Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4fb7950-e2db-311c-8bc9-3d6a97d9f4f3.roa
File:                     e4fb7950-e2db-311c-8bc9-3d6a97d9f4f3.roa (raw, json)
Hash identifier:          4OJM09Gh4yyK3N8vOeEXKy++G+4F1GvQtSB+B6lXklU=
Subject key identifier:   4E:A4:A0:3D:D5:BD:5B:81:D8:5B:4B:D3:D9:C1:BA:EB:E9:FD:4C:63
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7287809101A63FBCBE700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4fb7950-e2db-311c-8bc9-3d6a97d9f4f3.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7016
IP address blocks:        2001:559:84a4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:28:78:09:10:1a:63:fb:cb:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=81f40a8c-1462-4dbb-bded-a24fdbb56135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a6:a6:e4:e6:21:a2:42:d9:88:ee:d5:0b:bf:
                    1f:0b:44:00:f2:bc:a0:f4:85:00:63:a9:43:f4:f7:
                    53:e2:6f:73:06:09:76:b2:35:d9:e1:83:81:22:46:
                    18:54:1e:72:3e:ca:18:5e:0e:93:ab:fb:1a:da:80:
                    6f:81:f8:35:9a:ca:fc:76:1b:6d:4c:39:f7:67:3e:
                    26:ca:1b:dc:af:ab:92:e3:07:6e:12:65:8c:a4:69:
                    08:45:d7:26:fc:4a:e3:bc:5e:54:d5:3c:29:a1:3c:
                    09:08:93:c3:41:c7:b7:2e:ff:72:73:16:e8:98:19:
                    68:94:7e:4a:f7:7b:54:4c:b9:1d:ba:fc:89:5a:98:
                    6e:4b:44:c4:79:27:23:95:94:b7:33:06:a0:c8:c8:
                    50:0f:54:dd:fc:9f:c1:c9:41:e7:57:fa:7d:93:d8:
                    21:2a:10:69:da:ce:63:0f:a3:56:40:fc:ed:2a:6d:
                    75:c9:bd:26:3f:bb:ec:53:a7:40:9b:17:15:02:cf:
                    ac:d0:2a:3f:bb:58:b1:79:7f:4d:17:e5:35:c5:c6:
                    87:9b:ec:01:86:c2:c6:5e:8a:6d:4f:ed:71:f2:36:
                    3b:5a:77:11:8c:e9:c4:4c:6a:f8:40:24:ee:12:10:
                    e1:91:00:68:03:6d:03:b8:78:e2:a1:2d:57:3f:1e:
                    55:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A4:A0:3D:D5:BD:5B:81:D8:5B:4B:D3:D9:C1:BA:EB:E9:FD:4C:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e4fb7950-e2db-311c-8bc9-3d6a97d9f4f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:84a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:57:ca:9d:d7:cd:14:a9:93:d0:e6:81:ce:99:41:9c:74:e7:
         d4:55:e6:70:33:c1:d9:04:3c:cb:67:a6:5b:45:88:f6:ff:54:
         c7:31:b4:c6:80:5d:f6:d6:ed:8b:98:ad:38:42:f4:7f:18:d6:
         2d:2d:74:a8:c4:8f:10:68:6d:c3:75:cb:03:5b:a0:8b:91:f7:
         3b:2b:fa:47:df:72:8e:a4:16:5b:79:c0:3a:c2:2c:37:5f:80:
         0f:24:bf:69:e9:9d:a0:d7:b4:c4:7c:b6:21:6d:87:28:a7:99:
         be:2b:af:58:fe:d8:9a:a3:48:64:2f:30:c7:4d:4d:22:16:f8:
         5e:d8:04:55:5a:0f:d6:cf:5a:e8:e8:e9:04:d3:5f:b9:3a:31:
         8b:48:a8:5d:c8:84:ef:43:9d:36:a3:1a:c8:3b:88:01:46:bf:
         f7:12:ec:8d:11:45:16:3e:9c:ff:7c:82:c7:2c:9d:77:2c:47:
         66:e5:f1:f4:fb:98:29:de:8d:03:84:5f:b6:59:19:e4:ad:c4:
         87:46:e7:4f:e6:a7:6a:cd:31:86:80:87:3b:bf:b7:ba:f5:08:
         8b:e0:11:19:8f:5b:ff:81:5f:4b:bf:1c:75:71:ec:71:2a:7b:
         86:72:e3:90:39:42:53:8a:9f:e2:3b:a2:a3:f5:36:80:75:47:
         30:41:b4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:15:18 2024 by rpki-client on console-ams.rpki-client.org