Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ad7ca1c-1f81-3e62-99ea-a62833684842.roa
File:                     0ad7ca1c-1f81-3e62-99ea-a62833684842.roa (raw, json)
Hash identifier:          TGr0geDIBCjhqbaVOJwFUDEKw5F/iy66zHzDEiEnWtY=
Subject key identifier:   3E:52:05:9A:E5:EF:03:0E:7C:3C:A8:0D:5B:68:4E:71:34:53:6B:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7D2D2709CBC2D31DC61C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ad7ca1c-1f81-3e62-99ea-a62833684842.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     13367
IP address blocks:        2001:559:8351::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:d2:d2:70:9c:bc:2d:31:dc:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=4ddb0b23-2f44-4810-8cca-533e9a403986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:d8:cb:d6:1f:6f:d4:75:7d:f8:30:8d:4d:
                    36:ea:37:6b:03:b1:9d:76:4c:21:ab:fa:ef:e4:9a:
                    86:1e:ac:a5:91:98:b4:79:67:4e:dd:3f:00:93:5c:
                    78:21:58:f3:7c:a1:17:cb:a6:b5:e4:e8:97:2b:c4:
                    06:a5:7d:f9:82:67:6d:fb:b7:ef:c2:db:4b:b3:1e:
                    0d:07:03:bb:18:4a:7c:d0:6c:26:05:92:85:77:21:
                    0e:ca:55:8c:fb:5a:4f:f1:62:d1:6d:f2:e7:32:25:
                    96:78:ab:9e:c6:26:30:5d:ad:f3:e6:a3:5a:7f:87:
                    ec:3a:c0:9b:e3:f6:d8:fa:db:21:91:38:75:1d:ad:
                    56:96:d8:f3:6a:bc:07:ee:7c:52:bf:81:df:56:64:
                    75:96:72:0a:29:38:ae:a1:46:15:4c:7a:12:85:18:
                    76:f1:47:1c:9e:05:04:44:bc:66:7c:9c:0e:ff:fe:
                    d8:a2:7b:ac:c3:bd:2b:7d:18:5f:e2:10:bd:6b:f1:
                    43:d9:68:56:67:92:11:99:59:8c:cd:03:9d:ed:47:
                    f0:5b:a0:a9:1f:09:c8:d5:84:4b:12:92:d1:ee:08:
                    1e:dd:1b:a4:78:44:bd:c6:82:0a:bf:3e:a4:ec:11:
                    fc:2e:46:5c:3c:be:b1:fb:38:71:7d:ac:fa:6a:b4:
                    8b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:52:05:9A:E5:EF:03:0E:7C:3C:A8:0D:5B:68:4E:71:34:53:6B:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ad7ca1c-1f81-3e62-99ea-a62833684842.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8351::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:eb:d1:69:ea:9b:e8:a8:17:64:ce:4d:01:2f:18:2c:1a:af:
         8d:48:19:eb:ad:4f:96:47:13:56:0a:9e:f3:96:05:b4:11:b1:
         84:86:1f:01:0e:14:8f:11:24:86:73:ed:41:92:56:c0:24:7b:
         f5:17:be:57:76:21:cf:3c:9e:02:2b:fb:06:f2:a0:62:0a:f4:
         86:d6:ea:78:40:5d:06:69:c9:41:7e:0c:f2:80:a1:2b:87:67:
         d3:33:d3:0f:ff:3a:e1:a1:78:29:64:92:8a:13:e7:8a:d8:04:
         10:0c:1f:d5:d8:3f:dc:22:5c:27:05:2b:6e:7d:b0:08:fe:8c:
         7b:c0:65:e4:09:09:d0:21:e7:56:34:d9:c3:eb:bf:b0:63:3b:
         61:c0:3b:35:ed:09:db:21:7b:de:cc:20:09:ab:4e:c7:82:af:
         64:98:30:73:1f:0e:bb:28:47:b4:39:4e:10:11:15:67:1a:ac:
         e2:eb:65:fe:b7:23:89:0b:30:5f:2f:2f:f5:46:aa:b9:57:7e:
         c8:ff:74:32:fa:01:96:75:4f:e5:07:6e:52:b0:e6:ba:70:68:
         a5:ba:38:40:e8:0b:5f:b4:e3:e5:af:ed:f8:72:57:e2:d8:45:
         d1:a1:8b:2b:ac:e8:59:99:ae:75:34:a5:d3:88:92:70:e4:89:
         fc:3f:69:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:34:01 2024 by rpki-client on console-fra.rpki-client.org