Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/860b375c-328e-3f88-9149-254e6a49816c.roa
File:                     860b375c-328e-3f88-9149-254e6a49816c.roa (raw, json)
Hash identifier:          BtNi6rSrUJJ/FHMpP7LTEh13ArLH7Uv0Bq3vSvFU7/o=
Subject key identifier:   79:70:6E:F9:4F:10:9A:F9:62:15:82:E2:C4:C5:95:82:82:44:57:D4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFBB1C3810FE2109B438BC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/860b375c-328e-3f88-9149-254e6a49816c.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33287
IP address blocks:        2001:559:c3bc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:b1:c3:81:0f:e2:10:9b:43:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=0c4a07e8-d7a5-48eb-a816-096214c579d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0a:b1:d5:77:ba:58:11:b7:a2:1c:ca:b9:bf:
                    5a:fd:14:1d:71:85:cf:ff:06:b2:1f:89:29:2b:6e:
                    f6:b0:32:79:56:1f:b2:13:a8:12:42:49:0e:16:b6:
                    3b:13:bd:95:cb:23:9e:38:e5:f1:e5:e8:ba:ac:bd:
                    a3:df:24:73:71:40:c0:eb:5c:33:63:e8:76:c3:26:
                    3d:0f:61:f1:cc:46:33:d5:76:c0:ac:92:9c:24:43:
                    d9:11:9f:56:2b:91:6e:b5:6a:c4:33:8a:90:6a:1d:
                    28:1c:52:56:50:c5:3f:ff:2e:7c:72:cf:23:f7:cd:
                    55:5a:a0:24:a0:98:40:72:dd:18:e3:ba:71:70:4e:
                    a3:e1:63:39:b6:f8:e3:92:07:8b:0e:eb:e8:04:9c:
                    e4:cd:fe:4a:44:37:5c:df:f1:63:44:a2:65:9c:9c:
                    6c:ee:e9:16:39:c5:e3:dc:fc:34:68:a6:c0:f2:6a:
                    70:16:bb:33:ad:44:43:61:28:ce:fe:bc:91:f8:eb:
                    a1:7c:0c:48:bc:13:ad:1c:ba:5c:06:98:46:d4:42:
                    2e:95:ba:76:5e:cc:95:b2:e4:dc:50:c6:20:57:fc:
                    1c:6a:7d:00:b3:14:0c:73:c6:c1:80:c2:f9:40:65:
                    02:e3:62:71:fa:72:b0:96:a2:1b:56:ab:f3:2b:a5:
                    44:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:70:6E:F9:4F:10:9A:F9:62:15:82:E2:C4:C5:95:82:82:44:57:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/860b375c-328e-3f88-9149-254e6a49816c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c3bc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:a2:a9:6c:e4:77:22:a8:19:a4:75:cf:a5:3b:3a:c7:8e:d0:
         d0:c9:18:c5:6d:d4:16:65:d4:9d:4b:42:60:c8:28:ad:a5:5d:
         56:cb:15:cc:94:07:66:8e:8f:65:88:28:d9:3b:80:8f:ff:2d:
         ab:14:91:31:09:3a:ae:49:76:39:6e:37:02:f3:e9:3b:25:f0:
         0c:bd:7e:49:b2:5e:3a:58:1d:d6:fb:37:2f:1a:b3:1b:4d:b2:
         ce:21:5e:08:a2:f6:29:48:7f:1c:f4:ac:a1:13:4e:41:01:49:
         53:b5:63:ab:36:0f:2a:9f:3a:74:c6:10:96:80:32:3b:02:53:
         f0:ba:a8:03:c7:51:9f:55:fc:8b:94:07:1f:68:7a:7a:ef:79:
         d0:6d:6b:64:7c:41:d4:6c:ed:27:c2:de:24:33:80:5b:79:ac:
         29:b1:e0:1c:2d:98:87:08:93:96:d9:90:59:fd:04:cc:9c:47:
         e0:16:5c:a2:90:be:03:3c:54:50:d8:b0:f0:bf:a7:97:7e:30:
         11:dd:b9:3b:db:03:c8:0c:36:0d:78:26:92:55:a7:c4:6d:91:
         6b:c6:12:40:41:04:70:17:e5:8d:76:71:11:f4:7f:b8:e2:19:
         17:48:c1:2d:c6:b1:34:ff:41:17:62:cb:53:f1:c9:cf:f1:c1:
         6e:e2:31:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:59:57 2024 by rpki-client on console-ams.rpki-client.org