Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a8d98d1-978c-39ae-914f-919d9138f465.roa
File:                     2a8d98d1-978c-39ae-914f-919d9138f465.roa (raw, json)
Hash identifier:          YxaR3zJ8F9Veb7UnJ88YpEdgH+bqGQJ/iQDzyP+CbSg=
Subject key identifier:   4F:73:9A:0E:F4:23:E5:FF:09:43:1D:DF:5E:9E:49:76:F4:10:24:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584600499CB8FB915350B9DB24A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a8d98d1-978c-39ae-914f-919d9138f465.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7016
IP address blocks:        2001:559:162::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:9c:b8:fb:91:53:50:b9:db:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=7599a3d5-1951-48b8-ac4e-9efd27374f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:55:a3:a0:3b:59:1e:4a:e1:77:89:50:8a:b8:
                    5b:c6:92:cd:cc:a8:79:c1:27:57:96:3f:2b:3a:3c:
                    e2:da:7f:25:85:c5:be:5c:13:a6:0a:7b:a3:3b:c8:
                    3b:67:4f:f7:4f:2f:88:db:64:c9:94:53:aa:a9:ec:
                    75:77:70:33:8b:3c:a5:5a:f0:1a:d0:91:47:2d:64:
                    76:fd:3d:0d:1f:52:13:15:d0:e7:cc:11:a2:18:cf:
                    03:88:29:1c:bd:0d:df:8a:a8:be:5c:ab:29:7a:4b:
                    e6:45:b5:00:75:bf:41:17:83:ca:a7:81:6b:8f:e6:
                    a5:3d:6c:f9:d0:81:a1:4f:2a:65:85:1a:83:ee:6c:
                    6c:d3:83:5d:9f:f2:a2:8d:a6:1f:77:50:2a:a6:4b:
                    85:bd:e8:f7:3c:a8:02:16:86:3d:78:36:11:69:dd:
                    49:11:27:06:57:ee:98:3e:23:c6:8e:f9:3b:66:46:
                    33:7b:5e:fd:d6:c1:35:bd:e5:b7:45:e2:4e:62:1f:
                    50:56:4d:8d:6f:13:12:c0:d7:8f:1a:0c:3a:f1:a8:
                    13:66:4a:ae:a0:9c:d7:b0:12:c9:e8:42:cd:20:a0:
                    b9:c7:26:49:17:15:3d:7d:fd:1a:6a:5d:d6:11:ef:
                    39:0d:32:a5:c9:66:b2:8e:75:f0:86:30:c9:30:6f:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:73:9A:0E:F4:23:E5:FF:09:43:1D:DF:5E:9E:49:76:F4:10:24:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a8d98d1-978c-39ae-914f-919d9138f465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:162::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:e4:ac:17:54:73:95:d1:0d:79:52:5d:96:9a:5c:1f:48:ed:
         f5:09:65:92:85:50:00:b4:56:fd:b3:e1:e7:b8:14:5f:25:1d:
         45:45:ad:dd:65:f7:59:38:3c:9c:05:43:04:ff:8f:07:c5:e7:
         56:d7:24:83:4b:46:d2:04:66:b8:d2:32:de:4b:4f:af:fc:ba:
         ee:4e:01:a6:8e:b7:7e:f1:e7:6a:80:32:4d:99:18:02:29:ca:
         28:e7:e1:cc:84:04:7d:30:7d:83:89:54:86:8e:21:79:f5:16:
         29:67:a1:8f:38:9a:fc:b7:48:0c:1b:c0:b6:76:40:61:ad:9a:
         ab:fd:1d:88:2c:94:2d:d7:a3:13:af:29:22:9d:50:66:ca:7f:
         ab:fe:48:12:e8:fb:12:7d:64:6e:94:f6:fb:46:62:72:0e:02:
         ab:b3:b0:07:40:6a:91:58:60:95:cc:b7:75:b7:e7:e2:a1:e0:
         ac:9b:fa:a2:43:d8:7f:03:91:5b:53:f4:8a:3a:a9:54:4a:2d:
         24:fd:8b:f6:83:b5:4e:67:3c:58:bc:ab:37:95:f4:c2:79:f0:
         0d:99:cc:73:c5:2a:ad:1e:bf:9e:f6:58:fa:27:1c:7a:c4:63:
         06:94:ed:40:67:7f:de:49:d7:81:2f:fa:ba:c7:93:63:d4:a6:
         31:cb:0b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:57:48 2024 by rpki-client on console-ams.rpki-client.org