Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8832f29c-aa77-366f-a7dc-e7887954d9e8.roa
File:                     8832f29c-aa77-366f-a7dc-e7887954d9e8.roa (raw, json)
Hash identifier:          cgk66M3rTEdAwyC/hTu9M3ORRdz/vxVOhWSdFxcmc+U=
Subject key identifier:   40:35:91:06:EB:03:99:01:9D:B8:B9:51:B0:BE:E9:03:98:E7:C5:8F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFBA804C608791354D27400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8832f29c-aa77-366f-a7dc-e7887954d9e8.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33287
IP address blocks:        2001:559:8695::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:a8:04:c6:08:79:13:54:d2:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=73c773bb-9752-4a86-953b-ed786052c392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2c:81:6c:22:4d:81:5f:68:24:c5:c0:18:34:
                    2c:25:ce:3c:c4:4a:e5:67:2c:a7:7d:9c:75:89:74:
                    1c:a7:70:e1:fc:93:55:ad:21:fc:73:d6:ab:7b:d9:
                    24:09:a7:bb:25:46:f0:47:31:1f:79:cb:0a:b3:15:
                    87:bb:be:2d:9c:fb:e1:0c:db:d9:3f:e8:60:ab:bd:
                    a8:0b:90:72:e1:29:8c:90:9f:f5:d3:99:a1:53:12:
                    08:12:04:ad:07:7d:6a:bd:de:60:82:4b:7d:78:12:
                    ce:b6:83:d3:98:ea:56:73:45:e4:ab:f3:14:16:06:
                    91:e6:c5:12:23:80:4e:93:ef:aa:16:a7:83:f3:38:
                    da:d1:97:19:2e:93:df:08:40:4c:3d:e8:85:fc:a9:
                    7e:76:49:a3:62:95:5a:54:39:93:b2:7e:60:1e:23:
                    fa:4f:e9:a4:05:82:99:c2:0f:86:91:a7:73:4d:12:
                    92:a3:73:16:39:2c:12:1b:05:1a:8b:42:48:6e:a2:
                    89:fd:09:65:59:39:07:00:1c:cd:a1:94:19:3c:68:
                    69:3d:35:09:5c:21:c2:5e:f3:d3:ff:89:d6:1d:e6:
                    e4:12:fe:73:ac:15:2a:e8:14:b8:15:ae:6f:0b:2a:
                    6c:6b:38:99:d5:04:31:04:10:bd:83:6f:48:a3:fc:
                    73:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:35:91:06:EB:03:99:01:9D:B8:B9:51:B0:BE:E9:03:98:E7:C5:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8832f29c-aa77-366f-a7dc-e7887954d9e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8695::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:8a:4f:5e:bf:a4:f8:43:aa:f9:2c:12:a1:d6:24:d6:e8:06:
         3c:3f:d8:1c:04:bf:00:50:a5:fd:81:a7:e3:77:be:41:78:c6:
         7e:9e:d6:ad:7c:69:e8:ce:f2:bc:e5:4e:b8:55:56:58:e0:00:
         70:4e:63:46:44:71:44:ec:79:db:39:f1:a8:3c:5d:bb:00:19:
         19:2d:b0:83:0c:28:d7:92:1c:e5:02:eb:99:5c:12:53:3f:ad:
         e6:f7:eb:59:5e:28:c8:bb:93:59:4c:33:65:b2:67:d1:7a:52:
         4b:8a:5a:f4:a1:88:5a:0a:a5:6e:51:ad:e9:55:fc:cc:84:4c:
         ef:8a:34:6c:2e:8c:c2:35:47:2f:14:47:17:77:42:2f:b9:2e:
         1e:41:e0:d4:e4:7c:07:a4:67:93:1a:7a:89:1f:50:04:6d:aa:
         5d:0e:99:a0:af:25:0e:86:24:dc:a6:63:f0:74:9f:81:6f:29:
         25:43:05:6a:45:22:72:aa:56:58:cc:03:fd:ef:c2:ca:a4:c1:
         31:1d:79:96:e2:70:bd:12:1d:ab:bb:ab:0f:31:34:57:b8:f1:
         61:50:01:fc:37:14:fe:4a:86:11:07:cc:0a:3e:b1:44:b8:92:
         1b:96:97:45:07:c0:ca:ea:5c:2c:50:00:60:a0:79:31:45:21:
         3f:36:14:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:00:07 2024 by rpki-client on console-ams.rpki-client.org