Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a9029e2-0295-3646-b54b-bed80ecdba5f.roa
File:                     8a9029e2-0295-3646-b54b-bed80ecdba5f.roa (raw, json)
Hash identifier:          P/Cguj4YybCbCr/6NXCpxoYZ4EEz+FUPubraeLIzqr4=
Subject key identifier:   41:5F:E7:A7:D0:4B:1E:69:07:01:29:E6:88:0A:F4:8F:18:4F:0F:4B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF85CC3F63FCA1CB8514908
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a9029e2-0295-3646-b54b-bed80ecdba5f.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     22909
IP address blocks:        2001:559:286::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:5c:c3:f6:3f:ca:1c:b8:51:49:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=e5522c74-1d73-4c6a-a6ba-4aa844147388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b4:50:dd:8e:fb:1f:d7:5d:b0:28:8c:a1:99:
                    6b:61:d7:24:49:95:cc:d4:a1:55:58:25:6a:a0:8d:
                    28:c9:b8:c3:28:f7:43:40:ac:20:f6:ba:c9:b0:05:
                    69:53:34:5d:aa:68:9d:3d:24:72:d4:57:17:69:03:
                    96:65:c0:eb:34:c0:52:bb:14:85:ad:1f:b2:17:57:
                    7f:e9:c6:55:32:db:ae:98:63:56:f5:72:e1:2f:d0:
                    b9:0d:3e:0c:28:6b:95:c3:21:24:bb:e7:fb:5a:a9:
                    46:3a:d1:9c:d5:1a:24:91:4e:ff:09:fc:6f:54:fc:
                    85:76:57:d9:0b:92:69:03:3b:15:cb:62:ae:0c:21:
                    ea:ef:a0:5a:9e:af:d4:5a:24:28:98:63:a2:c8:08:
                    d7:4d:de:f1:2a:83:98:f1:f8:0c:cb:27:49:aa:23:
                    10:15:60:bd:84:7c:9a:eb:4c:9c:85:74:30:c1:49:
                    86:eb:65:a7:dd:0f:a8:de:77:32:be:fb:e8:a7:89:
                    49:06:51:5c:35:83:46:45:24:07:94:8d:64:77:78:
                    ad:90:69:3c:1f:4b:30:9b:09:1f:08:f2:f5:6c:cd:
                    a3:9a:b0:07:e1:d3:84:6c:82:02:ce:15:1c:da:91:
                    95:38:6c:42:7f:aa:54:5a:73:8a:dc:e6:d0:fc:ae:
                    9d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5F:E7:A7:D0:4B:1E:69:07:01:29:E6:88:0A:F4:8F:18:4F:0F:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a9029e2-0295-3646-b54b-bed80ecdba5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:286::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:c0:36:8b:58:5c:5e:35:08:f7:66:eb:e4:b7:35:d6:1b:92:
         71:6e:d7:02:97:f6:47:6d:6f:37:89:2d:cb:b3:1f:04:2e:cb:
         94:4b:1e:e6:d4:7e:a7:6e:08:d3:82:af:79:ba:dc:98:26:ed:
         89:1a:83:dc:d1:90:66:8c:8f:a8:71:42:f5:99:e8:a3:ab:69:
         e0:19:2a:58:21:94:3e:31:27:24:f3:7b:23:98:5f:d7:9e:1b:
         e2:1c:33:48:17:71:83:2d:07:5d:b7:ae:5b:87:f3:15:88:a7:
         cc:c3:2d:19:c7:97:e3:2b:36:df:30:ad:09:c4:a1:15:e9:5b:
         f5:70:ad:71:02:36:77:f0:5c:24:44:16:f6:70:57:b1:f0:4e:
         84:21:a1:78:a5:15:7a:e2:da:c9:91:cc:38:c4:b4:67:a1:bf:
         fe:43:c8:13:88:5a:bd:d2:37:f1:b8:3f:4d:cb:ea:6c:37:52:
         df:fa:b3:6d:19:a9:0c:c9:ba:3d:32:0a:e0:64:b4:e2:ad:4b:
         1f:27:58:a2:31:bc:e6:13:13:d8:40:02:b9:fe:1e:17:e9:d6:
         06:aa:76:03:84:d0:ed:ce:ee:5a:a0:c5:de:ac:5c:48:51:8c:
         b5:81:ff:94:52:48:30:ee:47:de:9b:70:3b:21:b8:12:68:55:
         1e:71:c4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:07:36 2024 by rpki-client on console-ams.rpki-client.org