Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc02e9bd-f8dd-3ea5-9c80-67132a5490fa.roa
File:                     dc02e9bd-f8dd-3ea5-9c80-67132a5490fa.roa (raw, json)
Hash identifier:          tXN1Q3Z6oFZXgeA0871imTgHQ4HxGYn10iNnaiEvLI0=
Subject key identifier:   5B:96:65:65:9C:D3:A4:FE:DA:D2:4D:CC:98:A8:80:B2:E2:36:63:09
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFC2C4641F32BF5F15D7200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc02e9bd-f8dd-3ea5-9c80-67132a5490fa.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33659
IP address blocks:        2001:559:76f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fc:2c:46:41:f3:2b:f5:f1:5d:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=e60d1fef-26b2-4b4b-9e62-97eb2af02ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a2:d8:9b:05:ac:2d:e4:47:28:d6:93:9f:1b:
                    a9:ff:be:9e:57:b1:20:61:dd:74:97:34:c7:9b:ed:
                    c0:1f:46:0d:51:98:09:f0:35:4a:d3:4f:de:48:96:
                    ba:f9:54:59:93:94:08:e7:dc:eb:89:7e:93:49:ec:
                    1d:c5:dd:f2:f7:5f:79:70:b4:99:65:33:b5:3b:eb:
                    77:42:c8:2f:fa:04:a9:0b:61:7e:50:22:58:0f:98:
                    a3:d5:3c:ce:e7:ee:e4:ee:e8:62:f0:5d:45:97:6e:
                    38:3a:16:88:5e:95:78:2b:e6:17:a5:ea:1f:af:cf:
                    c8:1a:5a:05:7b:ae:98:70:7f:bb:16:4b:a8:c6:6c:
                    0a:68:0a:65:7d:2b:2b:09:94:c3:de:3c:e6:7e:46:
                    3e:14:bb:75:0f:63:56:62:d4:33:8f:06:b9:6c:34:
                    3d:5b:42:f8:80:ec:05:dc:86:7a:38:6b:51:ef:42:
                    78:64:44:c1:b2:9d:97:65:46:aa:88:54:64:b2:04:
                    8e:cd:bf:3a:e8:8c:6a:be:62:0d:54:13:91:b2:3d:
                    c2:f2:c5:c8:b6:ab:3f:b3:02:a3:f5:16:7b:c2:c6:
                    40:d1:48:84:18:ba:7e:cd:dd:a9:4b:aa:7d:47:b2:
                    76:56:30:95:c2:a8:35:44:1e:fb:2a:94:60:67:9e:
                    43:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:96:65:65:9C:D3:A4:FE:DA:D2:4D:CC:98:A8:80:B2:E2:36:63:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc02e9bd-f8dd-3ea5-9c80-67132a5490fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:76f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:34:88:8f:4b:aa:dc:a5:27:36:1f:4a:f3:65:ad:93:bf:4d:
         b0:b0:60:f4:1e:85:6e:5c:7e:ba:51:38:78:f3:98:15:01:8a:
         2c:55:b1:bf:25:96:ea:6d:e9:72:c5:9c:30:b6:1e:c1:d7:1a:
         20:ff:ac:d5:59:bd:d3:e7:7e:f7:67:19:31:6d:3b:27:5d:b7:
         96:c1:ee:15:64:4b:1f:6b:21:92:77:33:57:43:be:0c:e8:71:
         39:cd:a5:87:75:f8:e6:ee:a6:02:b4:a4:82:da:4f:36:09:de:
         c9:09:01:32:b6:21:91:2b:15:d8:67:60:5b:7e:1d:b3:1e:49:
         c9:79:ac:7f:04:9e:0e:84:2b:fb:3e:87:68:b9:57:c8:bf:d5:
         de:16:55:89:56:69:71:18:7a:63:66:97:05:32:78:62:7b:c5:
         86:d4:61:80:51:73:d0:83:e5:ca:a5:0e:61:48:73:7f:bc:6f:
         26:9e:ef:2c:ff:5f:0d:00:ca:1f:88:73:9e:a3:50:8a:4e:5d:
         d4:ec:f5:78:5f:ed:64:86:90:1b:8d:20:18:9b:c3:3f:3a:f6:
         c3:6a:6f:32:65:15:a7:c4:d4:a5:c7:41:06:77:02:f1:96:f9:
         66:2d:c4:2d:fa:90:cb:8b:79:ea:c8:d5:aa:4b:54:c5:35:43:
         63:6d:06:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:16:00 2024 by rpki-client on console-ams.rpki-client.org