Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f72faa09-a2e2-3ad0-a5bb-bd3f68e04b4b.roa
File:                     f72faa09-a2e2-3ad0-a5bb-bd3f68e04b4b.roa (raw, json)
Hash identifier:          QkeTLbBOtbT+fQGBIz2k4sEuRpjWJOGvC8pzt0IxCc0=
Subject key identifier:   C9:C8:67:F3:CC:A2:46:31:93:3A:DE:81:CC:71:2A:1B:B8:E0:78:A7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF80C2FF19E2FF195476060
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f72faa09-a2e2-3ad0-a5bb-bd3f68e04b4b.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33657
IP address blocks:        2001:559:1e7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:0c:2f:f1:9e:2f:f1:95:47:60:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=1769e532-901e-4246-ac9e-436c6f262a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:dc:4d:ce:65:2a:40:5a:bd:68:c6:8c:65:7c:
                    3a:57:ef:2e:06:03:9c:f9:df:e0:06:8a:0c:80:00:
                    3c:78:16:ea:4a:af:2d:a7:58:d3:89:34:ee:69:82:
                    8d:43:29:92:a5:2c:ad:fc:39:b9:58:57:07:b0:62:
                    1d:72:3a:cc:3e:d0:3a:df:d2:a5:cc:95:ca:02:52:
                    a5:33:4c:9a:dd:3a:c9:1e:2c:5f:0d:7e:4a:aa:5f:
                    2f:51:1e:17:44:e7:8e:6c:bf:8b:04:36:cf:ba:00:
                    06:b4:89:34:99:ab:7b:71:08:09:f4:ea:2a:05:78:
                    6d:1a:0a:75:d1:6f:8a:93:4a:bc:19:4e:9f:71:82:
                    6b:4b:77:bc:93:65:06:e6:df:16:0c:09:0a:0d:5e:
                    77:12:22:69:86:da:36:a7:6a:51:22:d8:4b:cf:cf:
                    0c:07:c1:cf:79:0e:dc:d5:0a:31:fe:9a:dc:aa:5c:
                    ba:5c:40:b4:96:d8:fc:ce:f7:f1:31:68:eb:62:f4:
                    07:16:84:aa:5e:91:b7:0a:8a:05:e8:9b:9f:92:20:
                    ff:f4:ff:30:0d:30:f5:d9:bb:ad:af:be:dd:ea:b7:
                    a1:ff:fd:63:a6:dc:5e:c0:1b:4f:ef:e3:3b:d0:02:
                    08:d6:d3:33:33:c7:b6:27:d2:8f:95:e3:16:9f:56:
                    c9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C8:67:F3:CC:A2:46:31:93:3A:DE:81:CC:71:2A:1B:B8:E0:78:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f72faa09-a2e2-3ad0-a5bb-bd3f68e04b4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:1e7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ab:30:ab:d4:2a:7e:56:16:46:b6:a3:21:93:a7:40:34:ed:
         b8:07:c7:e2:53:b2:93:99:26:16:64:eb:8f:54:e3:68:d0:23:
         7a:7e:47:64:e6:b7:6e:01:3b:f2:7f:fd:b3:cd:93:0b:a5:5c:
         d0:76:19:fb:ce:1d:9f:59:31:cc:5f:c3:e2:e7:a0:d7:2d:53:
         0d:76:42:4a:61:40:00:49:dd:e9:c7:e7:75:2f:41:8b:d5:24:
         4a:3c:88:f5:92:3c:9e:23:b9:74:6d:ee:aa:0e:a9:c7:fa:e1:
         6c:36:a9:ea:df:77:98:76:ec:8a:8b:c0:49:e8:d2:86:3e:51:
         57:53:e7:1f:50:93:1b:07:8f:8c:8f:b1:de:e6:f3:53:29:31:
         08:95:c9:9e:13:f6:53:f1:a0:05:6c:f7:a4:2a:e9:ca:66:63:
         8a:31:32:3b:c4:f2:a1:5a:48:49:d2:3b:ea:2b:c6:a2:a3:4c:
         50:3a:c8:6f:92:24:6f:64:ab:22:fb:da:24:94:ed:7b:45:86:
         6e:8b:22:f1:a3:24:1b:e5:f4:46:82:ab:e3:27:7f:c5:12:33:
         e9:bd:c6:35:1b:f6:30:bb:23:aa:20:a0:1d:90:4e:74:76:e2:
         08:c2:24:bc:d6:1c:3d:77:2f:a6:64:a7:2b:bf:68:56:72:bf:
         c5:34:82:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:09:46 2024 by rpki-client on console-ams.rpki-client.org