Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ddc3191-3bba-335b-b243-d76ee733be8d.roa
File:                     9ddc3191-3bba-335b-b243-d76ee733be8d.roa (raw, json)
Hash identifier:          t83kMndJV29XLKBxQjQyJYw81XZnJJZTZO2ExwdxIXo=
Subject key identifier:   1B:2C:64:34:EA:C4:20:FC:38:DB:50:85:EA:89:34:D9:0E:F3:CC:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7E68DBC87558FA4FE3640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ddc3191-3bba-335b-b243-d76ee733be8d.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33287
IP address blocks:        2001:559:8706::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:e6:8d:bc:87:55:8f:a4:fe:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=bbbfd3bd-1016-4de4-91c1-87deaaf6cc11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cf:79:a1:38:19:ff:51:72:78:e8:45:d5:da:
                    6a:6e:70:da:92:50:6e:3c:c0:87:e5:48:ef:21:55:
                    f6:b6:a7:c7:41:c0:b0:5e:6c:80:34:f3:54:0e:74:
                    54:12:14:3c:21:4d:20:3f:4c:08:38:42:e8:23:cc:
                    d2:37:d6:0d:0b:12:b9:74:81:7c:4a:1a:42:51:cf:
                    82:37:79:1f:10:8b:b9:39:61:5a:5d:b1:fe:7d:4a:
                    aa:6c:29:30:72:93:2f:06:a7:d2:df:3c:8c:41:eb:
                    b1:06:b2:d4:af:63:f6:a4:34:4a:5d:e8:59:a2:e3:
                    99:93:ad:95:09:0b:77:46:99:ac:8a:1c:1e:bd:c0:
                    b9:73:f9:13:78:fb:81:8d:da:c9:36:3b:fb:12:ca:
                    ac:d6:1c:7c:df:fb:1d:d9:1c:fb:14:52:d0:d3:cb:
                    42:ae:04:ef:f0:55:48:42:21:11:c1:53:b7:ce:01:
                    31:13:32:30:6d:3e:da:64:c8:33:7a:6e:e6:e2:38:
                    3a:67:f7:7c:ff:48:e8:a0:5d:3f:e1:40:b1:dc:ad:
                    ea:f6:e1:3b:d4:1b:7e:86:60:89:2c:54:73:1e:3d:
                    92:50:b2:de:cb:eb:f9:06:18:da:53:26:9e:6c:a1:
                    b2:d8:b8:ee:05:08:2f:28:d5:ac:18:2f:f1:d8:03:
                    33:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2C:64:34:EA:C4:20:FC:38:DB:50:85:EA:89:34:D9:0E:F3:CC:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ddc3191-3bba-335b-b243-d76ee733be8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8706::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:43:c2:ad:9c:cb:0b:e9:78:5b:04:ce:70:b3:62:2b:4b:62:
         2c:81:62:ad:d2:4f:17:8c:0e:e4:d1:90:e4:0a:65:6a:1a:a3:
         6a:09:f9:49:ab:63:99:dd:db:20:95:48:f7:7b:b1:61:6e:94:
         a0:94:c9:7c:dc:96:41:66:d9:9b:cd:a4:69:25:af:02:b5:0f:
         a3:a1:95:eb:0d:4b:f5:54:09:62:85:3d:64:6d:f0:91:af:8e:
         14:81:84:fd:49:cb:57:66:dc:6d:d5:25:0b:53:98:81:6f:d7:
         f2:f6:ee:13:ef:37:ab:4d:ed:e0:c3:7c:79:26:d0:46:3b:4d:
         4a:32:f6:b2:96:76:a6:0d:c1:32:15:53:55:61:f9:e9:7c:64:
         b6:73:a3:76:eb:41:3a:1f:d1:4e:91:09:91:e3:1a:3c:0e:54:
         ae:2b:22:53:42:13:4a:7f:68:05:b2:57:db:ac:3e:8a:c9:d3:
         64:ae:e8:bf:7e:96:aa:6c:39:ce:e5:2e:84:f6:85:f5:f1:90:
         f6:7c:14:6e:fc:7c:60:b1:d3:8a:81:11:79:09:1e:e5:a5:b6:
         d0:89:89:4f:c0:fe:df:14:53:88:bc:cc:6c:cc:92:97:bf:7b:
         db:cd:d0:81:45:e2:5e:2e:3c:24:0b:2f:af:e6:b8:af:92:48:
         67:25:e6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:01:51 2024 by rpki-client on console-ams.rpki-client.org