Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96e83306-c2de-37f5-a666-d9452953a86f.roa
File:                     96e83306-c2de-37f5-a666-d9452953a86f.roa (raw, json)
Hash identifier:          lhdxh3ugH4v0SqS09EeHq7ofQrTxGiZt41MeWQSia9g=
Subject key identifier:   6D:14:9D:C9:C6:01:BB:88:58:1F:7C:7A:EF:A5:FF:85:4C:B7:9E:1A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7AAEA8BB78D24B3720A40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96e83306-c2de-37f5-a666-d9452953a86f.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7015
IP address blocks:        2001:559:84ba::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:aa:ea:8b:b7:8d:24:b3:72:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=62499e99-7472-426e-b777-956c0db50f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:eb:28:91:ae:1e:9f:a6:41:bf:2c:67:be:c3:
                    76:35:ab:6f:87:be:76:70:6d:1b:5c:24:e4:c1:f5:
                    75:db:8b:dc:d3:d7:99:1f:dc:ab:1c:29:f2:74:99:
                    61:f4:80:63:c5:d0:04:05:ee:e4:be:90:5c:de:c0:
                    a9:3b:24:d1:91:cd:58:7f:93:7f:a2:96:06:9b:fb:
                    fb:b6:03:54:fd:ad:88:0b:0e:d4:65:d0:e8:34:b1:
                    d3:94:ec:a3:fd:eb:5a:be:91:d1:50:4d:4f:7d:9d:
                    b0:01:c5:9e:dc:ff:38:78:3f:9b:35:cf:17:a0:ac:
                    5a:d7:c3:d2:50:59:80:8d:7b:aa:52:14:54:51:e5:
                    ff:1d:53:f0:24:25:b9:8b:35:ca:c0:0f:4b:9d:14:
                    ff:7c:d9:6c:c5:0b:43:a3:65:99:7b:35:64:5c:de:
                    8d:b2:a0:c5:cc:5c:51:e2:cb:5a:06:e8:d3:8c:a3:
                    8c:d4:5f:5d:90:67:62:89:7d:03:4a:9e:f1:58:fd:
                    53:4f:4f:4b:ac:80:75:42:29:94:57:27:e5:cc:32:
                    a3:a6:50:6d:60:fd:55:7d:3e:4e:88:61:94:28:c5:
                    7a:ae:2a:07:88:63:76:7a:94:35:98:61:9f:db:95:
                    06:23:bb:82:e2:bd:db:b1:e7:98:e2:8f:27:ae:b1:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:14:9D:C9:C6:01:BB:88:58:1F:7C:7A:EF:A5:FF:85:4C:B7:9E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/96e83306-c2de-37f5-a666-d9452953a86f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:84ba::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:00:5a:79:62:82:60:90:71:9b:2f:ce:81:9d:4f:ef:75:52:
         d2:29:a1:8d:09:61:41:a3:a8:5c:78:ae:40:2e:c2:67:8a:66:
         4c:1c:e3:5b:ba:e3:d3:26:0f:6c:ed:9e:10:4d:df:07:7e:82:
         d9:3a:97:66:a1:bf:23:e6:82:71:2c:bd:aa:96:94:b7:1a:b9:
         b6:a3:03:8f:5f:a2:d6:c6:7e:95:f2:e4:e8:da:1f:f6:c5:21:
         7e:29:5a:ef:65:b4:89:5e:a8:67:62:db:8b:ae:38:42:de:58:
         11:9c:6c:79:c7:4c:6c:d9:00:eb:da:44:2d:17:2a:c0:36:19:
         87:2c:b5:67:46:7c:e8:b7:3e:95:a4:0d:a6:c9:c4:f8:2f:e8:
         ac:35:63:e1:68:bd:53:c0:e3:9f:64:62:54:03:db:d1:d4:19:
         d4:84:0e:18:8d:c4:01:d6:25:32:4f:e9:07:0d:18:a7:25:0e:
         75:f6:32:10:56:f5:cb:05:4f:b9:72:1c:92:e0:48:86:9e:62:
         b1:b0:bb:47:d4:7c:25:91:d6:df:c0:f7:23:5f:e4:0e:44:5f:
         42:ac:71:f2:db:95:72:84:70:28:0f:ca:89:f4:92:04:79:5d:
         d6:8f:a4:fa:74:db:76:3a:8f:d8:d9:d3:ca:5a:99:1a:1a:90:
         ee:88:9b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:30:25 2024 by rpki-client on console-fra.rpki-client.org