Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cac2e097-5de0-3292-904f-74ac91791611.roa
File:                     cac2e097-5de0-3292-904f-74ac91791611.roa (raw, json)
Hash identifier:          bqwNlVD/JdMmmbJSRNSww6UWzAcl+5e5cKUSTworgy8=
Subject key identifier:   40:9F:58:AF:9B:70:DB:0E:91:49:3B:6F:BB:50:E2:95:03:A2:C9:56
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584600499FEDBEE17B91351B7980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cac2e097-5de0-3292-904f-74ac91791611.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7016
IP address blocks:        2001:559:5ff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:9f:ed:be:e1:7b:91:35:1b:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=c654555d-fbd3-4216-93f2-92370e96834e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e5:d8:f0:63:3c:1a:81:7f:e2:c6:c6:d0:d1:
                    26:91:64:dc:92:cb:fe:25:45:90:03:76:2f:60:a7:
                    0b:ea:fc:7d:be:37:3f:73:e3:bc:24:75:7b:52:c2:
                    e4:64:0a:8d:47:7a:ec:2f:d4:3a:8f:2c:9b:9b:a6:
                    31:07:90:df:c4:95:4a:27:eb:75:a4:28:a8:a8:80:
                    31:3c:fe:3a:a3:3a:56:43:b7:57:93:03:8b:cd:d8:
                    53:35:16:99:e3:d9:6f:b2:d7:fe:54:2e:96:3b:c0:
                    de:e8:50:ff:18:de:73:87:92:55:52:36:a2:73:2c:
                    23:cc:64:6d:34:0f:61:1d:74:7d:31:d7:12:64:4c:
                    de:32:1e:db:cd:04:0b:21:c1:4b:92:52:01:e0:12:
                    bf:ea:1f:13:8c:24:89:42:31:53:eb:dc:3a:f4:0b:
                    6a:90:46:00:a8:fd:6f:74:b0:87:f2:e5:b0:49:f3:
                    fe:ea:19:83:8f:ba:d0:da:92:ac:7d:0b:fe:13:46:
                    2e:eb:ae:11:84:6f:22:f6:94:1a:cf:a7:36:6e:08:
                    88:bd:14:67:94:7f:7c:c3:26:77:65:8c:de:7a:ef:
                    bb:22:62:08:0e:0c:6c:bd:13:92:c1:e3:7f:05:83:
                    ed:e4:c2:b7:6c:b1:21:91:30:05:33:4d:28:c9:cc:
                    25:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9F:58:AF:9B:70:DB:0E:91:49:3B:6F:BB:50:E2:95:03:A2:C9:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cac2e097-5de0-3292-904f-74ac91791611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:5ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:87:a1:b4:48:5d:ba:fd:41:72:77:48:68:fc:3f:48:48:fb:
         a2:0e:5e:9d:71:8e:ff:a5:47:bd:aa:95:3f:f2:8a:d6:6e:b7:
         f0:7c:8d:77:80:4d:c6:b5:cf:c7:58:56:1d:a7:e3:4c:54:25:
         a9:db:9f:02:c7:c6:cb:b6:89:50:cf:a2:64:40:8b:a0:95:d6:
         80:ee:df:38:8e:25:d4:84:4f:37:51:52:db:e7:0e:68:11:07:
         62:e8:74:38:ee:d8:cb:d0:96:44:c4:9e:77:22:06:6a:e4:53:
         ad:72:a0:d5:00:54:4b:44:12:e3:48:a8:61:a7:e4:8c:20:71:
         ea:51:63:ff:28:21:e6:79:c0:b6:f4:0b:61:87:4e:13:55:c0:
         48:82:d8:d3:95:f4:f3:7f:54:03:09:50:27:b4:cb:ad:dc:8b:
         64:62:bb:f8:95:32:0c:55:31:b9:72:77:a1:14:c6:e7:55:d2:
         02:bb:ac:46:7b:f8:59:c3:c8:02:ae:1d:da:aa:40:e6:75:f7:
         35:a1:b8:d0:6e:fc:72:3a:36:2a:31:ef:8e:da:d7:b8:c4:2e:
         d9:f1:97:04:41:bf:67:38:46:e9:c4:43:55:7e:42:33:3e:3d:
         3d:b2:0a:bc:41:93:98:dd:fc:ab:a3:a8:6d:04:1c:19:50:d9:
         58:38:86:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 02:35:30 2024 by rpki-client on console-ams.rpki-client.org