Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/196d009f-8b54-3139-a970-43d11482c867.roa
File:                     196d009f-8b54-3139-a970-43d11482c867.roa (raw, json)
Hash identifier:          0oAIz++E6QmaptCd9znyvCCAyRTSowz3bt4JhDFfqbw=
Subject key identifier:   F8:B6:30:90:8D:7D:CF:25:B3:96:CA:51:3C:F1:64:CA:94:16:83:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF8CEDCF23DB0064361E480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/196d009f-8b54-3139-a970-43d11482c867.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7016
IP address blocks:        2001:559:826e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:ce:dc:f2:3d:b0:06:43:61:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=83bf9ee8-18f6-423a-9d12-a9ba07d11644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b5:4c:b5:a2:87:2d:43:44:56:15:70:96:4d:
                    bd:c1:5c:6f:8b:d3:c9:aa:ff:df:b0:80:11:f5:11:
                    9a:6a:1d:6b:6d:c3:b6:5e:bf:6d:d4:a2:d4:c0:31:
                    57:75:93:cf:9b:ed:71:1f:ba:0b:4f:8f:8d:0a:1c:
                    24:27:12:4b:de:88:8a:60:db:52:d7:40:4d:80:a0:
                    cb:fe:12:52:1a:c3:16:50:90:b1:f5:bb:8d:36:ae:
                    87:9c:08:40:e8:77:9d:76:37:7c:54:eb:78:00:3f:
                    45:2c:42:03:c0:63:32:1c:f2:a5:86:bd:fa:0a:cd:
                    17:f7:28:be:a8:1d:f9:2a:11:d6:86:d6:cf:d9:12:
                    7f:4f:db:1f:db:58:43:f2:30:30:07:e3:0d:c5:ff:
                    ad:d0:ac:f4:67:93:ec:97:ac:9f:0f:37:27:40:d5:
                    14:09:cd:70:af:15:e3:df:2a:41:69:89:3a:c5:a6:
                    4d:3f:6c:01:b2:01:06:b3:e8:58:e6:35:28:91:ea:
                    b0:5f:55:08:53:f5:64:f2:4c:c8:c9:fe:fe:66:56:
                    1c:b9:c4:89:6a:77:68:f6:6b:b6:e4:62:cb:93:65:
                    82:2e:b6:fd:20:3f:a9:1e:3c:c4:2c:18:c6:2d:12:
                    cd:4f:6c:25:4a:e3:86:31:f3:b2:19:80:c9:b3:43:
                    2a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B6:30:90:8D:7D:CF:25:B3:96:CA:51:3C:F1:64:CA:94:16:83:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/196d009f-8b54-3139-a970-43d11482c867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:826e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:eb:61:99:ad:9b:e2:2e:ec:3e:fb:bc:d3:14:91:8b:69:6f:
         47:c5:d6:f2:2d:ad:2e:ff:0b:9e:c9:7a:25:76:77:0a:da:e3:
         ba:f6:9b:6a:fe:61:00:63:fc:9a:46:f6:a9:92:f5:35:7c:a4:
         85:7f:90:c2:9d:a3:a3:79:50:b9:82:1f:49:ff:74:b1:1f:7c:
         6f:19:6a:94:5f:17:54:36:5e:9d:75:d2:5d:53:88:f5:65:6d:
         e5:c5:76:23:96:b0:5c:f2:4b:9c:5a:de:f9:c8:c4:cf:28:f0:
         26:a8:8a:f3:b6:5c:71:de:f4:bc:43:ff:9f:26:ec:2f:d6:12:
         67:db:48:0a:4a:23:27:fc:6a:bc:90:b3:54:f5:91:db:99:af:
         9c:2c:c3:fe:e4:27:83:23:42:e4:3f:85:0b:ac:f1:12:90:29:
         58:af:a8:80:67:19:3f:41:78:e3:d8:35:b9:3a:c4:d8:fd:64:
         64:6b:5d:35:29:02:98:3b:2b:ea:49:eb:44:6a:40:ef:35:41:
         57:5c:f1:11:f6:ba:0c:e1:45:63:76:9a:33:6b:42:50:ab:71:
         41:97:2f:80:e4:88:3e:5a:52:e8:48:84:ea:bc:eb:dd:10:6b:
         4f:57:43:07:6e:fe:f2:b0:63:16:71:fb:10:86:92:75:ec:7f:
         ab:60:4b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:31:04 2024 by rpki-client on console-fra.rpki-client.org