Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9014d7a8-899b-306e-a5d1-e591aeb845a5.roa
File:                     9014d7a8-899b-306e-a5d1-e591aeb845a5.roa (raw, json)
Hash identifier:          DGs6+8oebiI+4/ZraX70bmTHpF5R7i4h7+u9jRL5TPo=
Subject key identifier:   7D:6B:A1:98:0C:7E:B4:5F:ED:82:13:FA:77:73:94:0C:96:B7:01:36
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF79D40ED614B236EA2E300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9014d7a8-899b-306e-a5d1-e591aeb845a5.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33668
IP address blocks:        2001:559:3ce::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:9d:40:ed:61:4b:23:6e:a2:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=cc0701b3-a531-4d6b-b734-275b7eb44a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:31:c5:bb:64:bf:8a:a0:c8:85:e5:74:d6:
                    a2:82:95:f2:4e:3c:6d:91:64:18:70:4b:6c:e7:07:
                    fd:8b:c0:b3:0c:fd:36:c2:46:c9:3b:fd:c9:20:17:
                    7a:7c:0f:43:32:4e:08:3a:e9:4c:5a:73:60:3b:77:
                    fd:4d:2a:15:25:9e:6b:df:d8:15:f8:08:d4:3d:3a:
                    77:44:35:43:0c:b8:73:b4:c2:b5:a8:ce:45:13:f8:
                    f1:7f:2b:94:96:16:b8:e7:36:7a:77:6a:ad:e8:2b:
                    2f:7d:59:7c:cf:c3:6b:89:8a:b3:1c:c0:45:7f:f5:
                    a2:eb:32:59:d9:a3:2b:78:a4:fe:d9:56:86:a9:2d:
                    de:f0:0e:b0:14:17:ca:c7:11:40:80:3f:68:99:6b:
                    2b:21:79:95:c8:43:a1:07:3a:20:10:41:89:2a:97:
                    88:9e:af:99:67:e5:2d:80:cd:cb:65:5b:23:c9:e0:
                    55:1a:90:39:c5:a5:0a:ff:39:59:d4:78:dc:4f:62:
                    6a:2c:0d:70:0d:b2:cc:0b:76:11:2c:e3:79:51:b8:
                    7d:f9:4d:69:24:ef:2a:80:78:b8:a2:90:da:35:3b:
                    6b:03:90:0c:01:a9:81:8d:d7:ab:89:f3:43:47:53:
                    62:ba:9e:d7:44:64:07:9b:e0:a6:21:c5:67:83:e8:
                    e3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6B:A1:98:0C:7E:B4:5F:ED:82:13:FA:77:73:94:0C:96:B7:01:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9014d7a8-899b-306e-a5d1-e591aeb845a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:3ce::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:9b:33:ee:68:4a:b3:79:2b:58:6e:38:a4:47:fe:06:f0:6d:
         2b:17:23:d8:a0:9b:5d:1c:ad:42:21:23:bc:47:03:15:e5:ec:
         f7:45:5a:77:1b:3b:5f:cb:5e:7b:44:ec:15:51:08:6a:66:3a:
         8c:44:38:fc:af:3e:24:a9:ce:c6:54:3f:50:c6:c9:da:a6:18:
         df:7b:7b:c0:4b:b6:38:65:5c:7e:79:47:bb:b6:59:3e:5e:df:
         53:fc:07:92:c4:72:5c:bb:78:94:c0:71:63:49:7c:77:d4:12:
         b1:95:f9:71:ce:5b:6b:9b:dc:f5:9a:b8:e4:1e:fa:4c:54:38:
         1c:aa:e6:1c:2a:32:5a:35:03:4d:35:50:bc:8b:9c:58:79:e3:
         d9:1c:c5:fe:ed:7c:4c:9b:34:be:b4:4e:97:42:75:12:66:72:
         02:86:ec:89:88:47:45:f3:d8:6a:17:07:d4:39:75:2b:85:aa:
         c4:b7:31:a5:57:b1:bf:65:51:62:6b:99:39:f3:6a:67:29:34:
         6e:b9:22:c6:f7:a9:97:93:e9:40:e7:c6:32:ed:ba:a1:48:ef:
         e1:ee:4c:d3:4e:b0:3e:6e:77:59:a7:03:5c:ae:c4:e3:dd:b5:
         a2:22:ba:61:29:30:4e:d1:ca:9f:1b:5a:db:ec:8e:67:6d:5d:
         3a:ad:61:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:51:51 2024 by rpki-client on console-fra.rpki-client.org