Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f0ed72-728f-3403-992c-19e4348e092e.roa
File:                     28f0ed72-728f-3403-992c-19e4348e092e.roa (raw, json)
Hash identifier:          AZSpxFa0guAS62/eEo2lAsytI+YaoY3KgfyrwcON0y4=
Subject key identifier:   87:D6:46:B5:16:04:09:7B:B7:DC:9A:68:2D:46:5E:A1:6D:98:F3:44
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A311A08AC0E3B70C12B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f0ed72-728f-3403-992c-19e4348e092e.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7015
IP address blocks:        2001:559:827d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:31:1a:08:ac:0e:3b:70:c1:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=f7d392d5-b343-4396-b858-05444331bb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:74:41:c6:1b:42:84:cc:29:2a:15:9f:72:d1:
                    ab:d6:16:bf:63:19:26:13:bf:f4:71:cd:96:3f:4d:
                    e1:b9:72:b9:d0:78:92:b6:68:a3:64:c0:63:38:6e:
                    0f:7a:c9:cb:78:18:65:cb:3f:b6:29:c8:bf:e9:2b:
                    6c:b6:0f:af:45:b8:20:ad:ad:f9:02:21:3b:a6:ed:
                    91:e0:0b:23:8d:40:55:09:e2:3d:45:ca:3c:64:8a:
                    33:2f:cb:0c:e6:5d:5a:8e:88:a3:d2:06:1a:fb:79:
                    5a:b1:1b:29:ac:37:4e:60:da:1e:97:85:00:ad:b5:
                    7c:9c:93:1b:8e:1e:e2:f8:a2:e2:8f:0e:ad:ca:b4:
                    5a:7f:d6:90:ba:e9:69:00:81:d0:27:89:14:d9:a6:
                    a4:a6:bb:d4:57:54:e1:a0:a2:fe:df:1f:5a:f7:03:
                    1c:4f:41:ed:da:3d:f0:3c:a0:1f:59:e1:5b:fa:83:
                    0a:9d:78:b2:0e:c8:d1:78:ef:59:ac:2f:6e:5b:a8:
                    9d:33:7b:39:06:ac:8d:ed:3a:d7:87:04:0e:df:40:
                    b3:49:ec:90:60:4c:64:7b:27:29:15:db:d1:2b:ff:
                    75:9d:9c:6d:da:4e:c2:ed:90:1a:61:aa:81:1a:14:
                    86:61:16:6f:55:55:4e:69:71:34:8e:d2:63:e2:94:
                    03:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D6:46:B5:16:04:09:7B:B7:DC:9A:68:2D:46:5E:A1:6D:98:F3:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f0ed72-728f-3403-992c-19e4348e092e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:827d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:bb:3b:17:dd:de:32:ea:8f:56:b4:cf:f3:3e:2c:44:bf:d2:
         c9:f7:e2:50:b4:dd:d7:1e:fc:b9:06:08:6d:57:2d:81:fe:44:
         bd:58:e2:22:95:03:a3:32:57:cc:60:d0:13:b4:ea:07:f1:42:
         63:83:86:d2:19:9b:10:eb:5f:d9:f4:6d:fe:70:f8:7b:36:57:
         ea:62:a5:75:dc:4b:9c:61:62:cc:21:1b:74:4b:1e:a6:16:fb:
         a4:3e:6f:b8:77:29:a5:b3:61:b5:87:5c:2a:4b:97:86:10:72:
         bf:4d:4c:6c:d6:8f:99:cb:fd:d2:9a:c7:f1:44:15:97:f7:2b:
         57:d7:ae:1c:e2:cf:ae:44:30:da:2e:72:31:2b:7a:75:bb:1e:
         94:7d:01:34:a5:38:50:29:3d:a6:98:42:96:47:bc:01:c5:b2:
         10:a1:68:25:43:cb:09:e3:19:56:f5:79:b8:d5:5c:c6:fa:f9:
         6a:d9:f5:c5:aa:f1:9a:40:d7:50:c7:ff:9c:f5:9b:d5:ae:75:
         eb:a7:8f:9c:da:1f:79:37:b2:ed:53:ec:3a:d7:9a:0a:ad:ba:
         6e:59:da:18:70:8f:c3:bd:60:b7:75:b5:33:aa:c4:6f:e7:dc:
         35:25:9b:1a:c1:59:95:a3:d7:aa:20:04:dd:7b:7d:12:5a:ef:
         3f:74:5c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:40:19 2024 by rpki-client on console-fra.rpki-client.org