Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b88f5c67-946f-3285-b6ae-7b2644c60d2c.roa
File:                     b88f5c67-946f-3285-b6ae-7b2644c60d2c.roa (raw, json)
Hash identifier:          kLVM6mKFtZcm+mNahtP4M2DOza9hpwDO6PUxMqCYm9M=
Subject key identifier:   72:F4:03:17:6B:2E:9B:DF:94:76:64:BC:5A:EE:EE:A9:C1:4F:61:2E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7E87D3B25A79DF3C0FA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b88f5c67-946f-3285-b6ae-7b2644c60d2c.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33287
IP address blocks:        2001:559:c1d0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:e8:7d:3b:25:a7:9d:f3:c0:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=530d367e-eba9-49f1-a7e9-ed308582decd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0b:c2:aa:47:04:b8:c6:7b:d7:f0:68:9f:ee:
                    71:e6:6c:65:94:4f:35:66:33:c3:a0:9c:44:ee:fc:
                    56:78:50:a3:dc:f2:6b:ea:1a:37:9e:4c:aa:f8:e3:
                    cc:6d:44:46:b9:22:2c:2f:f5:3c:fa:44:40:81:94:
                    ea:d9:e1:ec:ea:f0:ec:fc:a9:81:07:07:30:43:28:
                    51:60:9f:cb:3d:db:7d:fd:56:4b:5b:0d:0c:96:3a:
                    80:d9:70:56:74:52:e6:35:fb:e2:21:88:97:7f:7a:
                    48:04:f2:70:51:29:9e:85:99:18:46:f1:60:82:1e:
                    8b:ef:a8:28:ad:a4:79:60:00:e8:3e:b3:a8:57:4d:
                    32:88:68:f9:2a:9f:dd:54:8b:5f:33:d7:83:25:a9:
                    95:08:b3:eb:78:5b:02:50:31:a1:fd:2e:36:72:a3:
                    c6:58:fc:28:1f:3d:a5:22:2a:b4:58:3a:c4:40:c9:
                    88:cf:f9:8e:f4:f5:c7:f4:a8:4a:91:97:5a:6d:de:
                    52:f6:0a:1a:ac:bd:6c:8d:39:ec:3d:26:c9:be:35:
                    16:b3:db:60:45:d0:dc:f9:8f:4f:b2:16:1f:88:fe:
                    3c:f2:37:cb:8b:c7:92:f5:31:7a:ba:96:6c:f6:11:
                    cf:65:ee:6b:ce:d5:5b:99:c4:2b:e2:67:5a:dd:70:
                    12:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F4:03:17:6B:2E:9B:DF:94:76:64:BC:5A:EE:EE:A9:C1:4F:61:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b88f5c67-946f-3285-b6ae-7b2644c60d2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c1d0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:8d:09:63:4e:a0:ac:05:a1:de:a5:78:65:d5:50:2f:11:bd:
         6c:15:e9:29:15:e1:f3:f7:d4:94:d3:26:1f:c5:74:4b:ae:3a:
         3f:4c:b5:68:b5:01:ae:6b:16:ef:5d:6f:b3:fc:c3:67:7f:af:
         f3:3c:64:57:3c:5b:09:e0:2e:92:60:df:48:b1:e8:88:fe:39:
         f3:87:d8:c5:52:00:bc:cb:85:df:e0:a7:54:64:76:bc:19:77:
         a1:cb:3a:60:b0:84:9a:46:42:84:9d:e7:ff:fe:be:3f:10:7d:
         52:a9:e3:58:10:f8:8f:97:46:8c:72:79:35:3b:88:02:38:cb:
         77:81:53:0d:1d:84:c2:0d:fd:ae:e9:01:65:1e:ed:8c:89:dd:
         05:b3:ca:e8:b0:58:ea:60:fa:2c:c5:3a:32:bb:03:4d:fa:c3:
         04:43:98:7a:bd:9a:54:05:c0:f2:49:10:79:5b:56:3a:65:f5:
         85:92:e8:b7:a7:93:81:20:8f:a6:c5:42:c4:51:ee:05:12:40:
         06:2d:7b:33:58:6d:54:58:42:da:93:3d:04:c5:c7:52:6f:52:
         0e:a2:b0:f6:22:e3:f7:57:62:8b:74:75:da:11:30:11:1c:6e:
         1d:eb:0f:b9:14:cf:b5:b0:04:5d:8d:c1:62:c4:f2:89:85:ce:
         83:73:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:33:16 2024 by rpki-client on console-fra.rpki-client.org