Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1c5aab9-2d45-3847-b156-2bcf0710f383.roa
File:                     a1c5aab9-2d45-3847-b156-2bcf0710f383.roa (raw, json)
Hash identifier:          2/r0RRven7aSlFc3f95jULcPaDIrkpaZo+n0CTCxSiI=
Subject key identifier:   C6:8B:6A:35:A8:18:0C:04:9E:E0:80:A6:00:6A:13:B6:07:D6:49:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858479C113329CB56E4F7D40EED80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1c5aab9-2d45-3847-b156-2bcf0710f383.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     7016
IP address blocks:        2001:559:400e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:33:29:cb:56:e4:f7:d4:0e:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=34ff9e00-c4be-46d1-be13-aa97e4d8b775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3e:21:76:3c:af:97:a0:f5:f5:e4:99:de:e1:
                    5f:de:05:c8:94:44:50:5e:44:05:a4:0e:19:12:22:
                    ed:d1:05:10:c8:c5:24:63:ea:c4:49:61:40:1d:da:
                    1e:3a:b1:f3:6f:f4:a3:41:b4:7a:a4:53:64:c2:e0:
                    d0:85:ab:34:d7:62:03:6d:55:19:a9:19:55:68:99:
                    37:c1:b7:1b:e6:53:08:1a:47:6d:ca:33:87:e0:77:
                    4f:b2:93:9c:6a:b1:ef:fc:1e:1a:4c:8f:c7:e1:9c:
                    a5:53:0e:7f:43:0b:5a:8d:ae:5b:2a:93:d1:20:7b:
                    d5:bc:66:6f:11:6f:27:f9:e6:63:1d:f9:ad:98:80:
                    7c:ac:67:7f:1a:2b:03:3d:93:64:ad:93:6a:da:72:
                    68:6e:0f:77:10:6c:05:7c:4b:d2:90:49:e8:cd:18:
                    fc:f5:d8:98:8d:3b:f5:d0:3f:b9:26:1f:7c:ea:47:
                    67:66:22:39:ce:f5:f7:46:0b:b9:0e:22:64:c6:0e:
                    b0:c9:19:eb:61:09:ec:a1:d3:9e:4e:ce:43:e5:2c:
                    74:8b:15:82:f5:4a:c9:85:53:13:1f:69:f0:ac:83:
                    78:19:8c:9a:4e:ce:1b:e5:5a:e8:62:26:cf:87:0d:
                    04:b5:31:8b:5b:5f:73:44:6d:37:8e:ca:24:ee:b0:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8B:6A:35:A8:18:0C:04:9E:E0:80:A6:00:6A:13:B6:07:D6:49:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1c5aab9-2d45-3847-b156-2bcf0710f383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:400e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:62:c0:9c:29:12:61:fb:46:60:8d:14:64:06:17:30:df:4b:
         e4:50:ae:8e:23:45:50:2d:d3:f0:d7:65:be:b2:25:43:d5:e0:
         4b:8f:bd:1f:c8:dc:eb:9f:2d:91:3c:56:dd:c7:70:67:a7:06:
         af:ea:c6:7d:4d:c3:11:09:73:8f:71:b2:a1:f8:70:cf:12:21:
         50:9a:1c:03:8e:f1:d8:ea:9f:29:cf:26:23:4e:7c:65:ca:40:
         ce:c6:dc:f9:3d:e4:76:75:f8:06:13:51:54:ab:a5:b4:19:dc:
         72:31:74:d5:1f:b3:81:72:40:49:de:9f:2e:77:5a:c8:6b:c5:
         74:ba:3a:d2:23:ed:7a:86:32:0b:52:f6:bf:6e:06:e3:7f:e7:
         34:4c:34:04:e5:fd:e9:14:2d:f5:c9:de:7d:68:4b:64:11:fd:
         e3:e2:12:22:ef:c0:69:e9:26:d7:e1:83:6c:71:49:c1:49:2c:
         97:29:60:01:b6:5e:87:39:bb:3d:31:c7:f0:e3:f4:59:4f:2a:
         0f:b7:77:d3:35:8a:5b:7f:ac:b0:79:a5:ef:4e:84:da:da:c6:
         60:51:9c:96:43:aa:05:7c:02:13:7b:20:bf:27:f7:c8:da:c5:
         33:8d:64:26:cf:e1:ef:36:3d:ab:52:f1:ad:d2:bd:9f:fe:54:
         40:d3:96:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:09:01 2024 by rpki-client on console-ams.rpki-client.org