Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ade25f01-2cbe-35ec-a105-1fc881e072bc.roa
File:                     ade25f01-2cbe-35ec-a105-1fc881e072bc.roa (raw, json)
Hash identifier:          QIjYG72vLzeTRBze2IkYIvLzDQkAhnuxOMkVJFUeh1A=
Subject key identifier:   18:42:85:09:56:AC:D8:D9:C6:12:BF:A0:C5:62:1A:0F:DC:68:44:AD
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF76241FB5A245B197D2900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ade25f01-2cbe-35ec-a105-1fc881e072bc.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33650
IP address blocks:        2001:559:c4b6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:62:41:fb:5a:24:5b:19:7d:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=5505217b-a8ac-47f5-b5eb-62a6e0e97912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:45:55:68:9b:8c:42:9d:34:0a:67:69:cd:27:
                    1a:76:3f:99:d6:54:73:e8:33:ec:1b:42:12:29:6f:
                    23:e3:48:bd:97:90:37:8a:6c:14:ba:d6:14:99:5e:
                    4a:4d:68:bb:35:fc:88:e8:a3:7e:c2:96:1e:ec:58:
                    82:c2:0a:d5:76:ce:57:fc:ba:96:96:30:5f:4e:ef:
                    23:4a:f6:e9:97:06:c6:09:9e:bf:7a:a9:ec:80:f6:
                    4e:98:b7:dc:81:77:85:a3:c0:42:e6:48:8e:a3:dd:
                    1d:7c:48:33:88:f0:57:37:dd:d8:a5:c7:91:b3:df:
                    f5:1e:f5:f2:bf:35:0e:c6:84:18:ad:a7:3c:66:98:
                    c7:3e:2a:4a:af:cf:af:3c:e5:ba:a2:68:22:e4:ad:
                    0e:38:83:c8:ee:63:d0:43:35:96:aa:9a:9f:67:74:
                    96:6b:33:e2:7c:87:ab:37:4d:d3:6f:dc:3d:3f:f2:
                    58:2b:32:78:81:87:ca:87:7e:db:c3:f8:2e:64:13:
                    66:d4:6d:b4:ad:8f:b0:a0:29:43:9c:38:9f:51:01:
                    59:c7:24:ae:91:b1:8e:a0:14:ac:76:c6:c5:10:c2:
                    bf:45:e9:35:8d:28:c4:11:43:47:d2:c7:4d:ee:39:
                    d9:ab:4d:8f:ef:77:4c:94:ff:71:29:f2:15:a6:40:
                    ac:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:42:85:09:56:AC:D8:D9:C6:12:BF:A0:C5:62:1A:0F:DC:68:44:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ade25f01-2cbe-35ec-a105-1fc881e072bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c4b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2e:41:bb:e3:85:99:91:bf:72:1e:ca:4c:f8:17:2b:e9:24:
         bc:1b:ff:13:30:33:4a:4a:d1:8b:e6:b3:05:83:c6:8f:69:13:
         a1:99:9e:c7:2e:b7:c8:e3:32:a8:ed:de:42:73:36:dc:1c:db:
         25:0e:e8:9e:94:01:e1:ab:a6:06:c6:73:26:1c:ef:7a:95:33:
         7d:82:e9:96:a6:89:00:eb:97:da:d6:43:83:52:83:1d:8b:3b:
         88:1c:fc:f6:c0:b7:5c:d5:dc:25:da:84:45:70:16:fb:ae:68:
         74:d3:74:57:a1:e5:bc:f2:99:60:4f:b0:39:6d:b4:4f:88:96:
         fd:e1:72:18:45:0d:91:5f:f5:45:47:0f:01:54:c5:66:72:d1:
         0e:ea:16:79:35:33:c9:50:cc:a2:10:0c:36:9a:af:a6:74:43:
         28:4d:e6:d9:a8:54:bf:6a:f3:13:98:ad:12:1a:bb:da:02:01:
         5e:a0:8a:c2:74:dc:54:cc:30:cb:92:dd:f4:48:ff:2c:73:54:
         f7:15:07:da:81:8c:f5:e7:ee:3c:8e:b4:45:32:4e:be:e0:be:
         67:83:d8:25:8f:66:d0:08:e2:93:dd:c9:c3:56:fa:58:c2:ad:
         72:57:e1:76:19:b6:b8:b3:31:67:37:a1:70:a6:4a:46:7f:18:
         b7:59:4a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:26:58 2024 by rpki-client on console-fra.rpki-client.org