Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9598b7e-078b-31db-8454-2b4b324831eb.roa
File:                     e9598b7e-078b-31db-8454-2b4b324831eb.roa (raw, json)
Hash identifier:          ndLBuRA4/YRYAn4Xfsr8ob94YSVDS/iHX5wvw/d3ljY=
Subject key identifier:   08:C1:EB:26:BB:E4:6D:D2:FF:CD:1E:80:90:9C:5B:22:32:35:BE:27
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DEE384E2A9A36E63B3900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9598b7e-078b-31db-8454-2b4b324831eb.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33287
IP address blocks:        2001:559:c4bd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:ee:38:4e:2a:9a:36:e6:3b:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=d57faf1e-d47e-42d7-971e-f732eba231fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b9:7e:19:ff:13:a3:fb:66:b5:33:56:c0:ee:
                    aa:1b:d2:f3:a5:29:c2:2d:a7:97:8c:eb:48:8a:ab:
                    c0:60:d6:ef:7b:77:b5:31:17:8c:d9:32:3d:92:de:
                    0b:c6:5c:64:97:46:5f:02:d2:05:9b:f3:42:e4:bd:
                    57:7a:7f:9e:4f:29:e6:45:d5:4e:04:cf:13:c4:e1:
                    89:47:c4:bf:e0:ec:26:6e:ab:8f:44:ef:37:06:14:
                    28:6d:88:c9:ee:72:ac:80:55:8b:c5:2a:10:ab:11:
                    df:ec:af:ca:21:67:08:aa:2b:4f:df:a4:93:fe:7b:
                    57:9f:82:3e:2a:3d:a8:8c:b4:d6:71:a6:4e:c4:40:
                    bd:6d:16:a4:78:a5:d4:27:1f:27:fc:3b:c7:d4:f0:
                    f3:8f:19:89:69:17:c5:fa:83:a4:83:49:18:49:0e:
                    9f:3b:cd:7a:ca:d8:89:30:48:09:77:30:05:4c:b4:
                    11:67:54:bf:bd:51:87:b0:ab:bb:21:b7:8c:b9:98:
                    7d:0e:84:e5:5b:38:10:e7:e4:cd:b8:f9:45:16:2e:
                    70:fb:7e:7f:f4:84:dc:36:dc:a5:bf:52:8e:84:44:
                    c3:b4:f8:6c:04:a3:89:79:be:ce:10:3a:df:47:77:
                    65:bf:7a:b0:e0:15:98:31:64:42:2a:55:40:fd:c1:
                    e3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C1:EB:26:BB:E4:6D:D2:FF:CD:1E:80:90:9C:5B:22:32:35:BE:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9598b7e-078b-31db-8454-2b4b324831eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c4bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:24:7a:a0:7b:88:d5:dd:5e:14:83:d6:72:6f:b8:67:34:47:
         be:3e:f5:18:31:71:84:73:0f:61:3f:12:8f:49:38:a0:60:86:
         31:af:fb:e7:ba:08:fa:44:36:91:1b:b8:a8:43:70:e2:a4:f8:
         44:1c:a4:0f:44:39:32:3f:e3:39:1a:1b:6e:de:b1:c3:d8:a2:
         7f:c9:3a:a7:30:cf:7c:ca:91:1b:6b:0f:85:b9:ba:c3:77:f0:
         4f:a5:8e:50:40:37:61:58:86:6f:3c:8b:83:25:54:12:0d:44:
         b6:b5:e3:6d:a8:96:d2:c9:8a:c4:83:c4:d7:fa:1e:b7:da:d9:
         e2:c6:e2:bf:d8:27:f1:fb:41:ef:59:02:81:a7:8b:be:9f:07:
         a4:a0:b8:f3:98:3a:e6:a9:8c:e5:45:87:99:c9:9d:c1:5b:3b:
         92:20:13:7e:71:3f:54:cd:41:d9:d5:67:e1:7e:b7:ce:d5:7a:
         5c:8b:4d:10:60:cf:ef:d7:f6:57:fd:d3:f6:d0:78:56:73:60:
         ea:81:b5:cc:44:78:3b:b6:79:f9:1d:7b:90:b2:ad:47:5b:42:
         e6:a3:36:fc:df:17:1c:32:19:af:63:1b:76:d5:51:48:96:ea:
         63:8d:34:9e:e4:61:c1:af:57:58:69:f3:10:c8:5c:5e:d6:fb:
         ae:78:a0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:16:13 2025 by rpki-client