Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c5572df-98e1-362c-bb58-1abeadf96653.roa
File:                     9c5572df-98e1-362c-bb58-1abeadf96653.roa (raw, json)
Hash identifier:          oZBerDkZfEe9M91z3ZftwPwqlnzasb79UWWVD5pq/Dc=
Subject key identifier:   7A:47:CB:B2:6C:33:9A:15:6D:D6:AC:5A:5B:4E:BD:2B:FD:D3:9F:94
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFA3D3E27BA6E7A4734A678
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c5572df-98e1-362c-bb58-1abeadf96653.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33651
IP address blocks:        2001:559:82ef::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fa:3d:3e:27:ba:6e:7a:47:34:a6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=5efce26d-5dc8-4fbc-a02e-5805702c1845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:09:b2:1e:8a:ac:8f:12:5e:e4:61:f9:26:
                    0c:48:04:46:ea:38:1d:79:7a:e8:07:30:c4:89:11:
                    78:fc:91:ed:3d:6a:ab:ec:34:45:f0:d8:b2:db:8b:
                    73:51:b9:36:5f:51:a1:00:53:a4:4f:13:5e:39:ed:
                    a1:f2:89:7d:60:62:b0:57:3f:c6:22:d4:45:ba:3d:
                    d6:e5:ae:a7:51:27:f6:4a:c4:3d:bb:21:ad:d0:33:
                    d7:d2:55:57:53:f4:0b:c0:1d:33:1a:32:3d:8e:25:
                    ac:d4:f3:32:07:4a:a0:a3:05:e2:05:98:3a:d6:7a:
                    9c:5d:37:a0:95:f1:d5:b7:56:28:1d:77:33:cd:ee:
                    ad:79:5a:01:06:b0:ac:e1:bc:4f:14:0d:81:4b:be:
                    7b:01:22:5a:c3:db:d4:2f:8a:05:5a:06:55:86:3f:
                    c6:6c:d9:94:a8:b9:0c:64:85:d6:9f:a0:ff:da:97:
                    18:c4:05:4b:34:e7:4b:b5:c5:68:9e:3d:8b:b2:20:
                    96:f2:78:c9:df:a8:cb:d8:6d:23:0d:10:bd:ee:e7:
                    e3:4a:0d:f6:6a:58:85:6a:e3:1c:c3:50:be:af:7b:
                    89:b7:8a:72:04:cf:40:af:91:93:01:86:e2:ad:63:
                    ff:a7:7c:7f:13:e4:55:06:8d:bf:e1:75:f6:0e:6e:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:47:CB:B2:6C:33:9A:15:6D:D6:AC:5A:5B:4E:BD:2B:FD:D3:9F:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c5572df-98e1-362c-bb58-1abeadf96653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:82ef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:b8:1f:6f:a7:96:26:90:bd:9e:4f:d2:36:36:77:77:3a:60:
         5e:6d:e5:82:63:5d:41:51:24:a7:68:f3:d0:ac:be:f6:2d:a9:
         51:67:fa:d3:b0:0d:38:f3:b7:94:6b:01:7c:c1:54:8e:88:5e:
         bf:06:fe:e3:c5:49:94:e6:e7:55:fe:38:38:a5:36:1c:96:4e:
         f1:86:97:0b:bc:57:84:8f:92:86:eb:de:58:30:f2:10:64:05:
         41:ef:d1:8e:c2:1a:53:e6:d9:81:40:47:d5:b4:d6:3b:28:7b:
         b4:62:c3:1f:4b:6e:ab:2a:78:71:c7:b7:5c:34:40:03:56:fe:
         36:47:35:58:03:66:c2:77:10:52:ed:5e:97:76:22:ce:a1:3d:
         6d:36:05:db:e3:08:b0:25:7a:e2:cd:2c:22:24:03:93:ca:af:
         e6:dc:89:43:20:09:83:ef:94:90:4e:8e:db:5f:1c:c1:82:f1:
         30:0b:b0:a6:f9:e1:99:89:de:50:b3:50:92:39:13:e9:f6:cb:
         f4:17:49:c0:7d:6a:25:61:dd:54:3d:80:de:69:44:32:ca:8c:
         ed:47:29:d8:40:b7:4b:3a:74:96:28:88:f6:c4:88:49:5a:f5:
         6e:ee:9c:7d:9d:95:f3:06:9b:7f:b5:2b:1b:31:9f:f8:93:7d:
         51:5f:18:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:01:43 2024 by rpki-client on console-ams.rpki-client.org