Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d669f766-3e3c-3ba2-a76b-88f52ca47449.roa
File:                     d669f766-3e3c-3ba2-a76b-88f52ca47449.roa (raw, json)
Hash identifier:          mB6oh4Dm2r9OfhWbYeE3ae59SbECWrng60BYWJ6kOS0=
Subject key identifier:   02:56:25:2E:EE:60:32:7F:35:AA:86:B3:F9:18:63:4E:0D:CD:01:82
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFBA54977808AECC3B11200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d669f766-3e3c-3ba2-a76b-88f52ca47449.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33287
IP address blocks:        2001:559:840a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:a5:49:77:80:8a:ec:c3:b1:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=d25f9479-2da5-4c80-a652-ad30849a2771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6e:6d:9a:7b:9e:d1:97:bd:ed:e0:53:45:df:
                    82:e4:b9:27:bf:bf:7e:a9:97:6c:c6:b2:31:88:65:
                    63:5e:dd:34:b9:aa:d9:e2:94:6f:6d:d7:c4:6e:e3:
                    b7:79:ab:92:d3:0b:a1:3b:81:e5:0e:2f:a2:27:74:
                    98:63:54:26:15:c5:45:aa:cf:5b:d0:b5:97:e7:d1:
                    c3:fc:af:d9:07:92:a7:c5:47:2f:fa:35:f4:73:fd:
                    65:62:93:93:b5:df:37:b3:fa:27:74:58:80:8e:f9:
                    89:9c:eb:58:52:e0:f8:03:37:c1:cf:17:88:ba:23:
                    e9:13:50:f2:6b:82:59:fd:0e:55:22:3f:ea:6c:1f:
                    96:bd:8b:11:4d:4b:e2:61:8a:01:35:89:3f:bc:4c:
                    09:ed:d0:b0:ed:6e:88:27:4f:39:af:02:01:b9:0a:
                    84:b0:d2:e4:32:9e:f2:38:b4:0a:01:ef:d0:22:0e:
                    e2:b2:f7:29:29:40:e0:b0:3c:a3:d6:35:ce:5d:9b:
                    cc:79:e8:94:9c:25:77:2a:1e:7c:ea:3e:af:f1:25:
                    62:41:fb:d0:e2:ba:3f:1b:12:0f:fb:69:1c:8f:d6:
                    c3:b7:dd:22:f9:d2:d2:e4:28:12:21:53:fc:a5:2f:
                    be:61:c5:d6:e2:48:9a:3b:d8:2e:d2:42:7a:99:54:
                    f1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:56:25:2E:EE:60:32:7F:35:AA:86:B3:F9:18:63:4E:0D:CD:01:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d669f766-3e3c-3ba2-a76b-88f52ca47449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:840a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:35:15:85:e3:c2:90:f4:a1:02:9f:c1:c9:3c:74:b8:ed:55:
         58:f6:72:be:3b:30:f9:7b:fa:5e:59:9b:e0:9c:ca:45:ad:b3:
         74:d0:73:35:b9:7b:8f:8b:20:de:30:24:f5:35:15:07:05:91:
         d8:2f:13:b5:c5:e8:60:b1:64:78:ce:c1:c1:f6:2c:b4:97:51:
         04:2d:bf:be:27:67:c3:8f:12:94:ba:48:cc:8b:ae:dd:fe:83:
         06:5b:49:f7:66:85:e4:36:f6:66:8a:7f:cb:30:b5:4d:73:61:
         91:51:a5:c5:71:62:5e:f1:21:3c:f1:20:3f:31:0c:c5:1b:a2:
         ca:dd:f7:8d:68:f0:87:96:5c:5a:1e:e5:3c:bc:7d:aa:3d:de:
         38:bb:f9:00:24:81:d6:7f:ee:4f:50:3a:f0:40:7a:23:00:24:
         df:10:4d:71:85:80:0f:41:04:00:6d:f5:5d:01:83:dc:a7:a0:
         e4:90:47:29:72:2d:d9:61:17:9d:e8:85:b0:cb:53:ff:50:5a:
         06:32:c7:3a:8f:31:7f:de:8b:dc:c9:d2:98:70:c1:f6:80:ff:
         80:97:88:4b:4c:e3:fc:36:43:23:1d:e6:59:e5:af:03:db:cc:
         56:d3:dd:e0:e7:5a:ac:fd:f7:8e:86:d3:8c:5c:69:b6:aa:b6:
         db:0c:a6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:06:56 2024 by rpki-client on console-ams.rpki-client.org