:f8:7f:
         94:f0:1e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:01:19 2024 by rpki-client on console-ams.rpki-client.org