Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93d13cff-a6e4-3895-8acc-3e0f4af67156.roa
File:                     93d13cff-a6e4-3895-8acc-3e0f4af67156.roa (raw, json)
Hash identifier:          N+NPha4IPmpdEbvXA2oPC8ETHt+LBNtEsZUHyvUuRQM=
Subject key identifier:   9B:AF:7D:AB:26:DD:71:91:B0:F6:43:39:81:28:52:DB:44:6C:5D:34
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7DF50D9560B5830AD6180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93d13cff-a6e4-3895-8acc-3e0f4af67156.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33287
IP address blocks:        2001:559:59c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:df:50:d9:56:0b:58:30:ad:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=ce36505c-4e4d-4726-af40-bcb937ca4272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:98:7a:4f:e9:59:17:8d:cf:5d:3b:34:f3:a6:
                    10:98:41:0a:ca:48:9f:44:3a:f9:7a:de:f2:35:93:
                    31:7c:4f:37:48:de:c9:6b:e8:bb:48:c1:ab:e2:98:
                    4e:87:74:57:07:71:4d:e6:ac:8e:c1:e4:b8:45:81:
                    7c:c5:00:e2:f1:37:c6:14:9c:72:8b:6f:ab:3c:e2:
                    ea:ec:e6:7e:d4:43:5e:c7:27:15:0a:d9:b5:82:f0:
                    1b:36:1f:ee:da:12:fc:96:4a:93:0b:ae:e1:53:49:
                    8e:8d:54:38:63:12:e3:21:02:5e:8c:47:28:8c:d3:
                    25:f5:c5:7f:d6:15:17:e0:ba:fc:be:b2:96:ef:c4:
                    c6:8e:56:a6:5c:ac:d9:e4:b3:80:26:15:81:f5:52:
                    e5:80:f3:68:a9:eb:bf:90:7c:af:df:43:38:21:3e:
                    09:d7:6e:3c:68:b4:d7:a9:cd:59:5a:ca:e6:ed:25:
                    c9:68:73:f8:1d:50:f2:f4:65:af:e4:9f:96:d6:e3:
                    62:85:83:09:b4:64:27:3a:47:86:3e:82:0a:f6:1a:
                    0c:79:5c:28:1f:53:02:5b:a5:34:27:1e:ef:0d:ba:
                    5c:bb:64:d9:0a:d4:0c:97:a6:5f:3e:8d:bb:f9:9e:
                    30:e0:d3:66:a5:c5:9c:c3:9a:15:b2:3a:47:a1:ce:
                    0d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AF:7D:AB:26:DD:71:91:B0:F6:43:39:81:28:52:DB:44:6C:5D:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/93d13cff-a6e4-3895-8acc-3e0f4af67156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:59c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:17:ce:9b:ab:b2:6b:4f:54:bf:a3:5e:25:9e:cb:0b:11:cb:
         5e:a3:bd:ec:b6:0a:c0:9a:73:ff:6b:52:98:c6:59:b1:b1:a7:
         82:2b:57:2b:87:70:19:3a:10:55:55:2a:53:8e:d4:5f:fc:bb:
         8e:ed:19:84:c5:09:ab:3f:c7:25:64:9c:71:c5:2a:a5:7f:ce:
         1c:47:6d:fc:98:8d:e7:59:7f:93:f7:59:a6:e2:1f:76:0f:41:
         91:7f:b6:f7:06:b0:df:39:23:78:89:c2:7f:2f:f8:8f:03:0f:
         2e:e2:68:8c:d2:f5:8a:ef:0d:1c:fd:8d:99:b4:b3:70:6d:b4:
         7a:e5:62:7b:0b:b0:38:ad:c1:54:94:85:25:a7:ee:14:e9:4d:
         87:41:d1:b9:e8:fb:8a:09:39:69:ad:80:11:24:30:d4:b9:0e:
         5b:27:ca:14:ac:db:30:d9:aa:c3:c0:b7:99:1d:15:44:da:19:
         f5:69:df:37:95:23:6b:68:35:3d:52:a0:f4:4a:01:62:5a:46:
         a7:a6:23:22:f1:ae:c7:d5:17:5b:1c:40:08:9d:60:8c:80:8b:
         bd:25:1f:b6:7d:96:ea:fc:20:c3:54:80:3a:41:c6:02:d4:bb:
         42:b3:e9:69:ab:94:c4:0f:e6:90:a8:a2:fc:af:42:a6:2d:f2:
         e1:ab:7a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:30:12 2024 by rpki-client on console-fra.rpki-client.org