Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b8b538d-23e4-360b-a768-3304f491b365.roa
File:                     4b8b538d-23e4-360b-a768-3304f491b365.roa (raw, json)
Hash identifier:          Ph7ysCk7gcUrmxbN34D3+9wiYsD4SMFKKGptZx43Hl0=
Subject key identifier:   EE:7F:0D:2B:4F:61:DF:4E:25:58:6B:CB:66:70:72:E9:ED:FF:4E:5F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049CD71A37A13CECD895650
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b8b538d-23e4-360b-a768-3304f491b365.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     22258
IP address blocks:        2001:559:833f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:cd:71:a3:7a:13:ce:cd:89:56:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=2be54c80-fb22-4826-9b72-bd91ae41be36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4d:7a:b1:99:62:7f:60:80:fa:e8:fd:a2:6f:
                    f2:1d:5d:10:bd:4c:5d:d2:3d:1d:f1:0e:00:cc:fc:
                    ad:17:89:d3:5c:98:01:be:aa:b8:bf:e1:ef:95:e2:
                    a3:bb:b3:d6:1d:1e:55:21:a2:9c:fe:71:9a:14:86:
                    4e:17:c5:0b:66:18:82:5b:62:62:e4:33:40:4c:e4:
                    e1:ef:96:d3:b3:0f:79:c2:73:c6:c8:ee:ce:f1:93:
                    5e:0e:38:60:3b:99:07:1f:85:b8:ff:d7:9b:e6:60:
                    0b:79:d0:d7:e8:11:9e:b1:fe:e8:c8:a6:10:08:84:
                    c6:00:e8:a3:c9:3a:9a:b5:ca:f2:b4:22:be:c0:cb:
                    d1:46:61:63:76:7a:80:01:51:5f:65:27:e0:7c:47:
                    e6:52:d7:82:cb:3c:aa:2b:eb:f9:a7:ea:1b:12:ef:
                    b2:dc:94:39:d2:c9:a4:ba:98:64:07:40:e0:55:ad:
                    f3:f3:a6:96:a1:d4:6d:ac:a7:33:fa:98:d4:65:4a:
                    26:eb:e0:3b:4c:50:f5:b6:ea:35:e4:36:3f:1c:1c:
                    4f:67:df:30:4d:41:ff:14:6e:76:2a:a3:7f:06:56:
                    7e:bf:27:50:c3:05:7d:36:fc:34:c1:c4:58:f8:aa:
                    c0:14:76:ee:a8:d8:11:02:73:2c:94:98:b4:5a:18:
                    26:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7F:0D:2B:4F:61:DF:4E:25:58:6B:CB:66:70:72:E9:ED:FF:4E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b8b538d-23e4-360b-a768-3304f491b365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:833f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:c9:95:d9:fa:8c:a4:e8:5f:1d:c6:a8:9e:9b:f4:66:40:d6:
         dc:06:bf:17:7f:01:80:d3:f2:3c:8c:80:25:43:16:24:d4:b5:
         fe:8d:6a:b6:35:e5:f5:19:3e:53:5e:81:71:6d:b6:b7:cc:c7:
         d0:7e:76:73:c3:40:32:99:4f:be:74:f6:15:b7:8d:71:8d:33:
         22:63:10:f3:49:ea:19:4a:37:cc:32:88:f9:45:89:01:1d:ae:
         d6:eb:89:f9:40:bc:ab:9f:e0:3b:10:b4:58:49:b0:d1:a3:fd:
         57:97:1c:67:65:9a:b4:f0:8d:05:55:da:32:5a:5b:10:2c:f7:
         ab:1e:e0:5b:3e:1d:b8:df:6d:43:d4:9c:b2:66:f3:7d:aa:38:
         c3:80:65:6d:00:02:18:b5:4d:42:5a:fb:3e:42:d3:2e:6d:65:
         2e:c3:24:1d:6e:5d:8a:75:32:01:69:be:ae:9b:bf:43:63:89:
         ce:5c:19:d3:a8:17:47:4a:ee:9a:2e:71:92:f6:aa:4e:23:6d:
         f9:3e:b5:aa:ba:b0:c7:e4:a1:90:ae:07:8e:7b:48:68:5b:92:
         39:92:51:19:da:ba:95:0f:a1:68:54:4b:fe:25:69:ee:31:35:
         cc:7c:d3:67:c1:64:cd:a1:5c:0a:84:c2:2e:c3:13:4c:37:a3:
         23:da:51:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:41:16 2024 by rpki-client on console-fra.rpki-client.org