Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ed69af6-9aba-36fd-866c-6040f764870a.roa
File:                     6ed69af6-9aba-36fd-866c-6040f764870a.roa (raw, json)
Hash identifier:          KWjzqz0DzBZ3m064iRMPC4l5yFluPQzwZ4HoDGmVuN0=
Subject key identifier:   0A:40:F1:98:03:D3:E4:2D:49:F4:68:A3:BC:F1:B5:06:7E:34:21:26
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF743D966E59D7AA8867E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ed69af6-9aba-36fd-866c-6040f764870a.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     20214
IP address blocks:        2001:559:c111::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:43:d9:66:e5:9d:7a:a8:86:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=5f88009d-3ad1-47c9-aac9-87128b734a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e5:84:7c:d1:5a:c5:da:4e:6c:6b:a3:d3:c6:
                    20:e2:61:2c:6f:50:30:1c:69:c7:cd:8b:88:c6:53:
                    72:8e:88:ab:c5:01:84:71:8b:85:20:1c:0a:2f:fe:
                    a1:cf:fb:9a:da:0e:24:ac:c1:e5:87:e2:a0:ec:05:
                    a0:57:dd:f9:44:74:a6:e9:ae:b0:28:35:7d:a3:e7:
                    8e:b3:51:0a:52:29:79:7a:eb:19:9f:65:67:b3:f4:
                    4b:3e:38:73:f1:90:20:6e:d1:f4:60:41:a2:92:b8:
                    30:74:94:39:be:3c:3e:6f:b9:74:5d:a9:e2:25:be:
                    ee:36:94:1c:27:0a:71:3f:33:f2:5d:8b:13:ec:58:
                    cf:b4:bb:bf:1b:f4:e0:9f:c6:8c:d1:6f:c7:f4:fa:
                    4c:95:a0:b9:fb:5a:7a:bc:28:6f:8d:59:bb:2a:68:
                    80:8b:f2:23:c3:90:43:a8:4d:42:f4:7a:b9:75:44:
                    76:00:d5:fe:cd:79:4f:19:1e:b2:63:ef:c7:64:99:
                    67:e5:02:4d:83:0d:35:50:38:49:6f:67:a6:d6:1a:
                    e5:40:11:32:70:dc:f2:b5:27:6f:5c:04:68:b2:d4:
                    e3:ed:cf:b0:0e:d0:f6:98:69:ec:7c:7f:b4:44:b3:
                    8e:2c:9c:1b:7e:6d:05:33:74:b6:40:6b:5b:e1:12:
                    fb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:40:F1:98:03:D3:E4:2D:49:F4:68:A3:BC:F1:B5:06:7E:34:21:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6ed69af6-9aba-36fd-866c-6040f764870a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:07:84:eb:10:ac:ca:3a:31:87:21:d2:38:4a:68:2c:db:84:
         de:d8:40:5c:15:9c:96:d2:cb:9f:16:b6:07:53:ac:44:d6:10:
         04:e5:09:38:f4:6e:3f:16:14:9d:57:ce:f3:a4:9c:87:00:83:
         26:c7:9c:2e:ae:06:19:a5:6b:d8:c6:36:7c:2e:b9:4e:82:74:
         91:8c:ce:19:a9:3c:db:fe:d8:14:75:5c:33:32:82:1e:87:7b:
         cc:50:cc:ba:66:08:fa:e8:5d:46:65:85:fe:7d:eb:34:42:16:
         c9:b6:0c:f7:8f:ec:b2:00:37:64:be:db:1c:4a:12:ad:9c:3c:
         1b:f0:e0:12:b6:73:d3:f2:43:55:df:a5:22:22:7f:c9:e7:67:
         3b:4e:ed:2b:8f:92:ec:e7:86:ed:9f:66:4a:3d:bc:d3:4b:ab:
         d9:0c:50:0e:27:08:64:f9:95:d2:8d:fa:fd:6f:5e:8e:45:bf:
         3e:4e:2e:ab:df:3a:55:7c:c2:38:8d:b3:36:b8:9c:8f:ee:a5:
         01:a2:2c:28:c6:71:23:b6:0f:7a:85:62:3a:fe:3b:9a:8c:dc:
         a9:53:db:af:02:8d:36:ce:bd:69:54:17:f0:0e:c8:b2:a8:44:
         22:80:9b:7e:c9:33:0b:26:ea:17:5f:a0:59:bb:7d:97:ba:16:
         22:24:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:15:42 2024 by rpki-client on console-fra.rpki-client.org