Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa4ea52-14c7-3fb7-8dd8-d4061728f1e1.roa
File:                     5aa4ea52-14c7-3fb7-8dd8-d4061728f1e1.roa (raw, json)
Hash identifier:          luHvMxnvKnXAlzgEUP5/V7O1Gww5JQmjo0DThMFV0bk=
Subject key identifier:   A2:75:94:3C:4C:9A:CB:E0:F9:CB:0B:1D:8C:A2:2F:2B:39:C5:10:E1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004BCD9A3DCFDC683D947280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa4ea52-14c7-3fb7-8dd8-d4061728f1e1.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33668
IP address blocks:        2001:559:80a3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:cd:9a:3d:cf:dc:68:3d:94:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=3ba85dab-131f-4cc7-bb38-72dd1207e20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cb:3b:6b:ad:87:92:ba:12:82:c5:dd:9a:45:
                    6d:2c:8e:cf:08:00:21:c8:bf:34:78:5d:fa:53:f8:
                    06:d4:da:c5:c6:21:4c:5f:c8:49:18:e0:bc:a0:dd:
                    85:50:54:e2:35:0c:89:8b:bf:1c:3f:32:37:5e:2c:
                    73:da:3e:7b:f3:07:e9:22:5a:c2:38:07:a9:93:b0:
                    8f:33:db:5f:b7:ed:7e:66:7a:02:a7:ed:3b:2d:98:
                    01:d9:50:b3:83:7b:1a:37:15:6c:35:f7:33:f3:de:
                    05:94:27:81:90:d8:0b:78:d7:a2:d4:43:08:d4:8a:
                    ab:10:2b:e3:df:8f:06:8f:c4:6e:e6:cc:d9:15:36:
                    d8:b7:80:c1:59:04:63:39:4f:74:4a:95:8e:bf:0f:
                    dd:6d:41:bd:2a:8f:4c:17:7f:82:5a:02:0e:5a:c7:
                    ba:40:fa:c9:93:48:c0:9f:f8:45:f0:ed:43:0c:1c:
                    a7:64:58:b8:35:56:84:53:50:ca:9c:6e:6c:d1:42:
                    61:88:96:cf:40:be:11:76:bd:43:f7:70:39:d7:8f:
                    65:1f:45:03:4f:d7:91:61:63:03:2c:24:61:4e:c3:
                    ee:56:66:a1:16:72:68:47:a4:1d:95:19:6b:57:8c:
                    57:e1:e3:0d:7c:f0:17:eb:8b:c4:ab:0c:af:f0:6c:
                    4c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:75:94:3C:4C:9A:CB:E0:F9:CB:0B:1D:8C:A2:2F:2B:39:C5:10:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5aa4ea52-14c7-3fb7-8dd8-d4061728f1e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:80a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:26:3e:57:5e:21:e8:87:16:ef:34:9a:79:40:b2:48:9b:73:
         b1:da:65:6e:2b:d7:50:43:d0:16:fc:03:f3:39:62:dd:5c:a3:
         aa:82:3f:4c:21:d7:f3:94:ee:82:cb:49:3e:5d:a2:2c:62:0b:
         a6:43:d0:f5:65:95:c7:97:e0:a1:63:6a:63:ec:80:83:4a:74:
         5c:cf:fb:fe:37:fe:cb:02:31:4d:03:c1:ae:3c:3b:8e:49:50:
         cf:e6:19:4a:52:48:99:f0:35:30:c3:cf:fa:66:38:85:e9:06:
         ca:d9:04:a3:88:da:8b:53:07:3b:7f:dd:be:e7:d7:9d:e1:49:
         c6:b9:f3:f7:85:97:4c:b9:94:d5:36:76:5a:6c:57:1d:50:b0:
         2b:6c:64:df:c6:16:3d:40:c2:04:24:58:b0:47:a9:a8:42:78:
         3e:68:f1:71:db:ea:0c:d6:f5:37:d7:40:e3:b4:6d:e4:12:77:
         ce:02:48:d7:dc:79:0d:9f:4b:f6:29:0a:b7:5c:dd:3f:fa:4a:
         12:5b:4b:60:61:80:e8:67:d1:0c:46:f6:d2:af:b7:d5:71:f2:
         de:44:e1:60:fe:e7:01:9f:8d:ab:41:42:94:af:0c:61:2b:d5:
         01:e9:5c:77:4d:df:22:77:21:8f:30:24:70:90:05:ce:57:1e:
         88:09:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:31:23 2024 by rpki-client on console-ams.rpki-client.org