Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a39a783-1731-39e3-858d-a3684b21c1a6.roa
File:                     6a39a783-1731-39e3-858d-a3684b21c1a6.roa (raw, json)
Hash identifier:          rHagZeoeh7LfmPWULwVYXsoMEHOdK1XaE/MugY9KYHw=
Subject key identifier:   3C:CB:AC:13:97:82:90:C8:F2:85:CE:68:F4:12:47:6A:63:46:39:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D482606C76EB90CDF4040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a39a783-1731-39e3-858d-a3684b21c1a6.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     21508
IP address blocks:        2001:559:8445::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:48:26:06:c7:6e:b9:0c:df:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=777d601b-23cc-4aa9-ad29-70466254db9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c6:34:5c:85:b9:d6:5b:c6:c5:d3:34:66:4d:
                    6d:fd:93:e6:e4:f0:72:b1:6a:0e:be:40:70:1c:19:
                    a3:47:ee:8e:ae:32:e3:1e:6d:4f:0c:05:83:34:78:
                    3b:5f:27:1c:4d:3c:e3:5d:a8:ff:6d:2d:1a:02:06:
                    74:c7:0d:3e:84:49:5a:17:31:12:55:fc:9c:2a:80:
                    b2:5c:13:c8:4b:0f:e0:75:ce:58:d7:72:cd:ff:ef:
                    8e:cc:8e:df:7b:4b:41:23:47:7c:9d:29:a1:b5:c7:
                    b7:d4:7f:aa:0b:7c:f0:07:ce:7d:d4:3e:7c:a0:91:
                    f8:d9:75:12:79:bd:84:07:a4:be:ce:70:24:37:bb:
                    1c:c3:0c:6e:70:16:2a:0d:d9:db:dd:85:03:fc:d9:
                    01:09:e0:3d:93:51:c2:4d:d5:07:e7:4d:3f:33:47:
                    0e:23:b3:d0:3a:7b:55:bb:67:ca:97:84:bb:ab:bc:
                    04:33:20:d5:84:b0:a1:e6:05:11:d8:c9:a6:4c:68:
                    9e:28:f8:2f:c5:2c:40:28:47:f5:5b:57:b1:c6:a2:
                    80:8b:b5:49:57:d3:d2:9c:2a:a2:b6:fb:23:7d:53:
                    d6:26:ca:9a:aa:2b:84:b1:45:97:22:b2:49:48:c8:
                    f9:a7:67:32:52:4b:13:2a:1c:11:16:39:a7:89:6a:
                    2a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CB:AC:13:97:82:90:C8:F2:85:CE:68:F4:12:47:6A:63:46:39:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a39a783-1731-39e3-858d-a3684b21c1a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8445::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:b0:10:65:91:b3:96:9a:bf:de:c1:06:1d:5c:92:24:8c:a1:
         b0:13:19:a0:83:7b:2d:a2:a1:67:b6:4e:61:91:64:32:09:9d:
         c1:13:bf:ae:aa:3f:46:49:d2:dc:bd:83:2c:69:46:18:c5:26:
         f1:97:20:9f:85:c0:b7:53:aa:e1:ff:98:a4:8a:07:a6:80:b5:
         56:9f:f6:a2:03:2a:ec:f2:d9:b9:a2:e9:1c:e9:54:87:6a:07:
         cd:f8:f3:9e:b0:81:f3:f3:57:55:ad:7e:72:97:69:19:cb:f9:
         b3:9d:0d:1a:66:5e:fa:90:c1:93:81:1f:c6:a2:04:93:60:d6:
         6f:fd:af:85:85:e1:1f:d1:77:92:8e:62:32:e2:bf:02:b5:6b:
         0e:f3:01:ad:50:cd:80:72:cd:5c:11:6a:76:cf:24:da:bc:97:
         cd:2c:87:5e:4a:b0:09:6b:04:49:8f:e4:c5:ef:00:16:7a:5f:
         1d:d6:73:94:83:90:2b:83:3b:b6:6b:d2:e7:ac:ec:2f:02:39:
         7c:8d:06:ab:56:c2:7b:89:5b:3b:ab:8a:d1:48:7e:08:dd:f9:
         e8:c1:9e:e4:4e:4b:75:bf:23:f5:24:44:6d:68:a1:35:ee:16:
         a6:84:c1:08:ea:ac:93:98:8d:3f:a4:84:e6:06:3e:b8:31:21:
         da:96:73:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:18:33 2025 by rpki-client