Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07707ad1-945d-3a0d-b3b4-ab4e57eb5081.roa
File:                     07707ad1-945d-3a0d-b3b4-ab4e57eb5081.roa (raw, json)
Hash identifier:          325j9gQkufsKIFwjAkesN391pMMUbjodd4KHfuiG6CE=
Subject key identifier:   AC:DC:46:36:40:03:67:CF:DD:58:4B:8D:6B:A0:4F:A4:3F:DE:9D:8A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858473A5B9A901F71BF62D7A563C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07707ad1-945d-3a0d-b3b4-ab4e57eb5081.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     36040
IP address blocks:        2001:559:0:22::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:9a:90:1f:71:bf:62:d7:a5:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=c8981612-b05d-491a-aa37-d734c1b61c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f8:06:3d:47:c9:e9:f7:73:b1:08:95:02:0f:
                    06:56:bc:df:b9:66:bf:a1:59:93:f5:3f:1e:7a:0e:
                    08:5f:e5:de:d7:c6:b1:9a:72:95:5d:8b:de:9b:24:
                    b2:fd:5e:65:9a:a8:bc:02:63:01:e1:cc:b4:ca:2f:
                    eb:79:06:5c:04:fa:7f:46:80:bb:8c:ae:fd:8e:67:
                    6f:6f:95:6f:51:b8:32:36:db:2c:c6:36:ad:fe:36:
                    c5:15:51:8c:ff:6a:17:a9:5c:29:8a:08:4e:b3:4e:
                    61:6d:e1:ca:c4:f0:3c:82:1d:1a:a0:26:7c:ca:b1:
                    60:98:39:a6:9e:9f:b6:3b:b5:74:73:2c:6a:eb:64:
                    0b:e5:1f:64:3c:c3:d1:17:61:bb:b4:5f:74:c2:3a:
                    d7:d2:29:07:0c:6d:d5:02:08:a2:36:52:5c:28:fe:
                    29:d3:5c:c4:df:9a:ed:76:42:0f:9e:f8:ae:ad:3a:
                    59:4e:e4:c5:0f:ef:82:c9:58:47:54:ad:b0:9b:cd:
                    77:be:b0:81:f3:b8:b3:46:90:36:08:d4:01:a3:79:
                    21:d1:1e:a0:68:8f:37:6d:d6:cb:e2:72:74:2a:fa:
                    f9:b5:54:b4:2f:9e:fa:c4:5c:74:89:ba:2e:5a:9b:
                    08:40:aa:f2:18:a2:70:65:e8:c9:19:cf:55:f6:ca:
                    2a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DC:46:36:40:03:67:CF:DD:58:4B:8D:6B:A0:4F:A4:3F:DE:9D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07707ad1-945d-3a0d-b3b4-ab4e57eb5081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:0:22::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:6e:bf:54:e1:e0:a2:40:1a:0d:13:55:69:91:4f:53:28:7d:
         e4:f2:f1:34:0a:a8:cf:fa:66:8d:15:d2:f5:a9:b4:8a:f7:86:
         dc:54:99:27:a1:b5:bb:6c:db:6b:f5:ae:34:7e:c0:85:ad:2c:
         09:3d:c5:0d:dd:cf:de:e6:05:83:16:3a:63:12:4f:c4:74:ac:
         c8:8b:18:d0:b6:2c:0a:02:cd:bc:17:7d:0a:28:bc:11:67:07:
         1e:45:ea:9e:69:45:e7:ad:e2:8d:ea:fd:03:5f:21:0d:fb:6f:
         dd:6d:d1:f2:03:49:08:35:5f:24:a1:94:d9:a9:fd:15:5e:a2:
         26:ba:c1:ce:70:b6:0e:e7:46:12:b6:c4:7b:1d:13:25:68:2b:
         6b:44:8b:47:0a:5e:78:c0:6d:f2:74:bb:1b:1b:e7:d0:0b:0e:
         35:92:0f:5a:33:71:db:f3:c6:21:67:92:11:37:c0:b3:06:1a:
         b0:06:4f:70:84:05:80:e8:2f:2a:2c:11:cd:83:7c:1d:a3:c1:
         43:e2:e9:bd:21:b7:93:63:5b:dc:c4:35:e2:2d:64:51:08:cb:
         a6:1e:11:95:b7:b7:95:e6:c1:76:44:77:72:a6:62:0e:98:86:
         40:db:ca:cb:06:a5:4c:bd:53:24:67:95:00:fd:2e:e2:05:dc:
         c2:39:44:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:56:48 2024 by rpki-client on console-fra.rpki-client.org