Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e24b93e-de0c-352e-9d85-d815ddc53476.roa
File:                     0e24b93e-de0c-352e-9d85-d815ddc53476.roa (raw, json)
Hash identifier:          1eLGuXXv+7va8IJA/CDKSje7d+ZbNncZpq+19/TdnVA=
Subject key identifier:   FE:B3:A0:98:07:DE:4E:FC:BA:DF:FC:48:5B:25:85:D0:AD:73:D5:98
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A7E59E30B2DCD756C7100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e24b93e-de0c-352e-9d85-d815ddc53476.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33287
IP address blocks:        2001:559:30::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:7e:59:e3:0b:2d:cd:75:6c:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=23bee236-c2c4-4216-af7f-fe0faa4dc5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:db:63:0e:c6:fc:ee:3f:d8:62:7b:ad:ea:f0:
                    bf:d1:e7:29:59:bd:16:69:83:4b:bb:f9:43:bf:3d:
                    f2:dd:81:06:95:70:ef:32:6b:2a:2f:02:ab:db:d0:
                    ba:08:4e:f7:2a:b8:14:32:c9:37:d2:70:c0:3f:9c:
                    c8:a5:9e:5c:df:32:5a:cd:7c:bc:66:36:69:61:de:
                    46:e3:e3:b1:9e:0a:f2:50:31:92:48:4b:5a:b8:dc:
                    f7:08:0a:c9:cf:0f:ea:25:98:b4:07:b9:bd:10:81:
                    16:fa:02:07:b9:e7:ca:e0:2c:65:9c:c5:76:46:2d:
                    cc:66:96:de:87:41:69:04:f9:32:91:5f:d9:a5:8b:
                    ab:27:74:30:9b:3a:29:51:f2:28:17:83:7a:8f:48:
                    b7:ea:a9:1f:2a:b6:9e:96:6c:54:97:2e:54:6d:6d:
                    6e:99:20:56:6c:ae:35:51:9b:02:b9:2c:65:5f:d6:
                    44:9e:fb:0f:c7:5c:54:7e:cf:85:1d:a3:e5:08:58:
                    f8:89:8a:73:76:87:db:ff:bb:f8:c8:a7:9b:01:c0:
                    03:79:f9:01:85:b1:21:be:9c:bd:97:0e:d5:b9:b1:
                    2d:57:c4:23:10:a9:dd:e3:26:07:9d:78:ba:f0:de:
                    72:d1:49:48:58:f9:06:d9:10:9f:e6:80:5e:6c:5b:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B3:A0:98:07:DE:4E:FC:BA:DF:FC:48:5B:25:85:D0:AD:73:D5:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e24b93e-de0c-352e-9d85-d815ddc53476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:2f:d0:eb:12:6d:8e:30:f1:23:f1:25:b3:f8:d4:c4:60:8b:
         5c:52:14:b4:c7:38:fc:28:d7:d9:43:f3:3f:7b:de:1d:e5:c7:
         6a:eb:03:75:1d:6f:cb:05:4c:90:71:d4:5d:ab:36:c5:0e:81:
         e4:45:d6:3c:f1:80:0f:e8:10:38:9c:11:88:9c:e6:ea:dc:f6:
         0b:ae:c1:b3:00:88:49:c8:1a:bc:f8:9e:89:18:b5:75:17:6b:
         d2:f3:a2:f0:ac:96:9a:3a:42:c0:de:20:7b:9a:18:b4:62:28:
         4c:fa:d8:6f:9f:03:59:80:a2:ac:61:a9:5c:0b:2b:07:82:6a:
         17:92:3e:b1:92:e6:b9:33:15:f2:21:6b:af:ec:b6:d1:85:08:
         de:27:56:0f:d9:d9:78:d4:90:24:3e:5b:9a:d1:b0:d3:38:d0:
         33:c4:13:64:d4:ad:3f:aa:6b:ae:61:da:5b:6e:ac:cb:2b:3f:
         39:98:b9:ad:ec:39:db:67:db:9c:ce:db:10:8c:6e:c4:99:e0:
         d8:b8:b0:c0:11:9c:d2:46:38:94:31:07:77:da:66:2a:41:64:
         ae:5b:02:e0:5a:ec:ec:f4:a8:ae:9a:85:cb:15:34:ba:c4:54:
         7c:fa:80:f4:ff:d4:ac:3c:ad:19:f8:28:95:68:ad:8b:b1:d2:
         f3:80:e3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:51:00 2024 by rpki-client on console-ams.rpki-client.org