Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fa3af4e-0211-3b7a-b8e5-b8816ba93798.roa
File:                     8fa3af4e-0211-3b7a-b8e5-b8816ba93798.roa (raw, json)
Hash identifier:          MTJFAVfUnNqQ/EXGooWxeIvZFeEDlGlvgfPRYwvsL2U=
Subject key identifier:   21:60:32:8D:45:12:C4:C4:A3:45:FA:11:65:67:2D:C5:3E:81:71:B3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7E13097602A8475EE1940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fa3af4e-0211-3b7a-b8e5-b8816ba93798.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33287
IP address blocks:        2001:559:80db::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:e1:30:97:60:2a:84:75:ee:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=83188728-27f0-4e0d-9a72-abbbbd0a5330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2d:47:a0:ee:a7:7d:dd:bf:47:00:5c:4c:18:
                    58:c0:df:72:f9:46:71:cd:27:7e:96:a9:f5:f2:e4:
                    2b:4a:fc:15:14:6c:24:92:c6:76:fa:ef:b1:e2:01:
                    3c:10:f7:6e:b9:57:22:32:ab:21:40:59:1a:29:24:
                    5c:9d:25:6c:e2:e4:8c:c7:28:67:89:09:60:6f:f5:
                    27:25:f5:fd:39:cb:09:cd:06:ec:19:e9:69:3b:6b:
                    7b:da:49:2a:d5:58:9b:d6:ac:8f:ac:48:34:d5:fb:
                    11:2d:74:3e:30:11:f2:7e:59:cb:6a:61:85:77:5b:
                    68:b6:a5:d3:c6:d0:0c:b7:55:94:7f:5f:c2:51:58:
                    79:11:24:ba:13:fc:cf:60:4a:c5:e1:59:fe:d2:75:
                    94:6a:e0:48:34:c2:6c:86:c0:31:54:40:4a:ee:54:
                    6b:9b:4f:ef:46:dc:3f:83:b4:33:fe:33:9a:ca:54:
                    9e:59:f8:a3:c4:ab:8a:42:4b:17:01:20:5b:6b:10:
                    96:0e:d3:6d:a1:78:31:9e:85:b0:2b:c6:65:5d:59:
                    1b:e1:f3:c6:fe:82:d4:a7:a3:96:ce:13:5e:ee:2b:
                    3e:8e:15:f9:e0:f5:bc:f2:2c:e4:79:d8:79:8e:77:
                    8d:62:5b:51:75:ca:00:b3:56:48:cc:bd:7c:dd:c4:
                    b2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:60:32:8D:45:12:C4:C4:A3:45:FA:11:65:67:2D:C5:3E:81:71:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fa3af4e-0211-3b7a-b8e5-b8816ba93798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:80db::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:7d:e9:1b:5f:6c:af:ef:fd:7d:f8:bb:90:d0:3b:2b:15:c4:
         81:cd:4a:bf:85:9e:6c:51:09:15:c5:13:2a:82:fe:15:14:16:
         b0:51:94:de:33:37:88:d0:33:d5:09:5d:20:43:24:58:87:1a:
         b8:6e:2d:29:b4:43:d2:e1:59:c2:5e:68:c7:89:08:70:96:fd:
         07:77:12:a3:4e:87:9f:c1:33:c9:e7:65:f5:22:db:ad:ad:b8:
         f5:c6:25:f4:c8:66:f0:e6:cb:b3:fa:78:7b:ec:f5:6a:19:ba:
         28:0a:b6:d8:4f:24:dd:29:89:13:02:da:53:2e:9a:7b:f9:3d:
         a0:9d:3f:f2:fd:60:7c:60:ce:be:80:af:1d:de:66:89:04:27:
         88:de:ae:3d:10:c0:b4:5b:75:36:4b:1e:2e:e2:98:b6:71:bb:
         38:96:40:84:1c:eb:0c:bc:5f:d8:44:98:c5:8f:67:5d:2b:37:
         d0:bf:57:51:72:f7:06:b8:76:29:2c:75:01:27:da:5c:88:d2:
         48:db:38:38:9e:0c:ae:39:d1:92:6e:d5:25:11:fd:76:f4:da:
         a0:39:e7:33:b0:e8:32:04:1d:76:6a:6a:b6:93:d6:d2:b6:c9:
         43:41:37:be:64:6f:f2:8c:19:99:1e:58:70:c5:b1:e1:09:e4:
         6a:41:2e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:00:42 2024 by rpki-client on console-ams.rpki-client.org