Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f21c8e45-91ee-3028-bc7a-76294a7aa1c9.roa
File:                     f21c8e45-91ee-3028-bc7a-76294a7aa1c9.roa (raw, json)
Hash identifier:          K8eot6a7L30P1417F9YBif8sn7pETJooHCVG+0+mdpw=
Subject key identifier:   0D:AD:32:94:45:D2:02:73:D5:E1:57:BF:97:BC:D5:41:DE:BC:71:90
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFB7E18C7FEBCBDD5D4A3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f21c8e45-91ee-3028-bc7a-76294a7aa1c9.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        2001:559:4aa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:7e:18:c7:fe:bc:bd:d5:d4:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=cc6de2d6-d737-43cd-814d-b2576786005b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fc:0f:42:8f:55:2c:07:7e:72:7e:73:c2:a6:
                    e1:2c:f0:97:44:43:c1:4d:eb:8c:ab:32:05:80:aa:
                    c2:8c:1b:55:0f:3c:d8:1f:fe:07:9b:c6:64:e0:eb:
                    85:b1:3c:ee:b5:2c:8c:e2:b4:71:8e:c5:89:e4:14:
                    c7:c5:a0:f4:84:fa:c1:4b:be:54:8b:9c:8e:ef:67:
                    87:76:e7:4b:bc:64:40:02:dd:19:dd:26:7c:9a:4f:
                    e8:33:04:9c:49:1c:71:16:bb:79:79:19:8b:13:bf:
                    b3:52:f5:71:cc:cc:04:83:f9:fd:3e:16:93:a4:02:
                    24:e3:6b:40:d2:75:af:58:55:3d:90:a2:36:99:5f:
                    94:5c:21:13:60:8a:78:6c:73:a5:bc:fa:aa:2e:57:
                    10:6f:e2:45:6d:c2:8d:ad:c9:b0:e4:23:56:eb:5b:
                    7a:4f:44:4a:72:6c:b2:d0:d2:87:6e:0a:5b:4a:9a:
                    64:9a:29:5c:f3:6a:66:5d:01:39:79:19:19:5c:9b:
                    fe:01:8c:16:ce:a4:f5:82:d1:d6:b8:28:d5:8d:c8:
                    8b:57:28:c0:9c:d5:1f:6e:cf:97:26:6e:ee:e0:08:
                    94:87:16:52:be:91:59:78:cb:b1:37:ea:be:49:fd:
                    0b:99:61:2b:30:f3:84:ab:bb:3a:99:91:95:bf:7f:
                    1f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AD:32:94:45:D2:02:73:D5:E1:57:BF:97:BC:D5:41:DE:BC:71:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f21c8e45-91ee-3028-bc7a-76294a7aa1c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:4aa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a3:d6:ed:32:b5:a6:c0:f8:79:3f:6b:fd:90:8b:c9:b5:88:
         0f:3c:7e:4d:c4:74:bc:83:7d:b2:c2:c2:56:08:e1:79:f5:0a:
         7d:45:6b:95:25:fb:dc:aa:63:c0:e1:1f:cb:85:38:41:5a:a8:
         44:69:36:40:66:c0:df:4b:53:93:1d:c4:ad:ce:7f:90:2b:2d:
         31:fc:58:c0:91:b0:f0:57:5f:4e:f9:c8:b4:d1:66:57:d5:5d:
         53:4d:66:f8:64:35:59:a2:8c:13:40:96:f1:45:61:5a:9c:6b:
         3b:cc:55:6b:94:89:92:86:c3:5e:ed:2c:bf:4f:99:98:ea:79:
         32:f1:c6:b1:69:51:f8:2e:b5:a8:95:49:9c:e1:41:ad:7b:f0:
         ae:55:81:b4:90:e2:5b:97:d5:af:8b:c7:7e:c2:e3:47:73:1a:
         74:a0:0f:21:1d:a4:ee:27:a3:97:70:12:63:83:ed:b2:33:0c:
         03:60:4f:20:1f:98:2f:9d:4a:56:27:07:90:ad:c0:36:41:5f:
         c2:a9:6f:50:54:88:64:1b:6e:08:ea:7b:bc:86:2c:a2:54:0d:
         97:30:6a:38:dd:8e:10:95:e8:cb:0c:90:a5:e2:30:e9:19:e3:
         ba:57:89:85:3f:e2:a1:0f:31:26:43:b8:0c:47:6d:ff:54:87:
         be:76:95:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 11:18:38 2024 by rpki-client on console-fra.rpki-client.org