Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d19d6a47-7eee-35dc-8409-5deecbfeb6d0.roa
File:                     d19d6a47-7eee-35dc-8409-5deecbfeb6d0.roa (raw, json)
Hash identifier:          ZXy9sQPFZNbn8F7zpLj670pJ5g9pfV9fYdfPJHW3uaE=
Subject key identifier:   0D:65:0D:18:0E:6B:2D:1A:A4:41:C7:FC:C5:7E:CA:1B:8E:A2:EF:0D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DA75FCD9F838C18100580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d19d6a47-7eee-35dc-8409-5deecbfeb6d0.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     7015
IP address blocks:        2001:559:532::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:a7:5f:cd:9f:83:8c:18:10:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=5139786f-68e4-4188-95ca-d408783c242a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ec:8b:9a:7b:95:bf:b2:62:a4:14:01:4b:7f:
                    7b:4a:d4:8a:e2:a2:ff:d8:d5:25:d4:90:aa:3e:8f:
                    d3:85:17:b1:42:9c:ec:1d:eb:bf:de:39:2e:f3:b3:
                    b9:bf:41:d8:0d:3e:a5:d0:51:07:86:34:19:3e:63:
                    5d:b2:a6:78:f1:26:35:61:5b:2c:b8:17:a5:72:f8:
                    27:34:21:a8:90:47:64:00:7e:fd:a6:ec:f6:ab:be:
                    a6:be:80:c8:a6:7f:b0:da:41:2c:d5:ec:05:c5:11:
                    70:7d:df:6a:5f:1a:5a:18:4f:40:bc:2d:1a:54:55:
                    68:68:67:7e:d4:a6:c7:43:e3:2d:b6:7c:9b:03:e6:
                    7d:46:69:47:8a:ca:fa:35:35:5c:a5:47:c4:6a:d0:
                    6f:99:37:64:e1:30:c1:d6:56:5a:45:d7:43:54:61:
                    98:7e:35:12:10:ef:68:92:3c:9f:75:5d:82:d9:81:
                    b6:6e:66:68:eb:14:4e:39:8f:a4:0b:4a:b3:79:0a:
                    5e:55:f3:48:15:ca:8e:d9:3f:a4:81:70:c6:0e:58:
                    38:f4:ef:77:b4:69:41:99:c0:dd:d7:e1:2f:48:46:
                    79:ae:b8:39:62:d5:ab:f1:f1:bd:01:ff:9a:15:c0:
                    50:c9:46:51:5b:8c:39:cb:71:61:99:ca:94:d1:ec:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:65:0D:18:0E:6B:2D:1A:A4:41:C7:FC:C5:7E:CA:1B:8E:A2:EF:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d19d6a47-7eee-35dc-8409-5deecbfeb6d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:532::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:e8:cf:0f:fd:dd:aa:48:82:ab:36:e0:98:30:00:5b:e0:8d:
         87:0c:a3:6c:40:b2:3a:f9:a4:17:52:dd:93:03:ad:de:45:9a:
         69:e0:4e:e2:ff:5a:b3:48:4d:c9:5d:1e:d3:b4:22:a1:74:ef:
         00:8e:14:44:67:80:0c:cb:e1:cd:4c:22:4e:97:fc:09:bc:96:
         3b:0b:75:d2:7e:29:3e:24:2e:81:62:28:df:c3:e7:ad:1b:ad:
         34:bc:af:e8:b5:3d:3a:dc:10:3b:e7:9d:f2:2b:97:0b:b6:5c:
         83:e0:1a:c3:27:3e:17:e2:ba:fc:36:dd:eb:f3:33:66:9e:33:
         fa:a9:49:ed:cb:2c:a0:58:d8:e8:84:57:61:aa:93:62:2b:f1:
         61:b3:d2:f2:aa:6c:9d:41:20:a0:b9:67:2e:b9:ac:f9:6f:bb:
         4b:d0:0d:c5:bf:5c:11:99:d0:22:b5:94:8d:52:3b:ef:7f:42:
         cf:4c:e7:4a:58:0e:57:ee:e5:7a:db:73:aa:46:da:91:2f:2e:
         6e:d4:a1:35:4e:48:17:e6:f0:df:38:4c:e1:73:65:0d:74:21:
         ac:72:32:f4:51:a1:32:1a:ff:93:04:3d:15:93:e1:f7:ad:5d:
         e6:6f:bd:38:92:d7:8a:70:5b:66:9a:92:f5:b1:c4:9e:b3:66:
         cd:fc:6e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:39 2025 by rpki-client