Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6600b1b-0d13-371c-9e8e-9d44f69b0abe.roa
File:                     a6600b1b-0d13-371c-9e8e-9d44f69b0abe.roa (raw, json)
Hash identifier:          2SdhY8p56HTq5Vy1uelMK82vb6s+HzHqmpUw80rr4vY=
Subject key identifier:   9A:5B:3D:A1:5B:CF:6B:F3:D7:53:22:67:6C:EA:B1:A0:00:EB:DC:13
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CAC17573095FA289579C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6600b1b-0d13-371c-9e8e-9d44f69b0abe.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33657
IP address blocks:        2001:559:a2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:ac:17:57:30:95:fa:28:95:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=64442cc6-2a04-4d6b-9214-f463f6aa32e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:37:92:72:74:8d:72:80:b4:dd:26:ff:48:06:
                    79:30:07:e3:34:e2:42:88:5a:24:9d:87:cf:cd:1d:
                    89:ca:7f:f3:3f:2f:83:35:a1:65:7e:0b:71:c3:2a:
                    f3:22:b0:f7:7e:8e:71:59:51:0b:1e:ab:07:14:d2:
                    7f:e0:09:3c:a9:3a:c8:23:ab:33:cc:c7:51:7f:5c:
                    68:af:2d:d7:f5:02:78:e9:9e:28:f0:83:e6:f4:bc:
                    47:03:4b:e1:15:bf:51:a6:2f:90:c1:95:6f:4c:05:
                    61:24:f1:76:7a:b9:0b:f2:63:24:be:28:39:d0:23:
                    cb:e0:22:3f:c3:2c:a5:11:09:79:22:ba:08:3e:ac:
                    5c:33:98:aa:4a:c9:b5:2b:41:9b:5f:6c:15:4a:4b:
                    b5:e2:ab:5d:4a:cf:63:64:f7:c9:7e:d3:12:da:49:
                    50:e1:42:85:51:4b:3f:ba:5a:9d:48:bd:10:33:bd:
                    e1:8c:d1:8f:2a:5f:cc:e2:a9:03:2e:b6:70:ae:49:
                    53:e5:1e:f5:85:28:cd:08:20:7c:bd:b1:4f:bb:f5:
                    de:ba:84:b6:02:9a:84:69:14:1a:26:e6:b8:d5:b3:
                    d4:39:37:af:32:39:51:2b:5b:b7:8f:7d:94:f9:2c:
                    fa:6f:49:12:61:32:e0:cd:ff:e3:79:fa:8d:ef:fe:
                    17:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5B:3D:A1:5B:CF:6B:F3:D7:53:22:67:6C:EA:B1:A0:00:EB:DC:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6600b1b-0d13-371c-9e8e-9d44f69b0abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:a2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:b3:6f:b9:58:3e:a4:b5:d5:85:49:24:51:39:ea:b5:51:e1:
         de:2a:ce:82:02:63:43:6d:55:35:b2:7a:f0:fb:5c:dc:17:6b:
         52:ea:d4:18:64:6e:49:95:f7:34:0e:a7:0e:c6:ff:1e:9c:1e:
         84:22:10:e5:f0:36:a8:6a:c8:65:64:9c:c5:ad:50:93:8e:e4:
         b2:b4:41:fe:fe:df:15:17:a9:39:a6:ec:aa:c0:95:44:3d:1e:
         73:2a:72:19:b9:31:fa:56:d8:a3:bb:05:77:50:aa:e4:57:ea:
         31:69:c5:ee:ee:6e:12:8f:69:8f:72:3b:e0:38:a2:b1:1f:bf:
         95:bb:9b:30:a9:df:b8:49:5b:86:d6:44:33:d8:52:ad:ab:10:
         59:35:27:06:bf:15:e5:9c:2e:7f:25:7f:e2:3e:37:b2:b5:7d:
         e7:e6:17:db:01:60:51:45:36:2b:f8:e7:96:b2:e8:0e:06:50:
         8d:64:76:03:0a:46:44:06:59:f7:76:29:8a:bb:2b:a1:43:84:
         50:d7:79:40:71:7d:92:99:77:ee:d9:d4:f7:e4:ca:34:74:09:
         bd:d5:f3:04:07:44:88:15:50:88:85:65:a5:d4:95:6b:35:d1:
         6d:f7:f1:d6:87:1f:b9:03:b0:1c:44:91:06:a6:62:ad:90:01:
         ff:5c:02:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:40 2025 by rpki-client