Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dcae309-95dd-33ee-af5a-74ff96512ee0.roa
File:                     8dcae309-95dd-33ee-af5a-74ff96512ee0.roa (raw, json)
Hash identifier:          DRvuo5ZKYWcIjLgHLRxuGAJezBMlUtSDVbFue9W3vaI=
Subject key identifier:   5C:9B:DA:21:AB:F5:BC:38:7D:4B:0A:FF:12:97:D9:63:B0:E1:24:B9
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049F77237C533F04AEBC2E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dcae309-95dd-33ee-af5a-74ff96512ee0.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33652
IP address blocks:        2001:558:6040::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:f7:72:37:c5:33:f0:4a:eb:c2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=01e31da1-7224-4f2f-aea9-ec97bddf1262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:35:38:64:d6:27:56:79:68:1b:ee:c5:c5:
                    5e:61:11:64:82:e3:55:d1:1a:9a:9a:11:04:ee:4e:
                    59:be:b7:f8:ca:51:4e:96:4c:3e:6c:8f:2a:17:65:
                    87:73:ed:53:67:cb:06:95:56:b0:af:81:ac:e9:a9:
                    f8:e6:93:a8:38:b7:8a:16:0a:78:34:81:32:3e:af:
                    de:9a:4c:03:a1:20:58:08:2b:85:60:59:69:e9:22:
                    03:68:33:6f:8d:05:73:88:9f:7f:8b:9b:c9:2d:c5:
                    98:16:27:dc:64:9f:8f:f8:8d:13:42:c8:90:5a:66:
                    ec:8c:c1:4e:f6:2d:6d:86:0c:b8:18:5b:20:8f:f2:
                    9c:f7:ae:aa:80:ef:10:42:74:b4:83:0b:9e:28:d3:
                    5a:d6:59:1d:94:bb:83:fa:16:3f:3f:b4:a3:a1:a4:
                    26:08:58:e4:4f:1e:3e:25:89:3f:2d:c6:4a:d1:8c:
                    d8:40:10:be:34:7e:1d:b8:b9:e0:07:d0:a2:44:fc:
                    61:48:1c:0e:b4:3a:af:df:67:66:cd:7e:33:30:80:
                    3d:80:72:29:60:d5:85:f2:57:44:8f:52:cf:02:22:
                    51:4f:f6:19:48:1b:32:7b:c4:11:f5:74:8f:a4:51:
                    03:7f:5d:cd:4f:1e:c1:88:5e:99:dc:44:3c:c1:7f:
                    70:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9B:DA:21:AB:F5:BC:38:7D:4B:0A:FF:12:97:D9:63:B0:E1:24:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8dcae309-95dd-33ee-af5a-74ff96512ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:558:6040::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:49:bc:4d:c2:06:99:c6:d3:62:0b:19:fb:6a:00:cf:9f:fa:
         ab:ad:cd:9d:9f:27:fc:1d:cb:95:dc:f1:79:5d:92:c4:75:2d:
         82:cb:78:b0:af:48:29:64:b4:7d:21:8a:e2:ec:1f:43:97:3e:
         2f:12:f4:07:cd:60:1f:19:34:6f:6b:5b:ae:ab:4a:94:71:e0:
         30:9e:f2:31:1d:14:1a:c2:c4:41:38:ee:1f:a2:05:da:dd:01:
         08:39:dc:62:00:36:6d:77:9c:c6:f9:88:ac:d9:59:82:dd:9e:
         ce:dc:48:3c:d0:85:c6:30:ff:5b:d7:cb:fe:65:dc:48:9e:24:
         c0:6c:e8:42:65:9c:c1:6d:4a:08:d5:91:29:9d:ba:52:67:7f:
         c1:12:45:f9:dc:8e:d1:c0:e0:7b:69:dd:de:7b:f1:a3:79:0c:
         3d:6b:4a:dd:72:fb:5e:80:7f:7d:cf:93:66:12:46:b4:2b:61:
         c0:37:22:18:d0:46:1d:18:d7:0e:fd:63:6a:b6:61:11:dc:06:
         33:f9:d7:8f:15:65:91:43:bb:68:71:74:53:dc:ab:dd:ed:29:
         63:9b:c6:af:f2:44:c3:94:7a:56:e6:90:db:50:bd:dd:04:22:
         03:e4:59:35:7a:cd:f5:cc:ca:5b:74:e0:cc:ad:e1:34:7e:79:
         0a:0b:22:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:01:47 2024 by rpki-client on console-ams.rpki-client.org