Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad39f5e1-7b7a-33df-856d-696f8c15ca09.roa
File:                     ad39f5e1-7b7a-33df-856d-696f8c15ca09.roa (raw, json)
Hash identifier:          o2XfSkGdCDXH+Qwzufn5zs5VkLGY5BFmy7AqXZ7Irmo=
Subject key identifier:   37:45:12:57:D6:A7:87:04:EE:88:9F:D4:38:BB:DA:47:D3:EC:DB:BF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7AB580D4FD297B6BB9280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad39f5e1-7b7a-33df-856d-696f8c15ca09.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7015
IP address blocks:        2001:559:851b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:ab:58:0d:4f:d2:97:b6:bb:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=d9e95bd5-46de-4c14-84ff-f7a3a924b322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2b:5e:74:20:01:9f:df:ba:18:47:12:30:f9:
                    7c:4c:d4:fc:29:cf:21:98:32:cc:bf:78:a6:91:61:
                    89:b5:c6:99:40:84:b9:95:5c:a2:2e:ee:ce:69:10:
                    4f:f9:29:3b:d0:9a:43:63:3a:da:74:2a:bb:f6:df:
                    e5:84:4e:fe:44:15:de:f7:1d:a0:67:6e:50:18:23:
                    47:39:8e:7e:69:6d:41:5c:4a:15:9d:bc:7e:09:61:
                    45:c0:ba:d9:78:1f:09:35:36:24:61:2e:08:dc:9b:
                    b7:27:65:94:75:3a:72:dd:25:dd:34:ef:43:fb:16:
                    29:19:c7:39:c3:cf:3f:f6:b2:39:9a:50:94:97:cf:
                    2b:0b:4b:01:d5:ff:64:cf:37:00:ad:99:f7:c4:e6:
                    65:fb:50:99:02:7d:71:7d:1a:dc:7b:eb:0f:7f:4a:
                    55:ed:9a:5a:9b:07:58:22:62:14:dc:2f:68:f9:71:
                    94:ba:21:9f:1b:c7:47:25:c4:33:4a:a1:55:ff:b4:
                    ce:e2:a6:74:5c:f7:a7:1a:99:25:55:67:93:7c:07:
                    f7:e0:6d:53:e6:e8:a3:26:cd:66:dc:e7:ac:44:c6:
                    5f:c6:42:d2:17:01:60:e1:a6:a0:87:59:b6:d2:0f:
                    18:ea:bb:5c:df:42:8f:33:28:30:8b:12:a5:d9:9d:
                    cc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:45:12:57:D6:A7:87:04:EE:88:9F:D4:38:BB:DA:47:D3:EC:DB:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad39f5e1-7b7a-33df-856d-696f8c15ca09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:851b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:9d:bd:14:32:51:16:47:4f:8e:af:60:96:59:6e:7c:45:b4:
         87:85:d5:d5:7f:ea:31:26:3e:58:cd:9a:ae:6a:2a:da:91:e5:
         1d:18:1d:03:80:91:b7:88:d1:13:e3:3b:f0:7d:3d:7e:56:7c:
         45:74:61:86:c0:9a:9f:cb:46:23:5c:a4:12:eb:47:72:22:60:
         8e:42:34:d3:4f:f4:a7:71:8f:bc:a1:9e:72:40:d3:a8:7f:a0:
         60:57:ab:10:08:24:7e:15:d8:0d:ec:f5:d7:54:a5:c3:52:98:
         1d:55:af:45:5a:26:be:bc:3c:84:90:eb:cd:dc:03:fb:f5:4b:
         6c:79:86:e6:59:25:ad:f9:bf:1d:df:d3:6a:c8:07:2b:d2:2e:
         55:aa:72:dd:8a:30:bc:dd:73:45:46:b2:6c:e2:c7:82:a5:6f:
         b1:c1:10:44:40:8f:37:14:8a:89:fa:14:87:27:fd:ba:3b:5e:
         40:54:bb:41:58:9e:38:1e:22:5c:2a:26:1a:43:1e:0b:dc:49:
         87:59:b2:a2:70:78:f0:3f:5b:43:f5:4f:d1:c4:be:c5:ba:4c:
         30:d8:1b:55:89:fa:aa:f4:ec:da:86:55:5c:ce:ab:a5:dd:50:
         77:67:2b:66:60:f1:a5:06:e9:eb:1a:22:3f:0b:ac:02:f5:a6:
         03:ac:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 20:05:48 2024 by rpki-client on console-fra.rpki-client.org