Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89db74d7-8b4e-3111-b7c0-1f1d5fbaae70.roa
File:                     89db74d7-8b4e-3111-b7c0-1f1d5fbaae70.roa (raw, json)
Hash identifier:          t4GcDrPFwdv3gad/D9xVVZnwo/j+PgtSSosA3qPbwRs=
Subject key identifier:   C5:B7:6B:9E:F3:2D:78:A4:A0:67:46:32:D3:62:7C:E2:C1:A4:4E:67
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D6C8529FF49AB27D760C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89db74d7-8b4e-3111-b7c0-1f1d5fbaae70.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33651
IP address blocks:        2001:559:7bf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:6c:85:29:ff:49:ab:27:d7:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=811414a3-48e8-4fac-94c5-9831ec562bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:10:a8:48:b5:62:ea:c5:69:f2:54:8b:f0:f8:
                    52:cb:a6:73:55:cd:06:e1:e0:ad:7b:dd:d9:0d:d7:
                    1a:69:f9:dd:32:d9:f3:0f:fa:b7:77:f9:a1:76:6a:
                    fc:18:9f:09:c4:7c:21:aa:54:9d:68:a0:20:02:37:
                    66:87:84:46:81:55:d8:54:1c:1c:00:c7:5f:f0:64:
                    08:f9:24:4b:f6:9b:ba:cc:00:f3:0e:24:e7:cf:6e:
                    91:77:27:5e:1d:94:13:25:26:3d:c3:17:af:65:6c:
                    3b:74:50:f4:0f:4e:97:cf:41:90:d1:34:3a:98:ad:
                    39:6b:ca:01:c8:d1:6d:95:e0:05:3f:c3:44:41:07:
                    10:ca:0f:82:b9:6b:c3:f7:2e:52:3d:c9:ad:66:5e:
                    f5:2a:9c:f8:08:37:e3:ad:6b:19:86:14:e4:3c:6d:
                    33:82:e8:53:bf:61:b7:68:93:95:4c:51:4c:b9:a4:
                    38:e0:48:13:04:26:27:e9:8f:84:ab:4e:f9:fa:5f:
                    64:75:71:d6:64:a5:45:f3:58:cc:45:23:c1:81:37:
                    d9:61:df:5e:5f:8a:d2:d3:8e:72:34:d8:d3:de:27:
                    01:a0:a5:59:b0:67:98:5e:dc:be:04:68:93:67:32:
                    87:d4:65:25:a7:a3:30:91:87:c4:65:16:0d:92:14:
                    e3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B7:6B:9E:F3:2D:78:A4:A0:67:46:32:D3:62:7C:E2:C1:A4:4E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89db74d7-8b4e-3111-b7c0-1f1d5fbaae70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:7bf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:74:69:f8:33:4d:8b:79:63:d2:34:13:62:51:5d:98:3f:09:
         a2:d4:b7:82:e6:f4:1d:1c:4e:cd:d1:ea:01:b5:d7:62:08:38:
         1d:28:f9:0a:5a:81:27:81:52:de:8f:f0:33:54:07:48:fd:9c:
         58:e4:46:90:e2:38:7f:09:51:1c:7e:cf:a5:31:dd:21:13:7d:
         0d:47:fe:5b:f2:78:cc:46:e7:fe:05:ff:3c:fd:6f:d3:a8:b0:
         e8:3d:4f:50:b3:90:85:30:4d:52:3b:4f:c5:9d:e4:f4:e4:9f:
         4b:9e:23:08:30:92:c0:86:07:d5:db:7f:94:8f:24:44:7f:1a:
         99:97:65:dd:4b:f8:51:d5:04:89:70:2f:d2:d1:88:1c:e0:95:
         69:ef:ac:73:84:3e:77:17:8c:76:aa:a9:ef:c6:13:4d:61:16:
         b5:53:61:2d:7e:e5:b1:20:83:2b:7e:92:51:8f:c2:9b:d5:0d:
         47:3e:1e:b2:1a:9a:35:ee:92:ae:ef:15:9d:a2:07:1c:a6:ab:
         82:b3:c9:d1:2d:22:61:99:bc:98:eb:4b:93:b8:69:ee:a7:e8:
         38:99:f1:2a:24:8e:f6:b7:bc:6d:9e:f7:eb:df:cb:57:c4:db:
         71:52:3a:4f:51:2a:03:df:7d:9c:d3:06:1a:89:7c:f8:ff:ce:
         88:56:85:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:25:21 2025 by rpki-client