Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7c8d8ff-6bb8-3502-ad6f-c57bec6c7689.roa
File:                     c7c8d8ff-6bb8-3502-ad6f-c57bec6c7689.roa (raw, json)
Hash identifier:          U9n/gf0eOtme3HdnlkGGl5uk23Q/NVjcBIOgX6Dnq08=
Subject key identifier:   2B:59:F5:05:86:58:06:BF:6C:EE:5D:F6:30:3F:66:31:C2:81:68:4D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004AC45C47BFE29E18AE0A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7c8d8ff-6bb8-3502-ad6f-c57bec6c7689.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33659
IP address blocks:        2001:559:1dc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:c4:5c:47:bf:e2:9e:18:ae:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=0e17b18d-fa48-42e8-bf6e-30d5859fb559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:55:74:c4:db:8b:e2:92:76:39:ad:d8:9e:b4:
                    cd:5f:08:23:e6:85:26:d1:da:ba:1f:cc:10:9e:9a:
                    c8:77:ad:79:2a:d1:ec:dc:7f:81:a8:2a:d7:14:39:
                    0c:20:6b:04:63:e3:73:a7:9b:d0:8e:4e:d5:87:99:
                    19:ed:49:9d:71:e3:22:ae:9b:bb:7f:dd:46:4f:92:
                    19:06:e9:45:fe:31:d6:00:7e:b3:b0:b5:3a:ea:85:
                    89:01:0e:8f:65:6b:44:d1:87:57:d3:33:38:fe:89:
                    52:51:bb:c5:7e:c3:26:11:fd:0e:f1:df:70:ce:6e:
                    ce:57:e5:ac:b3:42:3c:80:8c:ae:5f:e3:7d:f5:bb:
                    71:58:f2:45:2c:62:7c:c6:82:bb:1f:a3:06:bc:a6:
                    a5:7a:77:67:48:16:50:8d:9f:8a:f5:b4:33:94:22:
                    74:06:88:27:70:8f:23:b6:dd:6e:47:ec:98:24:5d:
                    13:d4:ad:fe:a5:44:27:3a:1d:c7:0e:6a:23:0f:a8:
                    b7:14:b1:db:d0:33:6d:e5:2d:87:b5:e3:43:ed:cb:
                    07:05:69:d2:68:72:50:df:70:50:6c:eb:ba:87:b8:
                    7a:18:77:3b:99:77:78:06:3e:91:31:da:22:c8:2c:
                    d3:73:02:ef:c8:9a:5c:73:3c:91:45:f8:62:50:f5:
                    68:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:59:F5:05:86:58:06:BF:6C:EE:5D:F6:30:3F:66:31:C2:81:68:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7c8d8ff-6bb8-3502-ad6f-c57bec6c7689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:1dc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6c:b2:53:1f:06:7b:d2:7e:47:12:1a:e6:51:06:af:c5:f4:
         c8:1f:b0:7a:2c:78:9c:50:95:91:e6:7a:13:74:47:f7:45:79:
         a4:e9:f7:b3:78:83:57:25:7e:e9:90:ad:78:3b:7a:85:8c:e8:
         60:73:24:5e:41:1f:a3:95:e9:68:7b:d5:df:18:83:d3:29:e8:
         b4:30:78:81:c7:6f:40:b6:ff:d3:a4:8e:e6:10:3f:10:0c:df:
         59:d1:da:2f:bf:24:85:f5:23:ed:df:90:17:52:0c:80:5e:88:
         33:c9:ce:5f:5b:5f:d4:8b:46:4c:3e:b9:17:02:14:35:19:c7:
         ba:d9:4c:c0:f9:b1:7d:30:9e:42:56:c5:b1:df:aa:c6:cf:ad:
         85:b5:96:a7:cf:6a:98:a5:10:58:52:e4:bc:ca:f1:9f:90:e6:
         8e:34:72:b6:03:20:8e:ab:9f:ff:76:7f:2a:e4:b6:7a:73:99:
         5a:8c:aa:f3:ac:2e:6a:ed:74:b2:f6:73:f5:2b:9f:f5:78:8f:
         d2:86:a6:89:01:4d:09:15:a4:b8:78:1b:4c:e6:c0:42:58:67:
         0e:eb:8f:00:a7:d7:13:48:3a:d9:6e:a5:73:d9:b3:9a:1c:e8:
         ad:ed:d3:a6:93:10:ff:d5:33:9c:31:43:5b:44:81:64:26:82:
         46:93:41:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:24:18 2024 by rpki-client on console-ams.rpki-client.org