Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8209f7cf-f7fe-32e4-b257-d2d8e18d1e43.roa
File:                     8209f7cf-f7fe-32e4-b257-d2d8e18d1e43.roa (raw, json)
Hash identifier:          ri36AVCOgA6AIIK4H6FcprQtmGKHICQ7FdOUxemr0Q0=
Subject key identifier:   E2:58:6A:F3:07:E5:18:DC:A1:6D:B5:1C:B6:2F:FB:1D:B9:FC:08:E6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004BE5A76B898155E1CD4300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8209f7cf-f7fe-32e4-b257-d2d8e18d1e43.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7015
IP address blocks:        2001:559:85a4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:e5:a7:6b:89:81:55:e1:cd:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=dfe5cdde-eb6f-4c22-88aa-b309cd2faba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c5:f0:75:24:b4:25:ad:c8:47:b7:dc:37:94:
                    09:ba:f8:8f:92:63:29:d5:a2:92:45:f7:3d:ab:49:
                    f3:fb:95:93:b4:88:a7:75:34:48:59:38:d8:6e:9f:
                    47:49:f5:82:ba:82:5a:38:44:5b:06:0a:59:4a:0f:
                    fe:a8:7b:d6:7b:af:54:ba:d8:3f:61:7a:da:aa:67:
                    1a:f5:98:4a:ce:2a:d0:b1:8d:d5:bf:9e:a9:16:3a:
                    79:60:ef:ab:22:2f:f0:ea:76:6a:97:95:59:82:97:
                    70:b3:ba:ca:c4:e8:c5:56:b4:b2:a9:c5:c6:da:8f:
                    2a:c8:bf:75:27:9f:71:78:cc:b6:5f:2c:1e:2a:a2:
                    8c:88:a8:7c:b3:66:41:ae:3e:19:f8:a9:ed:0e:22:
                    de:19:e0:89:17:b8:6e:3d:d0:83:cd:e6:bf:8e:a8:
                    2b:80:9d:4b:47:88:2e:41:f0:24:d6:0e:7f:98:b1:
                    11:38:62:97:80:78:b8:80:79:37:f9:b1:aa:d3:35:
                    f6:ab:29:0f:74:f2:2a:37:b3:d2:86:3a:bf:ec:67:
                    70:2f:97:ab:22:d4:f0:6f:eb:ae:0b:d0:2c:91:92:
                    cf:f7:26:2b:69:ff:04:32:fa:06:3a:b6:53:91:96:
                    cb:94:48:d2:ae:68:11:68:f1:4e:13:12:1b:0e:e0:
                    ad:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:58:6A:F3:07:E5:18:DC:A1:6D:B5:1C:B6:2F:FB:1D:B9:FC:08:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8209f7cf-f7fe-32e4-b257-d2d8e18d1e43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:85a4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e5:ef:57:44:fa:56:2c:f8:f8:0d:47:8b:1c:36:6b:e4:a4:
         74:b6:47:5b:99:0f:e5:15:6f:cf:d3:d8:e9:8b:ce:98:83:de:
         26:8c:54:2e:5f:7a:a6:dc:b8:fa:67:b9:e5:24:15:05:60:be:
         3e:98:78:f8:40:16:f3:8e:a0:ab:73:86:b7:da:2c:b9:f6:6c:
         cc:22:09:ce:e4:93:b5:8d:03:ec:e4:b6:60:1b:8e:4e:c8:6f:
         5d:2f:32:49:f2:6a:2d:b9:74:be:61:28:fd:74:4f:fb:a5:f8:
         3a:5a:1d:75:bd:60:43:89:dc:9e:2b:29:c7:6b:c4:3d:2e:b4:
         86:b5:8b:66:2d:b3:a0:3b:aa:77:45:be:f7:15:27:46:d8:58:
         4b:14:82:17:b8:d3:bd:d4:73:59:bb:82:95:1b:74:81:66:39:
         10:f1:e4:e8:19:59:d2:36:47:f9:bb:d5:53:ba:4a:73:6d:32:
         e5:eb:b6:56:26:e0:46:42:ba:31:f0:4c:f4:e2:33:57:5c:0a:
         95:8d:64:32:6b:3e:e5:6e:35:88:be:9f:60:59:0c:e0:5e:92:
         0d:a8:fd:d7:58:1c:63:82:1d:e8:dd:b6:85:89:c9:3c:96:4c:
         0d:c7:18:57:4b:11:d6:48:f0:f9:c8:21:ac:99:34:1e:c0:d6:
         3a:43:36:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:17:46 2024 by rpki-client on console-fra.rpki-client.org