Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b0a004-4523-38cd-b8db-5801799c1a19.roa
File:                     43b0a004-4523-38cd-b8db-5801799c1a19.roa (raw, json)
Hash identifier:          f+1BorJv4StBmwoD/vQrDb3ovASw6QH+s4bXs3Z8Ca4=
Subject key identifier:   00:6F:8E:CB:C7:73:4B:04:1B:1E:0D:B2:83:F0:CA:AD:0B:2B:CB:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B53A47AD86E1199C0DC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b0a004-4523-38cd-b8db-5801799c1a19.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7725
IP address blocks:        2001:559:86e6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:53:a4:7a:d8:6e:11:99:c0:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=3b2a1c5c-8311-47b4-a65f-b981899e536a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:99:37:3f:99:68:3c:80:04:e7:6b:c5:b1:09:
                    26:6a:34:3c:1c:3c:06:68:12:99:be:29:d6:e1:8a:
                    02:51:0d:c4:83:d4:ec:a7:eb:df:57:38:a9:9d:76:
                    95:d3:70:f1:1a:a6:ad:ed:a7:d5:89:a0:a9:2d:1f:
                    b5:87:8f:98:89:0d:40:98:07:75:9a:98:da:49:b1:
                    7e:2a:99:42:47:e9:fe:ce:47:d2:51:7e:b4:32:7d:
                    ce:6c:66:74:bf:79:9a:94:f8:12:8a:26:87:fb:f9:
                    31:76:44:6f:76:7f:1f:1e:ff:e3:41:80:57:f0:11:
                    39:55:ab:20:77:29:7e:b9:f9:a2:02:2f:d8:c6:6a:
                    15:49:ae:96:2f:45:c2:c4:e8:ca:e6:a6:4b:46:8b:
                    59:72:eb:9f:eb:51:3e:1f:77:dc:bc:06:43:98:fa:
                    bb:e3:de:ea:92:03:93:88:64:59:f6:7c:86:b0:9d:
                    de:01:6c:30:4a:73:3e:ed:a8:79:66:23:34:17:1a:
                    ca:69:f8:d5:31:23:00:74:ee:87:7d:bc:90:dc:b6:
                    5b:fb:62:65:f3:dd:38:cb:b1:9b:16:a5:9c:93:2e:
                    bd:6c:ef:d4:c5:53:81:4b:ed:f8:57:0e:65:1c:ce:
                    83:d5:41:5b:78:fa:58:d8:e2:97:24:40:64:a8:05:
                    a5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6F:8E:CB:C7:73:4B:04:1B:1E:0D:B2:83:F0:CA:AD:0B:2B:CB:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b0a004-4523-38cd-b8db-5801799c1a19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:86e6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e1:28:ae:50:fa:f8:b8:ef:50:14:8f:a6:88:8d:c1:67:87:
         99:77:30:4b:e3:fe:3a:88:bd:39:4c:7b:56:fe:cd:c6:40:29:
         e3:a1:8e:5f:ec:54:b5:f3:9a:a0:23:7c:0f:7e:bb:3b:6c:b7:
         85:61:df:29:d5:ae:e9:6a:36:e9:84:c2:53:8b:dc:37:b9:79:
         36:98:7b:d7:12:80:a7:37:8b:f7:5e:ab:85:d3:ba:e6:8d:e4:
         90:c8:74:8b:bf:c6:4f:1e:df:72:ce:c9:36:de:b2:74:15:5d:
         cd:08:50:bc:47:f2:eb:d7:5a:9d:24:9f:31:b9:3f:07:0b:73:
         06:af:d1:56:d9:1c:8d:61:03:e1:0e:26:d0:ae:f2:83:d2:61:
         7b:ac:fa:18:1d:48:66:fb:95:88:b8:2c:8c:30:31:3a:ac:86:
         81:1a:ee:0c:8f:7d:ae:cb:ff:c5:e0:1a:78:fa:78:aa:7f:65:
         5a:d5:fe:8a:28:b8:b2:4d:5e:88:9a:a2:49:c0:b0:72:62:cf:
         7a:38:bc:0d:13:a9:6c:08:bd:a2:92:94:16:88:f7:69:08:bd:
         7a:eb:47:d0:f6:a5:dd:13:90:91:a6:67:5d:92:17:2d:52:1d:
         96:5a:d9:2e:1c:b0:7c:74:66:5c:52:c9:2c:38:8f:3a:3d:fd:
         ef:c5:57:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:02:29 2024 by rpki-client on console-ams.rpki-client.org