Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18743953-2852-32d3-b37e-358e19032d29.roa
File:                     18743953-2852-32d3-b37e-358e19032d29.roa (raw, json)
Hash identifier:          kWeDssMJDREnp+mNJ4oF1SIBMA8wIhN06bg06uChi30=
Subject key identifier:   DB:5C:86:AF:56:A7:B9:35:0D:47:0E:F4:D8:D3:C5:D5:4E:61:41:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFA3699970A36BD2A64F680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18743953-2852-32d3-b37e-358e19032d29.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33651
IP address blocks:        2001:559:3bd::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fa:36:99:97:0a:36:bd:2a:64:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=189edcac-a664-4909-9ed5-8854504227a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c8:7d:d6:8d:ea:54:20:0c:0e:bd:d9:63:88:
                    ae:a9:9c:be:f3:18:6a:3a:1a:a9:f1:e1:c1:e5:a7:
                    9c:b9:bb:dc:42:eb:d2:f0:20:a4:c7:28:a8:96:75:
                    c4:12:08:f1:b1:ad:b1:28:50:d5:cd:6b:1f:16:4c:
                    a4:23:68:05:e3:8a:75:55:3a:dc:1d:54:a0:6c:67:
                    eb:bd:01:af:9d:5a:2d:95:77:59:4b:48:d7:ff:20:
                    f7:ff:9a:90:5a:e2:81:f7:ef:ab:b2:fa:ac:9c:69:
                    02:af:b2:bc:a8:48:d3:74:a1:8c:e3:a7:ef:50:3c:
                    bb:ae:75:0e:30:da:dc:6a:dd:99:c6:18:f1:f2:e8:
                    c7:d9:c5:60:d9:08:39:2c:78:22:84:b6:a0:c7:79:
                    82:db:7e:1d:04:32:f9:47:2f:0f:8d:17:4b:8e:03:
                    62:e7:73:b0:3d:74:0c:5e:16:32:7c:63:63:de:3d:
                    f1:78:e5:77:7b:5e:d6:a0:19:03:75:4e:83:04:12:
                    98:1f:40:c1:77:3d:4c:0e:0a:56:4f:6b:d1:d5:44:
                    37:d5:04:a8:c6:e8:6b:c6:9a:99:2d:cd:14:1f:26:
                    18:e9:d3:37:1c:cf:88:f1:74:99:b6:fd:6a:e2:d0:
                    14:8b:0f:23:fd:19:6c:88:fd:c5:a6:72:ce:94:15:
                    b4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5C:86:AF:56:A7:B9:35:0D:47:0E:F4:D8:D3:C5:D5:4E:61:41:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/18743953-2852-32d3-b37e-358e19032d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:3bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:6b:ff:92:9d:af:7a:74:44:0e:a2:c6:58:5e:20:53:da:9a:
         f7:4b:ef:a3:66:a6:32:0b:6b:c3:87:80:1d:d7:51:cd:aa:81:
         51:5e:f6:c4:3b:16:11:bd:bb:86:44:d5:b8:0a:75:a3:d4:9a:
         f1:15:8d:32:98:d7:ce:58:e7:e4:82:d7:c3:82:8f:97:98:7b:
         51:f7:95:4d:e6:7c:4d:a2:03:87:16:d2:e1:cd:ce:df:72:76:
         36:57:d4:39:cd:d1:d2:44:90:c6:37:e5:e1:99:70:4f:0a:34:
         ea:9f:d4:21:dc:53:b3:81:36:6b:3c:14:d2:66:86:4f:42:a2:
         c9:79:58:a8:49:7c:bc:99:ab:b8:ad:6a:14:f6:b9:8f:fb:5e:
         b5:d0:f3:10:73:13:ed:c7:17:33:08:7e:c7:92:87:22:1d:bb:
         1a:7f:f6:d2:c1:ff:dc:de:cf:f2:d3:61:28:c4:71:da:67:4c:
         ae:ff:ea:24:7b:07:4d:09:48:d1:6e:bd:6c:f4:ad:13:29:71:
         93:fe:3d:ac:62:88:01:a5:e8:6e:f5:b1:df:91:e6:e5:fd:cf:
         50:61:04:37:45:bf:01:de:6e:ca:e6:2f:55:35:af:2c:19:09:
         51:99:30:f1:b1:b3:d6:13:62:b5:ef:43:be:52:bc:84:8c:16:
         14:82:35:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:19:53 2024 by rpki-client on console-fra.rpki-client.org