Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/126e3111-0523-32eb-a6ba-d01af7262acd.roa
File:                     126e3111-0523-32eb-a6ba-d01af7262acd.roa (raw, json)
Hash identifier:          m9RnZEjFuV0kYHPXL/cQ8tmi4KGTmioQcs3Vj5jKKdk=
Subject key identifier:   10:66:7C:05:6F:FD:98:5A:C0:E0:E8:02:C2:50:C8:33:7A:73:6C:EA
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848424B0E7635B9B0403563CB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/126e3111-0523-32eb-a6ba-d01af7262acd.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     7725
IP address blocks:        2001:558:102d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:0e:76:35:b9:b0:40:35:63:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=98791b14-e952-450b-9717-5c99f315c3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4a:6f:30:0c:61:8d:f3:c8:0c:5b:ca:be:af:
                    96:24:77:4d:a6:87:12:bf:0c:d4:8f:6e:3f:69:41:
                    bb:bb:b0:50:ea:fb:44:df:8d:8e:13:99:a9:e2:a3:
                    16:10:f0:fd:e7:c7:38:da:91:21:fd:f0:e8:2d:3c:
                    4e:0b:10:f8:9f:eb:31:f8:f1:f0:a8:c6:d0:4d:e7:
                    4b:df:1c:82:90:e9:1a:fc:56:61:2e:a9:6a:aa:3f:
                    68:64:15:f0:4d:2e:fc:a3:2d:f5:69:4a:31:8d:f2:
                    34:48:5c:c1:ee:a3:9b:12:32:aa:cd:ad:17:e2:7e:
                    c1:c7:cd:86:95:33:2b:40:7a:8b:e1:42:90:80:f0:
                    ea:40:ae:0b:d0:d3:93:8d:09:fd:56:75:12:89:d1:
                    81:d7:60:7c:a6:51:d2:e1:4a:f7:71:05:18:06:60:
                    46:b5:3a:a8:91:8a:f2:67:3f:af:46:72:d1:0f:55:
                    b5:3e:bb:24:11:2e:70:90:32:19:cb:c3:7c:dd:19:
                    b4:9e:38:1c:95:20:81:8a:9a:42:4f:b2:d1:c6:28:
                    f9:5c:24:be:8c:0e:5f:ca:39:f6:bb:2a:94:36:4f:
                    c2:b6:8b:83:3f:78:65:a6:c9:b1:a8:01:e8:c4:c4:
                    23:41:1e:78:e8:70:8f:5a:a3:03:d9:ff:85:39:cb:
                    a7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:66:7C:05:6F:FD:98:5A:C0:E0:E8:02:C2:50:C8:33:7A:73:6C:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/126e3111-0523-32eb-a6ba-d01af7262acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:558:102d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:72:cc:fc:cc:f3:6c:86:81:22:b7:14:0f:1b:15:89:17:f7:
         aa:55:98:18:4f:94:3c:af:12:59:53:a5:32:15:fe:b6:2c:0b:
         c2:fd:81:7c:06:04:e1:0d:94:2e:4e:af:f0:03:62:0f:77:b6:
         c3:84:60:b9:48:5f:5e:8b:37:b4:30:fb:98:aa:d6:d2:19:20:
         3d:03:47:3f:aa:c0:12:cd:bb:ee:6f:51:d1:22:54:b6:1e:3b:
         84:66:bc:11:58:dc:6c:27:92:fd:ea:c1:07:87:68:63:71:f1:
         bd:41:75:25:6c:82:0e:47:46:34:8b:ef:95:05:c0:67:6b:bb:
         fe:d9:24:dd:90:35:f2:29:30:99:bc:03:bd:23:3b:29:08:89:
         80:86:a7:32:d6:e0:66:89:03:2c:ca:ee:31:f9:10:fa:70:ea:
         72:3d:b2:2a:a2:1f:90:9d:02:5f:af:24:1d:21:e4:76:06:ea:
         3a:71:3c:f4:23:fa:41:53:2b:77:cd:2f:a1:bf:9f:32:07:59:
         f3:c9:9f:b2:2d:04:fb:ac:61:c3:f3:12:0a:33:d0:74:96:cb:
         28:2f:51:45:1d:f2:7f:ba:55:3c:ce:64:49:91:df:f6:c7:2c:
         a3:76:16:fd:e6:4a:2d:e1:94:42:44:e9:d0:a9:00:86:ac:ab:
         f2:2a:ab:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:53:00 2024 by rpki-client on console-ams.rpki-client.org