Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04473014-25ab-3b99-943e-bb701da8e015.roa
File:                     04473014-25ab-3b99-943e-bb701da8e015.roa (raw, json)
Hash identifier:          LJhqeGwYPxLe2jYjiDGMBrREh7qbIa7e4LGKlsnroVg=
Subject key identifier:   FA:78:CB:91:EA:CF:7A:7C:AD:E2:63:18:3B:9B:85:52:3A:52:BC:5F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C36911CE2842B16CF8000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04473014-25ab-3b99-943e-bb701da8e015.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33287
IP address blocks:        2001:559:c40f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:36:91:1c:e2:84:2b:16:cf:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=8650092c-ddb9-4b4b-be56-8d28d87665ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ba:00:fa:1f:2a:97:4b:55:33:b8:78:7a:1c:
                    6a:77:83:b1:57:0b:0c:67:70:20:f1:89:c4:8e:7a:
                    42:fd:59:d6:6e:05:5b:25:c8:3a:13:e6:d3:07:0b:
                    ae:02:80:81:14:c2:0d:82:e9:c4:34:32:77:ff:da:
                    2f:98:fe:f1:6e:3f:39:d4:47:81:0b:6e:90:5a:b9:
                    04:08:aa:83:2d:e0:74:ce:bc:66:eb:08:53:e4:7b:
                    c3:f6:d8:c3:36:84:64:e0:17:d5:4f:c1:13:f2:b9:
                    1b:49:8d:f4:79:e5:e1:ca:90:81:9a:48:4c:db:2f:
                    82:20:03:2e:59:23:d0:96:5d:c3:50:3f:6f:46:bc:
                    15:fb:75:f6:56:a5:b3:e7:ee:8f:6b:23:44:67:a1:
                    eb:50:88:96:18:bd:0f:52:cf:88:87:9a:1f:45:4f:
                    35:35:a3:da:74:d3:c2:39:56:1b:e9:91:9c:67:db:
                    86:b4:41:07:ae:ae:95:51:c9:c3:c4:16:d0:66:ef:
                    a7:67:38:cd:d7:fa:1d:33:6e:55:38:53:6e:d6:3d:
                    03:ba:74:ee:60:56:bb:89:6d:9c:03:3a:34:81:8a:
                    76:89:da:4e:15:ed:27:6b:72:f4:07:7e:c0:75:64:
                    ad:7c:92:3f:28:7c:0b:a6:a6:a6:cb:bc:c0:69:c1:
                    2e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:78:CB:91:EA:CF:7A:7C:AD:E2:63:18:3B:9B:85:52:3A:52:BC:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04473014-25ab-3b99-943e-bb701da8e015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c40f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:16:ce:fa:db:2c:14:a3:3d:77:21:6b:27:55:8e:9c:26:03:
         11:14:26:38:33:91:80:33:be:7b:f5:8e:7a:ea:b4:7f:4e:26:
         91:24:b8:49:2b:fb:ff:d5:2f:19:50:c5:15:27:57:9e:79:2a:
         87:cc:cb:5f:2b:78:aa:f5:23:a2:68:53:63:8f:5b:59:8a:1c:
         f0:85:9a:a2:ca:af:0b:a4:d4:04:ff:b6:0a:dd:9c:c4:8a:7d:
         0d:b9:ca:bf:68:01:28:3b:58:a1:19:39:12:0a:95:6f:36:b9:
         16:9d:ca:6b:8f:89:25:0a:d7:ce:f9:a1:5c:66:b4:08:08:79:
         75:12:17:ee:5d:1e:9a:4e:03:e9:18:73:3d:dd:ba:2b:54:2b:
         b0:ea:db:04:ae:d5:a2:d8:ef:1d:7a:1b:28:f9:5b:a3:93:19:
         0f:22:8a:9d:1d:6b:6d:8d:7d:cf:ce:3b:29:87:80:ee:f7:c1:
         be:3e:d1:1c:a4:32:de:7e:f6:09:68:8a:62:8c:eb:c3:ba:4f:
         7b:38:54:49:e8:91:45:52:78:21:39:d4:b0:2b:0d:bf:dc:ef:
         ef:16:b1:da:d0:ad:e0:4e:27:e4:f8:c3:2b:f9:4c:ca:77:38:
         67:08:99:ca:65:9d:c9:79:03:48:c6:ce:8f:66:0d:e9:be:89:
         d3:23:6c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:39:40 2024 by rpki-client on console-fra.rpki-client.org