Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d557c01-69cf-3643-9f69-b68e75fbb3a4.roa
File:                     9d557c01-69cf-3643-9f69-b68e75fbb3a4.roa (raw, json)
Hash identifier:          agYWrknw3tpbCw1kyYFT8a9TrYxY6IhYJe+/scoaR8g=
Subject key identifier:   31:FE:F9:7D:CB:07:19:75:AE:82:08:18:A0:94:83:AE:07:CA:FF:ED
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A1AC36830B00977212980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d557c01-69cf-3643-9f69-b68e75fbb3a4.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33667
IP address blocks:        2001:559:8784::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:1a:c3:68:30:b0:09:77:21:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=a078eb59-f752-4e98-b26c-03f78699a000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:55:a2:38:95:42:12:25:94:b0:9f:fb:b3:7a:
                    59:36:df:72:c7:8f:1f:57:63:f4:66:a1:4e:19:8b:
                    25:e9:68:81:46:34:51:65:b0:3e:96:c4:d9:bf:c7:
                    cb:cb:65:57:5e:54:2b:24:10:41:4d:8c:f2:e6:e3:
                    d8:50:4a:1c:a3:27:c7:7a:64:ec:7a:0d:fe:20:a3:
                    f6:09:a4:e8:ab:1d:c4:f4:fe:76:7f:86:2d:9f:71:
                    51:2b:15:e0:6e:28:b3:f8:43:c0:20:dd:9a:af:67:
                    a7:35:08:31:84:3d:b8:50:e3:96:8a:9d:45:19:7b:
                    cb:ef:c7:5f:a6:67:bb:70:56:76:f7:0c:69:7f:75:
                    85:3e:fc:81:4b:2d:80:75:d7:6d:47:a7:31:d1:af:
                    cb:33:a2:6c:6e:e1:ec:05:6b:9f:77:45:5a:a4:e1:
                    b9:46:ea:74:cf:52:e9:8b:94:47:9f:9b:7d:85:39:
                    f6:21:70:85:58:4c:6a:75:53:70:38:3a:f8:e9:87:
                    70:b9:1b:db:bb:e8:37:d4:c1:39:65:88:57:e3:78:
                    bf:48:81:95:a2:30:dc:25:7f:ba:8a:fd:15:49:8c:
                    dd:66:c4:3d:1e:8c:d4:07:9f:83:54:07:c2:3c:78:
                    59:28:f8:e6:e7:b4:28:16:c1:99:bc:54:bf:e6:82:
                    de:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FE:F9:7D:CB:07:19:75:AE:82:08:18:A0:94:83:AE:07:CA:FF:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9d557c01-69cf-3643-9f69-b68e75fbb3a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8784::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c3:82:4c:d2:2f:1d:28:cd:1d:32:8d:f6:a3:a4:ba:b0:9c:
         10:11:e6:3e:58:db:b9:c7:42:de:f6:96:ad:81:5b:f7:7d:89:
         5e:ff:f4:61:a1:75:ef:cb:78:67:ec:7c:6e:70:c9:97:1d:75:
         1f:60:e1:c4:85:28:86:b9:13:1c:56:1c:d6:27:59:2f:33:0f:
         3a:48:8a:13:ea:00:1a:de:63:84:ac:42:68:00:64:39:2f:46:
         f6:b9:20:e2:c7:7a:6e:bc:3c:53:47:37:25:36:9a:99:ad:ac:
         de:f7:0e:b3:2b:5f:0a:9e:7c:c9:d0:a2:2b:68:2a:9c:7f:41:
         d1:e8:99:2c:02:22:e2:a0:f9:cb:60:98:c8:8e:89:cc:5a:01:
         2d:8f:d6:78:7c:bb:90:bb:42:5c:3b:a7:0b:cb:45:d0:57:4d:
         48:7e:aa:f6:9a:db:f1:71:4e:73:3b:65:8d:9d:42:c3:87:8f:
         a4:d6:18:a1:9b:57:33:60:5f:fa:fe:9b:51:56:87:12:61:5e:
         3b:ed:3b:07:ef:05:0b:09:7a:bc:fd:23:5e:66:5c:13:df:3e:
         b6:2e:4d:c1:d0:3a:91:90:05:4c:d2:36:ca:39:b4:2a:b9:aa:
         2c:29:bc:c6:dd:80:82:4c:3a:72:f3:89:ab:c9:e0:4e:61:b5:
         96:1f:7a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:31:26 2024 by rpki-client on console-fra.rpki-client.org