Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae2c05c6-201c-3df2-8986-481afccbcdb4.roa
File:                     ae2c05c6-201c-3df2-8986-481afccbcdb4.roa (raw, json)
Hash identifier:          B/5Y0qquRccqp8vpIXhajtbcPQjTPjrjJuO0/lVcJuE=
Subject key identifier:   AB:60:F9:D7:9A:0B:96:9A:27:FB:BC:BD:D6:3D:6D:09:97:A5:34:EF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CB3932671A309A532DE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae2c05c6-201c-3df2-8986-481afccbcdb4.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33657
IP address blocks:        2001:559:c140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:b3:93:26:71:a3:09:a5:32:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=30a81dc3-bec2-40c6-8c5f-c0f4578f56ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:10:48:48:33:a8:6b:3a:76:3b:e8:2c:0d:
                    f9:e9:cb:4c:45:f1:d8:50:b2:3d:7d:d3:00:57:bc:
                    79:76:82:3e:51:21:3d:d5:1f:b8:52:79:b4:ff:b8:
                    6c:14:e2:cf:d5:6f:e3:9d:ee:12:9b:b4:fd:f9:81:
                    d2:d0:77:a4:b6:b7:7b:2b:b4:e4:c6:09:99:53:15:
                    e5:93:9a:05:0d:cb:e4:d5:b8:de:af:ce:ca:57:db:
                    fe:79:a6:ed:3d:09:8b:08:cb:30:bb:58:9f:09:d8:
                    54:d4:ae:ae:2d:28:00:eb:b0:c0:4c:2a:93:d7:09:
                    13:2a:f1:62:b5:d1:29:e0:4e:0f:f4:27:0f:41:36:
                    1c:60:2c:b7:d9:14:35:73:7f:68:c9:23:15:f2:1d:
                    ce:c0:e5:28:76:ad:50:2b:02:af:2f:51:80:c4:08:
                    73:3e:37:e1:86:c5:9b:5a:70:c6:92:91:68:9b:4f:
                    44:d7:33:69:85:00:36:2e:87:97:68:27:5b:96:01:
                    94:78:5c:0b:2b:8d:fb:a2:c9:b9:d9:41:79:37:5e:
                    6f:d7:fb:63:39:ef:a3:d5:57:fe:e4:34:fa:28:e6:
                    a5:9d:08:fc:4d:87:d6:0d:a5:53:c5:17:a4:8a:d0:
                    d3:e3:09:46:75:18:47:a8:de:1a:71:40:12:81:da:
                    33:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:60:F9:D7:9A:0B:96:9A:27:FB:BC:BD:D6:3D:6D:09:97:A5:34:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae2c05c6-201c-3df2-8986-481afccbcdb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c140::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:72:49:54:67:77:f8:c6:74:22:e8:f4:f4:04:38:af:96:03:
         f1:94:f4:80:97:f9:9f:4d:50:2f:32:ce:8b:26:5a:b5:36:70:
         4a:9a:a7:a5:ce:f3:ec:37:c1:85:58:53:8f:97:33:c9:31:9f:
         c5:a1:fb:d4:2a:72:74:c7:51:9f:0e:56:f5:b5:87:66:81:63:
         9c:37:f4:a0:1e:8d:69:e8:14:e5:a8:1e:6c:ab:dd:2f:6f:35:
         bc:2b:e6:79:31:0c:ed:07:cf:0a:2a:b2:a0:8d:3b:1b:1d:7c:
         84:c4:fc:25:3d:3d:ac:80:cb:88:c0:06:89:92:3c:6e:bc:6c:
         5b:c6:72:9d:4c:e2:d0:b8:08:38:e1:73:6a:bf:ad:71:ec:7c:
         90:67:bc:94:78:fb:a6:c4:20:e6:2b:4f:82:57:3d:3e:b0:b5:
         8e:b9:dc:7f:e3:ef:b2:ac:d2:8a:60:73:c5:fe:3c:00:0b:cd:
         04:a6:55:86:d0:22:78:01:51:24:92:ec:0c:39:90:f3:f0:f1:
         03:d1:53:ca:75:49:54:63:e2:df:7a:08:76:4d:6f:7b:3d:08:
         97:88:68:b2:70:39:91:d1:49:2a:ce:0a:40:34:93:98:1c:e7:
         d3:e6:c9:e3:99:be:28:21:94:ea:be:08:db:0e:01:dd:c0:ca:
         77:da:1e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:32 2025 by rpki-client