Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72537c00-8d75-3a1e-8e7d-ede2a2c8bfc8.roa
File:                     72537c00-8d75-3a1e-8e7d-ede2a2c8bfc8.roa (raw, json)
Hash identifier:          OpNT7eX4TA1pE3f+zUAgJcYd4iOyb/oqgOsZFDHPb2c=
Subject key identifier:   A7:52:26:C5:79:A7:DE:6E:64:3A:F9:F4:7A:F3:68:02:20:8D:73:54
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7570B84DCCA10303556E4
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72537c00-8d75-3a1e-8e7d-ede2a2c8bfc8.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33490
IP address blocks:        2001:559:454::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:57:0b:84:dc:ca:10:30:35:56:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=8ef5d1fd-6ece-447d-a238-b3afab50aebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:55:fb:25:16:ff:86:66:d1:b7:a0:4d:c1:f7:
                    ce:9e:71:40:d0:d3:b4:79:c0:2c:a1:a5:a1:0f:a9:
                    fc:b9:d4:47:4e:b1:c7:2d:e9:72:44:11:87:bc:56:
                    8b:e7:52:51:4f:5f:c3:7e:43:55:b5:06:98:39:ff:
                    0a:61:b3:67:d8:b4:93:ba:7b:0d:0b:ce:b0:d1:1e:
                    b2:3a:a6:f7:08:63:74:31:06:db:16:3c:3a:f9:a4:
                    10:25:4e:83:1a:bf:f7:06:3c:ff:52:05:5a:73:1d:
                    79:b6:64:da:c2:a1:18:c5:11:78:2c:a2:63:40:16:
                    fc:96:8a:fd:79:41:bc:da:08:50:b8:03:84:b8:49:
                    76:fc:23:93:db:ce:d7:a3:36:f9:82:ea:0e:e0:8b:
                    18:b1:80:b7:dc:c1:d9:8b:e5:06:c0:41:50:84:39:
                    fd:ec:2f:d8:3d:c1:2d:ee:f0:72:ad:a4:13:9a:78:
                    c5:9e:98:80:eb:74:25:b9:ce:f7:b9:5e:76:ff:6d:
                    9f:2a:b3:36:5b:8e:d2:99:6a:89:c8:d4:3a:f0:14:
                    79:9c:9e:4d:7b:13:82:6a:94:da:72:f7:79:92:e1:
                    c7:d5:53:55:31:38:0e:5e:24:49:a5:7f:6f:b6:ff:
                    94:13:0a:a6:ff:2e:90:00:6e:99:99:0c:01:1b:a6:
                    a1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:52:26:C5:79:A7:DE:6E:64:3A:F9:F4:7A:F3:68:02:20:8D:73:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72537c00-8d75-3a1e-8e7d-ede2a2c8bfc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:454::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:cc:cd:ef:ed:7c:ff:74:f4:d3:d5:c9:3b:67:51:20:a3:b9:
         fc:97:79:ff:a9:81:45:4d:65:eb:b5:90:e8:6b:a3:04:fe:a2:
         e0:ca:ee:fc:23:81:3b:f5:13:19:ff:99:50:23:09:61:6b:cc:
         88:2b:cc:a9:ac:20:b4:fc:77:4c:f7:c8:29:57:ac:8b:8f:90:
         17:b5:58:b0:dc:47:76:ca:df:b8:c8:4b:07:ec:6a:e7:8d:80:
         60:91:9d:b2:7a:7f:b3:93:c3:b8:c4:98:ee:28:33:b1:47:1f:
         ae:5f:f3:60:8d:4e:2a:fe:c8:3c:49:4e:db:4b:66:96:48:18:
         71:ec:dc:b2:e2:71:80:bf:06:b5:d6:04:cb:38:d0:6e:da:d2:
         3a:e0:b8:66:e9:49:b1:46:55:b1:c3:69:64:31:8d:78:9a:0c:
         21:b8:f8:98:f4:0e:aa:08:12:ee:ed:ba:9c:55:cd:3e:ba:ca:
         e3:6a:fe:1f:07:45:63:ab:ee:1e:10:82:9c:35:c0:d4:cc:30:
         78:9f:a0:2a:44:b8:be:f3:fd:23:d3:50:0d:3b:5e:11:fa:60:
         c2:87:2e:e2:17:1c:0d:84:6a:84:2d:bb:e8:b1:a2:18:4f:a0:
         06:37:bd:92:f4:45:fd:23:c5:2b:51:07:2a:5e:0c:dc:e5:8f:
         4f:ba:f1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:58:02 2024 by rpki-client on console-ams.rpki-client.org