Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eac75cbb-2df2-3c3c-95de-b618b5f6a8a2.roa
File:                     eac75cbb-2df2-3c3c-95de-b618b5f6a8a2.roa (raw, json)
Hash identifier:          fZ20dkPOa1ZmBw0MirF+CL8OvKzzlUMftIbaIY1N1+8=
Subject key identifier:   10:96:51:C9:7D:49:C3:32:B4:8E:68:A1:B3:FD:14:AD:43:B4:54:A0
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF80474C20ED64B13DA9A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eac75cbb-2df2-3c3c-95de-b618b5f6a8a2.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        2001:559:c4fa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:04:74:c2:0e:d6:4b:13:da:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=07163a26-8d67-4534-aa51-d631fd420b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:78:92:2f:02:6f:d2:cf:b9:e1:61:33:dd:79:
                    a7:93:b5:79:f9:c6:6b:59:f8:8e:9d:1c:29:0d:c9:
                    46:ff:cf:46:f7:b8:43:5c:52:f4:c6:14:7d:a4:c5:
                    d8:62:0c:81:c8:52:4c:dd:de:59:e5:d2:45:68:1e:
                    40:11:64:cc:b9:8f:6d:69:aa:e3:79:0b:65:a7:80:
                    ae:18:0a:c9:48:42:80:43:de:a1:cf:1d:00:58:5a:
                    1d:df:fc:9b:84:7c:89:50:dd:bb:3f:4a:8b:14:ae:
                    23:e3:59:4c:be:11:c2:e4:a7:3b:68:5d:e8:2e:81:
                    47:24:d8:86:5a:3f:58:e6:d6:4e:a3:0f:ba:44:74:
                    d2:46:49:f7:4c:bb:51:bb:0c:d9:40:06:38:25:e5:
                    ab:45:a0:56:c9:e9:7b:a7:5a:c9:52:d2:78:e0:20:
                    59:e8:6f:ea:25:db:ea:d5:5e:43:c0:34:06:3e:a2:
                    51:8d:6b:db:8e:e4:b9:b8:03:f1:3b:0f:18:16:3c:
                    3d:6b:6f:89:92:ad:99:1a:cb:12:59:2b:9c:f3:bf:
                    7b:f7:53:8c:3d:c0:4c:7f:f3:f2:b4:71:4f:90:21:
                    40:8b:98:cf:45:ed:e1:dc:35:c2:60:e3:1e:43:ca:
                    99:10:07:d6:8e:ed:86:2c:73:9c:34:c5:6d:de:8b:
                    28:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:96:51:C9:7D:49:C3:32:B4:8E:68:A1:B3:FD:14:AD:43:B4:54:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eac75cbb-2df2-3c3c-95de-b618b5f6a8a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c4fa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:45:90:2d:c4:02:01:81:22:cd:2c:c7:47:8c:fb:3a:4b:57:
         e9:73:85:14:d7:cb:61:83:33:ad:07:11:fc:b9:ff:13:48:4e:
         30:04:39:58:d8:46:ac:f0:51:19:b8:d6:28:5c:57:27:c0:64:
         83:7d:3a:f8:cd:e6:51:5d:88:68:45:e8:bf:3e:d8:47:60:63:
         6a:40:d1:6b:ff:0c:14:73:d3:d9:ed:f4:1a:71:94:ab:ec:7f:
         7d:ad:78:94:ec:da:a8:a4:30:b1:8d:4c:a6:c1:61:29:a9:7e:
         44:37:09:45:97:cc:1a:01:7c:4b:fe:37:56:60:b6:d5:64:4f:
         ea:8d:a8:a5:c3:ce:80:58:be:bf:08:ae:ca:27:e4:ce:e6:67:
         ba:5a:e5:f4:13:8d:16:4d:37:bd:c3:30:db:cf:57:80:12:29:
         14:cb:c4:79:c3:cd:94:d4:32:37:2d:aa:5f:74:a1:a5:52:1d:
         81:ae:33:32:1e:52:af:4c:14:8d:88:a2:51:30:65:5b:6f:02:
         73:eb:82:27:7c:a9:8d:c9:2e:7d:03:a9:88:2b:dd:17:3b:e7:
         d7:f9:8a:9b:41:60:5f:e9:98:67:ef:9c:01:9e:15:f5:56:95:
         bf:22:e1:5c:d7:3b:d0:fa:77:ad:80:a8:9f:a8:b6:06:ce:3f:
         64:16:34:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 13:23:03 2024 by rpki-client on console-ams.rpki-client.org