Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c69d7e2-e0b1-3edf-9690-e158f181156d.roa
File:                     1c69d7e2-e0b1-3edf-9690-e158f181156d.roa (raw, json)
Hash identifier:          kq6pWyS2we9koUJrangXK0wJvT/3o44mr/ZlN1nHaKY=
Subject key identifier:   AF:6F:4B:F0:7C:47:03:2F:7E:E1:E3:09:48:51:B1:6E:7C:77:48:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFAACD068330FA090896800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c69d7e2-e0b1-3edf-9690-e158f181156d.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33667
IP address blocks:        2001:559:5a2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fa:ac:d0:68:33:0f:a0:90:89:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=66d187c6-6752-4298-b0df-7e47a5acbd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:47:2d:83:fd:4a:23:04:ab:71:33:59:47:50:
                    84:f6:82:65:ed:a3:1a:1f:38:e5:48:85:4b:a4:d4:
                    ef:2a:fa:4e:db:f4:f6:23:f6:be:ca:56:9a:ba:d8:
                    25:6e:02:63:b2:7f:21:80:a1:03:cc:99:e7:16:ad:
                    9f:6f:bb:45:d4:7c:41:ed:a8:75:b4:82:da:ac:40:
                    36:8c:88:f3:3a:99:52:b0:ca:e0:a1:cb:ec:fe:2c:
                    9a:17:42:da:bf:0b:bb:1a:cf:c1:24:7d:a3:61:ac:
                    88:45:cc:6a:f8:7d:5b:59:01:ad:61:ae:2d:90:d0:
                    77:11:f6:47:dd:4c:98:9c:48:96:94:55:84:52:ec:
                    f6:d2:14:85:5a:ef:7a:53:cc:20:db:1c:40:8b:3e:
                    af:3f:0b:1c:4c:8a:77:29:69:e0:45:ad:d8:4c:4b:
                    83:83:40:88:65:ac:3a:91:f0:06:19:ad:2a:62:56:
                    a9:db:69:c3:86:ce:8e:d8:3d:b1:73:79:39:ca:c0:
                    d7:38:9e:b7:4c:ef:f4:9c:1f:89:b0:97:ea:a4:bc:
                    cf:7f:f4:ab:ad:16:2a:f9:11:a5:80:12:35:e4:06:
                    b3:67:1d:f1:9c:06:cc:6b:25:9d:64:28:fd:58:a5:
                    66:80:3c:fd:cf:40:2c:b5:c1:67:75:e6:1c:2a:a7:
                    3f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6F:4B:F0:7C:47:03:2F:7E:E1:E3:09:48:51:B1:6E:7C:77:48:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c69d7e2-e0b1-3edf-9690-e158f181156d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:5a2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:5f:06:5f:7f:b2:6a:60:ad:e4:a2:88:4f:93:7c:35:3d:fc:
         c8:1a:3a:c4:00:d0:99:e9:a8:b5:73:5a:a2:aa:69:cf:c2:1e:
         97:f0:35:47:6e:47:56:dc:8a:10:b2:16:06:24:d5:49:04:48:
         c9:92:91:06:a2:99:06:24:4b:1c:9a:e3:cd:2f:bc:2a:8c:80:
         38:84:b3:c1:5c:31:ea:bd:13:b2:4f:b5:6a:74:d9:ec:11:5c:
         9d:2e:22:28:cb:87:75:2f:ff:75:95:82:85:1a:ed:e0:9c:c2:
         90:bf:cf:a2:55:0d:ef:53:20:59:cc:bc:58:f4:96:14:ea:f9:
         47:b9:4e:41:d3:e5:35:5a:f5:89:0a:ec:f8:d3:d8:de:15:15:
         b8:73:14:22:f1:6e:35:8f:8f:49:58:80:fd:bf:1a:d8:31:dd:
         66:95:d8:7a:02:cf:9f:d1:4f:4d:98:78:47:a2:6c:a9:df:c2:
         96:7f:ad:41:95:91:93:3e:50:7a:7f:0e:03:f5:0a:ce:73:2e:
         1f:65:49:4b:c8:53:4c:c0:ac:f5:cf:cd:8a:c0:46:9d:a8:88:
         55:dd:67:a3:d8:32:df:74:df:9d:55:d3:e1:79:5e:fa:22:02:
         61:1a:7d:33:cd:e4:82:22:12:48:bf:8e:35:2a:56:b1:55:76:
         06:d2:50:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:37:42 2024 by rpki-client on console-ams.rpki-client.org