Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d712dd46-78d8-35ab-b2f8-89ab6837557a.roa
File:                     d712dd46-78d8-35ab-b2f8-89ab6837557a.roa (raw, json)
Hash identifier:          l8XAYcjwjfnTh1jD9Pt0qiBkv4gAr8En3syfflb4mt0=
Subject key identifier:   43:3E:9C:00:7C:BB:F6:88:CC:09:DD:78:07:C7:3C:F0:76:7D:F5:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFC292B85F7706E79ADAA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d712dd46-78d8-35ab-b2f8-89ab6837557a.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33659
IP address blocks:        2001:559:505::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fc:29:2b:85:f7:70:6e:79:ad:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=079d4496-3631-47b9-959d-fa01c00a89a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e3:28:3b:13:08:2b:4b:48:5d:0d:df:f3:54:
                    9c:b3:9e:9e:e0:aa:ae:0b:17:db:41:12:84:a6:13:
                    bf:f3:d5:df:f9:d6:b5:bd:d2:85:26:18:da:65:56:
                    cd:ba:9e:2a:77:40:8d:7f:27:94:23:73:99:dd:5f:
                    81:41:1c:76:ca:15:fe:a0:37:ed:91:6c:05:db:17:
                    97:5f:14:b6:ef:82:cf:3e:ed:f6:a3:0d:04:46:b7:
                    89:d8:7f:eb:65:ad:64:b7:b2:07:a6:45:89:49:5f:
                    27:ea:86:9e:fb:2e:e9:5d:3f:9e:0a:6f:75:22:4c:
                    db:dc:81:76:7a:77:1a:37:51:a2:cf:34:6b:10:eb:
                    62:5d:39:de:97:bb:59:f0:5c:eb:27:8f:5b:7e:5c:
                    6a:d9:d4:bc:47:f9:36:02:af:d9:5f:75:66:aa:1e:
                    d7:76:89:94:c4:9a:2b:62:b6:d5:56:d5:ca:52:ae:
                    2c:01:fb:56:8a:6e:21:38:57:6a:4f:72:73:c4:18:
                    46:16:c9:c4:bc:69:87:b7:a2:88:15:63:96:62:0a:
                    72:bc:9e:8c:7d:2e:ff:39:b8:46:98:72:ec:ca:53:
                    bf:1e:f0:f8:bd:59:4b:a0:bc:0c:fc:9f:70:c2:4a:
                    12:95:e1:43:3a:43:c0:c9:5a:40:a2:5c:39:80:ea:
                    c6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3E:9C:00:7C:BB:F6:88:CC:09:DD:78:07:C7:3C:F0:76:7D:F5:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d712dd46-78d8-35ab-b2f8-89ab6837557a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:505::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:c9:33:dd:29:6a:5f:88:77:f1:a5:2c:bc:06:f1:8f:e7:00:
         31:82:8a:76:5b:33:8b:34:35:3a:5e:b1:79:d8:bc:7c:a5:30:
         98:4e:26:9a:97:55:0b:9b:87:29:d5:82:d0:8c:68:a4:fc:6f:
         8c:e6:ec:d2:df:db:ea:e6:f0:76:58:0f:82:16:0d:36:aa:62:
         3a:0e:83:9e:78:b7:c5:38:0d:93:ee:22:6f:fc:d2:38:4c:3c:
         65:a8:f2:0d:f1:e7:db:bc:d1:a6:46:5c:37:37:c3:c0:22:f2:
         8d:69:c7:f0:d4:79:61:1a:e7:5c:31:b4:38:4d:71:80:ea:41:
         57:25:35:c5:ac:61:73:63:14:82:ca:29:99:d2:f6:d1:50:05:
         d4:ca:41:cf:a6:17:46:73:0c:22:87:58:90:5c:1a:5f:ea:72:
         60:f5:4e:b1:75:18:f1:7a:7b:86:6a:9e:58:55:fa:52:37:ac:
         b3:8c:10:d4:1d:a1:75:10:3a:16:30:8b:de:5e:50:58:bd:4d:
         46:78:27:6e:7d:c5:57:ee:22:3f:79:fd:70:a0:20:4b:82:ef:
         69:3b:bb:7a:2a:e5:df:3d:d2:ea:82:8b:99:71:9e:85:41:f5:
         d9:40:d4:6f:5a:98:5f:08:10:8b:49:5e:fe:67:57:f6:d8:95:
         a4:ac:5c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:35:48 2024 by rpki-client on console-fra.rpki-client.org