Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df86a17d-3644-3e94-84c3-3c672b37b4db.roa
File:                     df86a17d-3644-3e94-84c3-3c672b37b4db.roa (raw, json)
Hash identifier:          Sxtlmvvs7oyLfZksjQkaqSzdudEXK0qHLORHV+UltY0=
Subject key identifier:   A7:06:79:65:57:EF:E2:94:C2:43:94:A5:60:52:89:08:5B:68:94:AC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF78FDFE844FDA7C0720500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df86a17d-3644-3e94-84c3-3c672b37b4db.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33667
IP address blocks:        2001:559:350::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:8f:df:e8:44:fd:a7:c0:72:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=cc6ce891-7ace-43db-a0fa-74026ae8ee4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c1:2f:0f:02:a7:b1:bf:79:a3:02:06:7b:26:
                    d7:02:a6:52:9b:71:31:20:b0:97:6a:d5:f6:08:62:
                    97:94:6f:8c:79:ea:8e:2b:ca:96:20:d4:67:b9:00:
                    aa:8d:80:12:da:b2:eb:9e:80:13:a0:92:ee:9b:83:
                    69:4e:c8:06:29:f1:1d:e3:b9:4b:51:ad:f1:b9:0f:
                    6e:cf:c1:18:ed:c7:3f:86:3e:ac:11:a7:e6:f5:30:
                    c6:61:95:ac:9c:47:b2:1f:ae:f9:a8:43:d8:17:58:
                    87:14:2d:c0:ce:bf:58:10:50:df:2f:17:fc:ee:76:
                    3f:c9:bd:9f:82:a7:b4:50:c7:88:d8:a1:31:df:6b:
                    71:be:11:b2:52:ad:2a:7c:7b:f3:15:6e:b1:63:a0:
                    4b:4d:81:34:9b:f8:0b:c3:47:34:16:42:c4:51:81:
                    bf:6a:7e:89:89:e8:48:33:44:db:e4:c5:16:78:05:
                    73:61:fb:80:68:9e:ae:bd:ef:f2:25:11:43:6e:a1:
                    19:ae:3b:d8:b5:ab:11:17:fb:1f:5b:22:50:08:75:
                    de:68:ff:47:1a:92:2c:94:9b:a8:bb:b2:4e:f0:33:
                    dc:80:23:d3:54:9c:86:16:4f:07:f9:d8:b1:be:c9:
                    5f:15:c2:3c:41:25:2d:e6:be:d3:52:03:e7:b4:ee:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:06:79:65:57:EF:E2:94:C2:43:94:A5:60:52:89:08:5B:68:94:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df86a17d-3644-3e94-84c3-3c672b37b4db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:350::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c1:6c:13:fa:23:de:38:57:18:07:6e:2e:53:cb:00:58:71:
         d5:5d:e5:43:d4:df:63:7b:16:45:fa:7a:b0:c7:ba:e1:df:14:
         13:a2:a6:b3:ca:cf:49:25:72:95:80:44:d2:3b:1a:ed:ef:49:
         9a:4f:72:5c:48:a0:a4:89:f5:f5:e0:10:8a:47:86:ab:65:28:
         9c:44:12:f3:86:da:a0:5f:90:2e:eb:38:fe:82:e5:57:ad:58:
         07:67:50:d6:33:ba:d2:f5:f4:18:ea:b4:de:41:81:1b:ff:0b:
         97:06:ab:ca:15:27:df:18:b7:18:25:71:4a:01:86:f6:a0:da:
         5d:8c:37:34:1e:44:ca:0a:2d:a4:33:7c:46:c9:15:f4:98:c4:
         0c:a8:21:f9:e7:27:39:69:9f:98:78:aa:31:e1:60:58:ca:64:
         df:49:3c:87:92:ee:a1:43:73:67:27:5a:63:37:a5:aa:22:c2:
         59:d8:1e:90:ca:c1:53:3e:b2:2d:5a:d7:85:e6:2d:76:e5:23:
         a9:d7:f0:78:f4:cd:f3:97:54:51:65:05:81:d7:62:e3:57:99:
         24:4e:f1:5e:7d:f7:ec:52:be:c4:f7:a3:00:eb:09:04:e1:1a:
         7b:49:db:1b:10:e5:48:ed:b0:d8:d1:89:dc:d9:9d:d0:ae:d8:
         cd:ca:33:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:54:15 2024 by rpki-client on console-ams.rpki-client.org