Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/851a06b6-f23e-35ed-a39b-9245660c9450.roa
File:                     851a06b6-f23e-35ed-a39b-9245660c9450.roa (raw, json)
Hash identifier:          +YYodYxfXEzbZDHJuKGDuw1hzceLAp49gqmm1e6Tkto=
Subject key identifier:   D6:96:DC:56:D0:85:72:C3:5C:02:4B:DB:3C:76:7B:1A:11:73:2A:42
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049BE8FC50268198688B400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/851a06b6-f23e-35ed-a39b-9245660c9450.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     20214
IP address blocks:        2001:559:ec::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:be:8f:c5:02:68:19:86:88:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=bcb82d5f-1b4a-44bf-b225-233efdb8603e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2b:b6:e8:f7:3d:24:67:74:a5:1e:a5:c1:aa:
                    b7:a0:75:56:c2:8d:67:50:3f:f4:7b:cb:f6:db:6c:
                    81:74:c6:0e:28:1b:e9:4e:85:80:5e:c8:dc:5b:d3:
                    4b:54:68:0b:92:83:0f:ad:ea:91:56:6b:ba:0a:ed:
                    51:8a:94:3b:a5:df:d9:82:e6:93:83:c8:59:c8:49:
                    00:90:a0:a6:2a:f0:18:b7:02:b5:4a:cf:b3:be:67:
                    53:e3:d3:62:96:10:45:70:bb:55:68:ea:f2:28:1f:
                    35:f0:86:f7:dc:19:b6:ff:6d:f8:6f:b7:8d:a9:9a:
                    63:89:e3:bc:9f:32:6f:2f:14:16:8e:fc:1e:60:16:
                    01:4a:b1:0b:10:c0:23:b8:de:2b:6a:94:28:66:40:
                    dd:a5:53:88:b9:fe:0a:54:4b:2c:a7:99:3f:37:31:
                    a3:dd:0f:2d:39:8d:d4:e2:3b:f8:0b:9a:38:5e:54:
                    2d:1a:e0:be:08:05:52:2b:3a:55:33:9a:df:cf:7a:
                    28:60:4f:ea:f8:ee:ec:ce:f6:b5:5c:b3:19:90:47:
                    fd:56:e7:f6:ff:ee:95:8c:33:3f:2e:56:49:01:0c:
                    35:50:3a:3a:b3:74:39:83:9a:9e:00:ec:ee:23:44:
                    e5:96:f7:2d:fa:ea:a8:18:f3:7b:92:8c:0e:90:b0:
                    47:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:96:DC:56:D0:85:72:C3:5C:02:4B:DB:3C:76:7B:1A:11:73:2A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/851a06b6-f23e-35ed-a39b-9245660c9450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:ec::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8e:89:f5:3f:f1:ab:b9:3b:22:be:09:85:c3:f0:4f:75:ee:
         2b:5f:e4:bd:46:62:e3:7a:c7:63:6a:b6:ad:48:ce:c4:ad:99:
         1d:70:70:27:8a:1d:56:48:d7:95:a2:48:2a:90:f7:db:65:21:
         81:02:8c:41:0a:0e:ae:26:5b:d5:63:be:e8:74:2e:59:2e:1a:
         19:ed:80:ff:01:9c:e6:7c:85:31:f8:80:65:08:78:c4:9f:ce:
         cc:69:dc:5c:33:c2:70:c4:a1:d4:ee:e5:56:27:21:0b:fe:8c:
         a1:07:04:58:a3:1e:7a:7a:7e:50:ac:62:38:96:b1:35:fb:f2:
         1a:b5:59:32:e7:1b:5b:29:92:1a:69:6a:0e:83:eb:2a:a1:b1:
         3c:89:b4:f1:da:e5:52:f7:19:dc:ec:d2:34:ef:cb:66:1f:7a:
         9d:0c:83:d5:93:fd:56:d3:a4:d4:7f:e5:c2:07:8e:cd:9b:21:
         12:02:32:10:43:d4:7a:24:84:90:b2:78:e0:36:37:df:4e:d8:
         83:7b:0d:e7:af:19:d1:30:ec:f0:08:8e:79:fc:cc:fc:16:3f:
         a4:c5:0d:37:98:f1:f9:f4:49:00:dc:37:cb:ef:be:1e:39:f2:
         2a:3b:40:71:e8:e1:ff:fc:72:bd:58:c4:07:37:7b:c3:9d:1a:
         81:31:16:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:01:28 2024 by rpki-client on console-ams.rpki-client.org