Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bc9c054-7d16-3b86-be05-d738d01c099f.roa
File:                     6bc9c054-7d16-3b86-be05-d738d01c099f.roa (raw, json)
Hash identifier:          UjwwcYff/pPwEQMAjMS4Ncy/RiP1eHIcqya//xQU/XM=
Subject key identifier:   E2:2E:76:13:E7:02:66:42:A4:B0:8E:C5:96:7B:C8:31:FF:27:D3:84
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFAF99A9F9864C2D2C0AA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bc9c054-7d16-3b86-be05-d738d01c099f.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7015
IP address blocks:        2001:559:8575::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fa:f9:9a:9f:98:64:c2:d2:c0:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=b46ad3c0-1648-4fcc-92d3-7849b597156f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:58:4b:e8:6f:1e:60:d6:2d:f3:0a:b6:61:0f:
                    3e:1e:8b:f9:c8:61:e2:65:46:b0:5a:a4:df:87:22:
                    cd:7f:dc:29:66:3b:49:e4:92:18:d4:72:69:57:77:
                    2d:74:89:f5:91:05:3c:d1:f9:b9:bd:37:55:13:58:
                    28:fe:f2:39:8a:10:92:44:12:ab:c9:a0:3b:f7:69:
                    21:60:f1:11:56:89:97:25:66:88:dc:3f:e0:d9:ea:
                    d3:ca:a3:c8:32:30:60:35:b0:d0:fa:39:95:85:3d:
                    ad:0e:b0:84:2f:05:76:36:50:4a:cc:89:c1:f0:69:
                    37:67:1b:43:c5:6c:57:fb:7e:8e:aa:c1:03:89:b1:
                    d1:b3:cf:a0:e4:af:fc:93:e0:c9:a5:42:f8:f4:07:
                    ea:d2:e3:2d:81:eb:e9:85:45:23:64:07:ef:47:64:
                    67:00:51:67:d4:91:87:34:17:20:71:47:e6:27:15:
                    db:04:a4:59:80:d2:19:3f:55:85:68:36:e3:04:89:
                    c2:8c:08:0e:2d:5e:ad:79:e7:29:6d:aa:3c:05:68:
                    ab:22:0c:7a:88:22:97:43:6a:41:a5:2f:d1:15:af:
                    41:67:3b:67:c2:53:c5:dd:db:b7:e1:3c:23:98:1e:
                    a6:e4:77:0b:8b:fa:5e:19:61:8c:82:5d:cf:31:8f:
                    2b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2E:76:13:E7:02:66:42:A4:B0:8E:C5:96:7B:C8:31:FF:27:D3:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bc9c054-7d16-3b86-be05-d738d01c099f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8575::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f5:c0:66:57:d6:87:a1:55:94:58:88:5c:49:98:3c:89:31:
         b2:2b:07:ca:42:95:97:b7:e1:53:d8:bf:b9:80:89:24:42:b2:
         00:30:eb:ed:7a:7c:a1:3b:49:fa:5f:0e:eb:55:ba:f5:01:16:
         e8:3a:16:30:b5:b2:81:92:8f:f8:01:e5:62:43:d4:f7:48:ee:
         f6:27:0a:b9:49:cc:30:86:1e:de:dd:3c:da:7b:dc:1a:d6:e6:
         a7:c1:48:9a:fb:42:fa:51:5b:65:87:74:f1:bc:98:5f:82:47:
         d1:8d:79:a2:f3:cb:b4:60:7c:9f:c8:50:c3:94:24:56:87:88:
         7c:44:ae:01:5d:6f:bf:2e:73:24:40:78:4d:ac:0c:b8:7b:a7:
         ae:13:e2:d5:dc:ca:cc:42:c5:3d:37:75:cd:a1:b9:e6:98:42:
         63:c3:02:54:87:d5:a7:f9:95:71:71:c0:d8:5e:35:a2:44:a6:
         81:e5:c9:89:b8:dd:0c:cc:90:11:74:ec:11:8c:b0:07:7a:ab:
         93:60:d7:d8:44:35:aa:8c:3d:4d:45:0c:5e:26:e3:19:d5:c9:
         0a:01:1b:16:c1:30:bc:02:3a:55:71:e8:1e:dd:ae:d2:0f:1b:
         54:60:66:fb:fd:e6:dd:0d:51:80:d2:0c:4c:b5:ed:c0:5e:a6:
         d1:bf:15:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:26:59 2024 by rpki-client on console-fra.rpki-client.org