Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee754818-4299-303b-85e6-225a3642ec65.roa
File:                     ee754818-4299-303b-85e6-225a3642ec65.roa (raw, json)
Hash identifier:          8g4ATMc5yffHo1Qsq0f0n0ZCqZhOxL2Mzcpxaenkbws=
Subject key identifier:   07:F7:82:AD:26:72:90:08:13:05:E7:35:6E:18:D1:37:9E:D3:75:CE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A0D26348276DAE638B638
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee754818-4299-303b-85e6-225a3642ec65.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33662
IP address blocks:        2001:559:85cf::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:0d:26:34:82:76:da:e6:38:b6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=f203603b-daf5-4d8d-85bc-7ec8e94fb84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:52:2b:80:51:3c:41:6b:fb:8e:e9:14:73:c8:
                    fe:d4:2e:ef:58:10:cb:27:77:31:11:52:15:60:95:
                    6c:6a:21:10:37:7c:86:52:4b:a7:98:12:6c:f9:9f:
                    9e:9f:dc:cb:ad:55:09:6f:76:c4:f1:66:82:9c:03:
                    b7:2d:81:ec:fb:a5:ea:a1:da:70:09:12:de:ce:3d:
                    e9:c8:4d:b5:33:f0:e7:cd:10:ed:2b:34:cb:99:63:
                    6e:e0:0f:0c:f1:22:08:a8:c0:73:63:51:b4:e9:57:
                    3b:33:d7:db:2a:3c:9c:20:45:3a:9d:d7:c5:e8:30:
                    9a:7b:25:14:31:37:e2:4d:aa:29:90:82:5c:fb:63:
                    2f:ad:44:dd:bc:1d:71:78:c8:31:9e:4e:d6:97:96:
                    38:39:5c:92:cc:e9:a2:08:51:d0:56:30:f1:c7:d6:
                    a4:f3:4f:69:3e:91:03:96:0b:8f:bf:1a:06:26:c4:
                    da:33:bc:29:7b:34:be:39:7e:e0:4b:69:10:61:db:
                    e4:1f:b9:28:89:a0:dc:2a:37:82:d9:69:40:72:fa:
                    c1:56:84:75:d1:ff:f6:0e:de:cd:b7:3a:6a:99:27:
                    35:06:6d:b8:71:99:84:d3:f9:85:e8:c7:44:98:f3:
                    03:f5:cc:fc:9e:f9:1b:cc:cb:45:82:c0:0d:a4:a1:
                    0f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F7:82:AD:26:72:90:08:13:05:E7:35:6E:18:D1:37:9E:D3:75:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ee754818-4299-303b-85e6-225a3642ec65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:85cf::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:51:84:36:f1:36:6b:cf:20:0f:bb:7d:b5:ae:c9:98:db:09:
         c6:8e:18:06:45:f3:c3:ac:bd:cb:b6:02:76:de:96:22:c1:e8:
         a4:2a:2f:0a:c2:9a:c5:5d:73:d0:d3:2e:47:4a:be:38:7a:a9:
         a4:f0:4d:26:11:8b:75:da:a8:ab:ea:5e:30:78:69:6d:aa:3e:
         10:dd:50:da:e6:73:73:cf:98:fc:5a:14:2f:f2:e8:10:cd:a5:
         bf:c2:ff:8b:ba:06:ea:74:c2:f2:41:24:36:b0:91:73:aa:87:
         59:6e:13:b9:23:7d:26:9e:ea:72:7f:ae:a8:9f:7a:55:14:1c:
         e4:44:8f:5d:d7:1a:64:83:9f:0d:8a:9f:82:08:22:fb:6b:87:
         db:0f:50:5a:63:57:99:32:6f:d8:83:ac:ee:c0:e9:1a:b0:e0:
         92:5c:0f:db:19:55:06:bf:00:fc:06:17:76:2b:4f:a6:e8:f8:
         3c:12:73:25:6a:4a:1b:a9:7e:4a:5d:a8:9b:f4:b1:ac:3a:90:
         d6:4b:05:18:36:19:ce:dd:32:7e:ba:ca:69:94:9a:43:39:73:
         2e:9a:97:94:76:75:e7:0e:c7:68:a2:0e:46:b1:2e:a0:94:e3:
         1c:66:04:3e:e2:0a:6f:84:9f:08:9e:2e:ff:32:cc:99:6d:b3:
         ad:58:2d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:29:10 2024 by rpki-client on console-ams.rpki-client.org