Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3d20309-1da6-38c1-8464-b1d5833b4ccb.roa
File:                     e3d20309-1da6-38c1-8464-b1d5833b4ccb.roa (raw, json)
Hash identifier:          Znu6+lLwj4suQASySVO4iK40NttlozUryxpARRb5c7s=
Subject key identifier:   B0:06:E0:E2:80:22:8F:5C:13:9D:CB:51:85:79:26:F9:12:1D:30:55
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF813A539702A375EE9B000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3d20309-1da6-38c1-8464-b1d5833b4ccb.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33657
IP address blocks:        2001:559:c365::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:13:a5:39:70:2a:37:5e:e9:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=6f679fee-5150-47e0-9a85-83768eb04500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:ed:98:12:2c:a4:56:cf:e8:7a:8d:a9:c7:
                    69:1e:6f:3a:e3:3d:8e:36:ff:a3:d5:ba:87:91:86:
                    f8:56:c7:7f:83:db:0a:3c:82:f2:0b:1f:6d:11:05:
                    bc:b9:d3:05:92:1a:46:c4:ce:63:27:8c:13:74:4b:
                    9b:5f:f0:fa:00:43:81:d0:14:66:04:5f:dd:99:27:
                    c6:6b:06:92:77:69:23:0b:04:c1:b9:e3:13:32:60:
                    81:4f:f9:a9:21:6f:cb:3b:6e:da:f1:bd:cf:d3:ec:
                    c3:4b:9e:46:1a:90:a0:3e:d8:14:30:b9:8c:01:e8:
                    2c:cf:a4:28:f1:c6:b8:17:38:f8:28:ba:93:99:ba:
                    30:50:7a:33:01:ee:ee:79:cf:9e:19:6b:0f:3e:e7:
                    07:b6:7e:37:f3:bd:47:71:e5:be:98:1b:76:62:85:
                    f8:49:ca:b2:50:99:f2:30:bf:bd:1d:eb:5e:95:13:
                    71:e4:4a:25:e0:e8:02:5f:f3:5e:b3:4b:6b:60:eb:
                    57:33:8d:49:c2:10:9d:5b:d6:13:07:ba:3f:c2:4f:
                    5d:61:6b:a5:f8:0b:06:16:f5:91:e5:d8:97:4d:86:
                    a5:9e:0d:28:a3:32:29:99:56:64:04:b0:1c:93:b6:
                    9d:ec:fe:c6:84:dd:94:29:34:cd:04:23:e3:6c:59:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:06:E0:E2:80:22:8F:5C:13:9D:CB:51:85:79:26:F9:12:1D:30:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3d20309-1da6-38c1-8464-b1d5833b4ccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c365::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:5f:8b:fd:4a:d3:68:11:d3:2b:52:82:22:05:e7:70:08:a2:
         cc:c6:61:79:6f:5a:91:02:61:fb:3d:d7:24:8c:5f:88:5e:f0:
         85:7d:df:a4:ba:5a:ba:15:76:46:d7:ca:bf:b0:3d:0e:52:ed:
         aa:f8:1c:ec:ac:82:f9:94:ed:85:bc:c3:73:4b:0b:5c:ae:e3:
         1c:dc:04:e9:86:d9:5b:dc:b3:b6:d5:88:f4:59:05:cc:67:f9:
         6d:01:93:67:30:07:0c:3b:76:bf:57:57:bb:89:27:29:46:30:
         62:7c:76:6e:97:0f:91:06:03:9d:ab:e0:81:39:2a:40:69:e4:
         82:b3:a9:6a:7e:f7:67:0e:d8:92:ff:70:b9:aa:d8:32:30:5d:
         37:a4:ce:56:3e:ab:0d:42:a6:8e:b3:a6:0c:8a:fb:6b:4f:17:
         bd:65:b1:06:15:b3:9f:a1:cb:3e:95:21:21:7f:85:e4:8b:dd:
         fc:d5:da:17:44:03:08:1b:5e:84:c5:70:86:1e:1e:0d:d6:52:
         9a:d2:cf:9f:1a:46:e5:4b:c2:3c:a4:c0:c8:bb:ff:ba:1a:f5:
         74:ee:d1:5e:3f:3c:b0:87:74:ce:1c:49:b6:cf:f6:08:d2:81:
         4d:96:e3:b6:c0:2e:66:46:4d:74:50:f8:fc:ff:e4:38:7e:5f:
         a0:64:50:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:36:54 2024 by rpki-client on console-fra.rpki-client.org