Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00884d07-6eaa-3809-aa21-4527c1a15cde.roa
File:                     00884d07-6eaa-3809-aa21-4527c1a15cde.roa (raw, json)
Hash identifier:          ZMeZAa+sEUiBH1GJXxjDzhAFPWQRuTJEOXn1OMnQiPQ=
Subject key identifier:   DB:DD:0C:C4:91:6D:94:1F:23:50:D5:C2:13:AA:2E:1E:07:86:C5:38
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF73A6C82E3B9A86CE04600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00884d07-6eaa-3809-aa21-4527c1a15cde.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        2001:559:8107::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:3a:6c:82:e3:b9:a8:6c:e0:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=fe1f01f6-de45-4aa0-9a60-0cd73bedc0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:90:d2:58:75:30:df:f7:b2:a8:5f:a2:1d:
                    fc:28:57:47:61:4d:57:0d:6d:53:a0:1d:d8:84:b9:
                    50:5e:5e:a9:20:cb:36:df:54:bc:85:42:e1:7d:6e:
                    85:75:67:84:a8:dc:c0:23:e3:45:c9:12:11:6e:41:
                    79:21:42:03:97:c0:f8:06:00:09:a0:48:a3:3c:b0:
                    71:17:9b:79:85:37:db:18:47:47:68:86:0b:a9:7b:
                    e4:54:57:56:01:ff:1a:56:1b:9e:20:de:55:1d:56:
                    78:81:d3:85:b3:df:b9:35:20:69:e7:75:59:fa:72:
                    14:fc:19:f7:52:f9:32:74:f7:d6:90:c7:d4:c4:00:
                    ce:17:4e:e3:49:19:97:b1:b0:19:8b:5c:1b:ec:a2:
                    99:b1:9e:48:8c:fd:08:62:2d:97:f1:41:df:63:54:
                    60:b6:47:69:50:82:ab:44:a7:69:29:d4:ab:af:ff:
                    bf:4b:6a:c1:b7:48:6d:88:8d:71:c5:90:12:55:64:
                    e7:87:a5:d7:c3:f3:cf:55:91:f8:3b:27:b9:71:e0:
                    5b:5b:dc:0a:92:ca:75:70:97:53:ad:19:8d:ca:06:
                    f9:2f:a1:d3:ed:7b:52:53:a6:ac:f8:05:1e:74:16:
                    18:df:77:ef:d9:2a:f5:7d:b0:d4:b6:e4:3b:ee:46:
                    2b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DD:0C:C4:91:6D:94:1F:23:50:D5:C2:13:AA:2E:1E:07:86:C5:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00884d07-6eaa-3809-aa21-4527c1a15cde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8107::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:a0:57:90:dd:de:44:04:e7:98:64:4f:c9:59:c8:df:ae:7f:
         3a:6b:06:4b:cb:a5:3a:09:0a:0f:02:f0:78:51:34:04:cf:58:
         e1:67:95:f6:f9:6f:ab:dc:96:d8:60:1e:46:1e:b4:79:ca:57:
         47:d6:3d:c9:05:2f:77:e7:84:eb:2e:86:5e:c0:bb:98:59:36:
         ff:25:ed:57:85:22:a1:9f:bf:83:4a:c5:29:ea:c6:d5:49:8a:
         c6:7a:43:4b:e8:09:dc:ef:8a:6c:73:0c:0d:ef:bb:a2:c0:4f:
         5a:ea:78:62:06:aa:2c:e1:9f:2e:19:47:89:03:dd:9b:73:67:
         c3:a0:49:46:dd:e0:8b:1c:e0:df:c3:f5:fe:d4:29:b7:f9:4b:
         5f:82:5d:2d:f0:77:7e:e1:c5:09:2a:33:14:97:6d:bd:60:9f:
         db:04:c3:8a:18:5c:5e:4c:37:ed:5f:0d:ac:73:59:fc:e7:b7:
         9b:9a:08:20:d4:29:cd:8d:d9:12:59:86:97:b7:d0:70:63:52:
         52:e6:2b:47:b4:0d:42:0e:2d:49:32:3f:4c:d9:63:28:16:b3:
         70:eb:bb:13:6d:76:2b:b9:ed:0b:e1:7d:a7:fb:30:ff:cc:2d:
         9e:cf:64:39:65:6e:d0:58:c1:40:8a:dd:ce:52:96:5a:3b:a9:
         de:a8:94:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:32:48 2024 by rpki-client on console-fra.rpki-client.org