Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20087511-bfd2-3f1f-9481-c27d8516fc00.roa
File:                     20087511-bfd2-3f1f-9481-c27d8516fc00.roa (raw, json)
Hash identifier:          vYx19ufccg2wYcFjzkszpdaFUkkYaz1vWDzTSJbccg4=
Subject key identifier:   7D:D1:79:F8:94:46:EA:B0:80:2D:BF:AF:E0:38:F5:86:92:40:68:01
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B509B110D9F87424C7F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20087511-bfd2-3f1f-9481-c27d8516fc00.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7725
IP address blocks:        2001:559:200b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:50:9b:11:0d:9f:87:42:4c:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=45f09b31-84f5-41b7-b396-9de5e5183507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:d1:7d:07:a4:bc:02:35:4b:86:37:11:2b:
                    ed:42:08:3d:03:cf:26:ce:d1:46:c8:79:47:e6:ae:
                    04:1d:cb:f0:73:aa:1f:1e:75:0a:70:61:c2:a7:2a:
                    48:f1:42:5c:ca:a0:96:5a:c0:82:78:eb:0f:e2:62:
                    e0:7a:94:3a:bc:23:e9:69:68:a7:fd:34:43:b8:5e:
                    2f:f3:d6:4f:02:6a:24:13:9e:cb:94:65:55:86:e0:
                    73:42:d0:0e:a6:33:30:07:d6:41:79:41:b3:4f:da:
                    07:67:c2:f6:ee:f6:d0:8e:b1:f9:81:f4:6b:61:60:
                    0c:5c:94:ed:a9:56:01:b2:64:a3:7f:68:9f:9f:8a:
                    2b:c6:f4:df:6c:29:39:03:19:e3:d2:a8:32:0d:2e:
                    c9:02:a5:42:a8:be:39:41:37:29:aa:c9:cd:4f:87:
                    36:7e:7e:6d:11:af:52:a7:93:ac:32:e1:ab:35:c8:
                    ca:5e:c4:44:f0:65:a4:8e:23:e1:4c:7d:c2:75:d7:
                    2c:a6:31:43:d4:85:b9:f2:f1:5f:2a:1c:69:7e:8f:
                    d1:6f:80:d8:92:9f:43:d1:11:ef:13:7d:5e:0c:1f:
                    37:f3:43:7c:bb:48:de:e5:03:db:50:e3:83:b6:65:
                    ad:ef:e8:4b:73:e0:7c:44:d8:7c:43:64:24:14:cb:
                    e3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D1:79:F8:94:46:EA:B0:80:2D:BF:AF:E0:38:F5:86:92:40:68:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20087511-bfd2-3f1f-9481-c27d8516fc00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:200b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:d1:89:43:6b:5a:25:27:0f:5e:7b:4a:03:0b:45:38:64:ac:
         3f:c3:36:d3:f8:e5:0a:a5:a6:04:ef:43:ac:28:c1:90:fd:45:
         89:30:30:4b:0b:8d:70:98:14:31:6d:8d:cf:28:75:56:e9:ea:
         93:e4:85:d5:f9:fe:05:45:34:8b:c9:4b:d7:d9:b8:22:2d:ad:
         ec:42:7e:80:37:d1:e3:7c:f0:39:6f:25:92:60:9f:5e:c2:ab:
         ad:ea:8b:4f:0d:6e:95:47:cd:ec:27:57:50:a3:9c:da:d9:1f:
         9d:dd:ea:5e:8f:67:ba:92:41:ee:dc:93:87:de:dd:52:81:f7:
         aa:2c:0d:8c:bf:ae:1e:8b:7c:12:3d:10:b8:ff:f9:7f:93:62:
         5d:cb:c3:65:73:f9:a5:3f:26:7e:ee:09:2c:c9:ac:eb:e7:33:
         16:bd:cd:23:35:86:98:be:84:4c:53:d7:36:46:64:7e:5f:68:
         23:3a:cf:6c:9c:4f:1f:72:33:a1:09:85:ca:e4:82:ef:68:4c:
         06:3d:6f:cf:da:47:6a:e3:30:1c:d9:c0:83:c5:d4:77:41:1d:
         ac:c4:ff:d4:da:1e:c7:3e:27:53:86:08:85:7f:91:a1:23:5e:
         61:26:1b:72:dc:ac:7d:5d:f4:8b:87:b4:09:53:57:03:bf:d5:
         18:00:e2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:29:04 2024 by rpki-client on console-ams.rpki-client.org