Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6e0933b-6057-3f2f-acca-f360f7d3728c.roa
File:                     c6e0933b-6057-3f2f-acca-f360f7d3728c.roa (raw, json)
Hash identifier:          9eDn9LyhrTh//7++EkncLDy6iy6oViOPllNR8WjVs1o=
Subject key identifier:   38:FF:C4:F0:95:8E:CD:DC:4D:1D:CD:F1:AB:35:FB:22:54:DE:90:57
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049FC721D1090E3086F3690
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6e0933b-6057-3f2f-acca-f360f7d3728c.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33652
IP address blocks:        2001:559:86e9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:fc:72:1d:10:90:e3:08:6f:36:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=4654824a-517f-42d0-8473-c038176bf4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:ef:0a:81:aa:db:02:ab:8c:81:82:4e:83:
                    d2:b8:a0:09:ab:6b:b0:99:74:58:86:a4:6c:cb:f4:
                    a5:dc:6d:42:ee:37:ae:6f:ad:2c:39:92:16:fb:9f:
                    85:d7:46:86:14:59:bb:7c:13:49:6b:d3:a9:af:b7:
                    c7:51:ff:33:00:20:20:61:30:77:65:fd:5c:93:93:
                    7b:d7:30:2d:b8:ba:f9:16:67:40:69:b4:e2:42:8b:
                    c8:b8:c3:5d:24:d9:d4:63:64:41:e7:62:c0:d9:a3:
                    43:31:dc:2c:96:59:55:e9:28:f0:01:0d:00:4f:7e:
                    ad:9c:38:c0:5b:47:93:2e:6c:7e:f9:f5:13:3d:85:
                    2d:c7:2b:6a:5a:c7:51:04:9a:d5:68:b7:87:85:5a:
                    7a:d2:9a:51:31:3a:8f:7b:3c:73:2f:30:17:59:77:
                    ad:41:f2:ea:34:2e:8f:57:71:77:b9:e2:f2:5c:15:
                    7f:df:4a:48:12:e8:eb:11:ec:74:15:33:ec:aa:74:
                    65:af:11:26:4c:77:d6:d4:d1:6d:bf:80:53:ea:fb:
                    e7:22:bd:49:1b:55:01:0f:20:96:62:92:17:2a:fa:
                    ee:40:36:f7:bf:dc:ad:7b:88:2b:e3:b4:4c:02:2d:
                    61:86:df:14:2e:8e:c9:56:f1:49:31:5e:96:85:4e:
                    af:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FF:C4:F0:95:8E:CD:DC:4D:1D:CD:F1:AB:35:FB:22:54:DE:90:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c6e0933b-6057-3f2f-acca-f360f7d3728c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:86e9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:2e:06:3a:13:29:f6:05:87:19:21:e0:e6:aa:f9:40:52:b5:
         d3:12:91:c5:62:67:45:19:f4:49:98:b2:4b:70:c0:c0:4e:a2:
         2f:47:94:11:91:e0:46:d0:dc:70:7e:d1:65:94:87:48:09:25:
         99:2d:34:83:3f:81:96:cd:97:f9:28:29:f9:a3:18:58:40:23:
         b5:a4:ee:1f:d4:fd:fe:21:83:8a:07:63:a6:15:07:ff:3c:ca:
         56:3b:1b:54:7f:9a:20:92:c4:1a:66:bf:d7:bc:16:ea:93:f8:
         aa:0f:63:84:35:55:a3:89:36:1b:43:b7:82:83:25:df:54:27:
         ff:08:20:f9:7f:7c:54:55:52:67:c6:27:3e:a0:c6:47:7a:52:
         57:39:9e:b2:d4:14:54:6b:e3:25:f3:90:65:00:36:c9:d8:1f:
         72:a9:1a:a6:77:de:3e:4d:15:be:ab:ed:ff:a9:03:21:aa:98:
         b3:82:4e:b6:14:be:9f:33:14:c0:4b:18:d5:e4:44:69:58:e4:
         ea:a9:dd:a6:8d:54:9c:3e:ac:fa:58:3b:27:97:1e:72:58:be:
         bd:6e:59:04:42:c2:c4:08:26:63:c2:ae:20:ee:34:4e:cd:ea:
         a1:0a:89:b8:a7:2f:8c:05:e9:f3:bc:7b:e3:10:0c:cb:66:72:
         8a:79:fd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:07:26 2024 by rpki-client on console-ams.rpki-client.org