Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29cfcd1b-015c-3d53-a20b-04404a731a72.roa
File:                     29cfcd1b-015c-3d53-a20b-04404a731a72.roa (raw, json)
Hash identifier:          x+YBx1ukgNfBe/QXW09HolKJGdwcXQ07c1sr/WWGSBM=
Subject key identifier:   76:3A:C8:0F:2F:8E:86:F9:15:85:9A:1D:C9:03:00:B7:83:BA:F6:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847E35F7B89A2046A1B9C933CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29cfcd1b-015c-3d53-a20b-04404a731a72.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     33662
IP address blocks:        2001:55c:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:7b:89:a2:04:6a:1b:9c:93:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=c49f8c7b-f97d-4e07-bf7e-62dd96f2f611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7a:95:06:ca:28:c1:33:2a:55:0b:10:a1:33:
                    d5:fe:fa:e2:d7:0a:2c:3a:22:82:e0:66:4b:c1:eb:
                    ca:ec:77:4e:1a:ea:3a:e2:45:36:1e:6d:88:d1:c8:
                    2b:31:c7:e4:7d:66:7a:bc:5f:ea:84:a7:22:90:0f:
                    8f:c6:f5:f3:ea:f9:43:fa:ef:74:d7:d7:cb:1b:80:
                    31:f7:2f:c0:c3:8a:3d:63:c5:f8:15:ff:45:00:ce:
                    9b:c6:0b:57:1a:42:c0:fc:65:db:ba:e0:64:4b:71:
                    22:3b:0f:41:5e:3a:73:80:5a:f1:4d:07:28:80:5e:
                    01:69:cf:ed:ae:d7:07:98:08:30:aa:c1:c9:42:d8:
                    7f:22:da:c1:7f:1c:33:23:6f:74:bb:f9:8b:03:53:
                    05:ea:c8:d9:06:6b:c0:39:50:77:7f:36:81:a1:6b:
                    e8:a9:84:ed:60:94:5e:bc:a1:c9:f8:fd:c4:7b:32:
                    26:24:3a:8b:b9:42:0e:e5:20:98:7a:95:da:67:c9:
                    9f:d4:8a:f8:d4:7a:9e:57:1b:13:5b:e6:4b:b4:24:
                    e2:1b:b2:fb:f4:dd:0d:24:6d:8b:49:c7:16:85:71:
                    de:4e:56:04:dd:7b:cd:6e:9f:2b:ff:2d:f8:d9:3e:
                    eb:67:78:1c:10:c5:de:be:6e:6a:b9:38:be:be:81:
                    39:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3A:C8:0F:2F:8E:86:F9:15:85:9A:1D:C9:03:00:B7:83:BA:F6:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/29cfcd1b-015c-3d53-a20b-04404a731a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:55c:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:d7:54:50:68:13:ec:0d:75:2f:9f:b2:b3:9d:65:17:c7:e0:
         1d:2e:f6:db:84:ea:b4:73:c7:fa:d8:56:d5:25:25:68:4c:fc:
         a5:b2:3b:86:14:45:65:60:07:a4:50:0b:7f:bb:2a:4d:6c:c5:
         f8:b0:5b:55:5a:ff:b5:c0:a1:71:dd:77:4e:5c:77:f2:85:70:
         75:63:39:3a:2d:9a:97:1a:ce:a8:7d:52:6e:d1:2f:bd:da:e0:
         00:7a:c3:f8:61:a3:c9:8f:b7:2e:88:8c:f5:9a:67:89:cc:f3:
         69:73:2b:e4:9a:b3:19:45:51:81:6e:77:c4:3a:29:d5:6c:3c:
         d1:ac:2d:e9:16:7b:7d:5c:ef:a0:8f:a9:de:1b:01:0c:6c:ca:
         9b:90:dd:dc:a1:1a:52:ad:8b:1b:a9:05:76:e0:15:be:00:57:
         ba:0d:83:cf:db:3a:7b:b6:87:f2:94:83:57:82:93:60:8d:1b:
         2d:0d:32:d4:f6:86:d9:e8:86:4b:9d:00:0e:23:6c:92:6b:df:
         fd:6c:7c:8f:3f:d0:94:44:7a:2e:00:4e:c4:74:eb:7d:b1:6f:
         ac:19:a9:10:2e:00:53:55:16:a9:5f:e1:47:48:78:8c:45:2e:
         fc:38:8d:ab:26:8d:82:8f:e9:3a:e0:40:e7:bf:a5:40:f1:89:
         a6:30:8d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:32:26 2024 by rpki-client on console-fra.rpki-client.org