Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc2f9899-fbff-3db9-9544-2cf9b8f71f32.roa
File:                     fc2f9899-fbff-3db9-9544-2cf9b8f71f32.roa (raw, json)
Hash identifier:          E5fd0on9qH5+bDvO9qDnrlg5rbrUxvhkk/Sl5bKi6dU=
Subject key identifier:   DB:C4:2D:5A:81:11:29:75:C4:AC:53:D1:AC:E5:D5:E6:00:75:8A:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460049A679EEA13677B3BA9E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc2f9899-fbff-3db9-9544-2cf9b8f71f32.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     7016
IP address blocks:        2001:559:c13d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:49:a6:79:ee:a1:36:77:b3:ba:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=9db8c240-8b97-4bdd-8dee-50fda91e7a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:38:02:e1:7a:69:f9:15:79:f6:37:a0:be:
                    db:39:eb:3e:17:ab:4e:a0:97:13:64:30:57:d4:8f:
                    49:4d:a4:97:3d:8b:56:12:ec:38:da:a1:bd:14:13:
                    8b:6c:ac:47:e8:63:1b:d8:2b:d7:86:6a:73:23:1d:
                    ec:2a:f4:01:12:44:7a:fd:0c:75:19:11:6c:d2:aa:
                    c8:7e:a0:70:34:6e:1e:6c:48:71:52:91:a2:0e:c5:
                    c0:5f:d5:ab:76:4f:93:b7:bf:dd:48:fa:4e:47:3c:
                    68:c1:e6:89:20:c4:83:5c:7c:22:d4:6c:99:33:8b:
                    17:81:27:97:74:94:f1:79:96:d6:b2:db:ec:ed:d9:
                    d3:90:1f:b8:b4:22:4b:e1:c8:ec:41:79:ac:cf:62:
                    b1:b7:6c:f5:44:14:2c:64:f4:c4:be:df:fa:1a:9e:
                    25:f1:7b:96:5e:a8:99:ee:a6:48:5d:e8:81:81:65:
                    f8:ca:04:12:ec:0a:0b:e2:00:33:9e:89:82:af:a1:
                    77:80:f3:72:6b:b3:5f:17:80:e3:eb:9e:5d:49:c4:
                    90:7b:e7:2d:be:e5:2e:fc:6d:fd:87:19:db:fd:b5:
                    59:3e:3f:24:27:fa:80:e0:d1:fc:f9:83:4f:4c:24:
                    73:95:2e:01:d6:fd:fd:7b:ad:91:be:e6:60:4e:32:
                    5d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C4:2D:5A:81:11:29:75:C4:AC:53:D1:AC:E5:D5:E6:00:75:8A:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc2f9899-fbff-3db9-9544-2cf9b8f71f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c13d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:56:83:b4:06:5f:60:c6:a8:33:d2:0f:21:5b:7b:42:c3:64:
         25:69:3c:a5:47:d7:05:60:17:2b:de:e3:89:61:b9:d3:c0:c9:
         f6:64:22:7f:57:e3:fb:fb:db:90:a4:2e:60:53:06:46:d8:2b:
         9d:27:73:50:01:b8:b8:c8:52:8d:27:bf:19:a9:8e:04:82:e7:
         73:55:23:22:25:99:60:a8:e7:31:34:2a:b6:3f:61:47:ed:66:
         bd:82:41:c4:ea:77:66:70:71:d0:76:f4:f5:6a:94:da:1f:d2:
         c8:6c:41:aa:73:be:c0:a2:c9:94:e2:20:06:42:d0:ff:f5:c9:
         6a:43:1a:58:ac:1a:a8:45:eb:45:eb:23:0d:f1:92:d5:43:80:
         91:22:99:78:05:ce:2f:99:9e:11:1e:6b:a6:7a:67:c9:df:cd:
         a7:f7:b8:85:ec:d8:c9:20:8e:8b:a6:77:8c:6f:3e:97:c0:75:
         82:a9:15:bc:3b:79:ac:17:62:81:8d:05:b5:c8:ef:64:1a:dc:
         b4:77:2f:5a:ae:83:6e:61:b9:8e:52:fb:52:b0:33:2d:1e:15:
         af:d9:d6:1d:5f:b9:6f:a5:d1:97:71:22:8e:cf:5b:7e:a6:97:
         c5:e2:b2:dd:a5:d2:57:27:9e:ff:e1:83:29:ea:a7:45:58:4e:
         db:42:fc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 00:54:07 2024 by rpki-client on console-fra.rpki-client.org