Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f96c088-32f6-3ece-a96b-2c6b693e7213.roa
File:                     3f96c088-32f6-3ece-a96b-2c6b693e7213.roa (raw, json)
Hash identifier:          ss5vbV9Tc5fbGLDUbyCWcpbMLowWCQdxohCOP1DxS1k=
Subject key identifier:   0E:F9:F2:6C:41:2D:8A:E6:FB:F3:B8:D5:9A:21:84:B3:5E:E3:F5:E5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF812B59E3A70009765DD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f96c088-32f6-3ece-a96b-2c6b693e7213.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33657
IP address blocks:        2001:559:c1f0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:12:b5:9e:3a:70:00:97:65:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=a1bbc930-66a9-4028-8be0-d9f7cc367841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:36:10:4f:14:4f:b2:94:a9:2f:28:ca:0c:ca:
                    d0:a3:c3:a6:33:cd:f6:08:d7:e3:ac:86:13:e3:0a:
                    e5:33:e2:8a:35:6c:f0:ce:8b:33:17:03:30:42:60:
                    bf:da:10:ea:c5:b4:24:78:db:a5:49:79:86:98:73:
                    e2:8c:d9:1c:cb:6b:6e:46:5c:5d:b4:07:bb:bb:15:
                    3f:34:00:99:e9:76:39:71:d5:0a:ad:57:22:9f:b9:
                    83:c8:15:ff:20:7e:52:b0:06:21:f4:81:02:03:95:
                    f1:2d:69:94:9e:0d:c1:b8:ec:5b:16:67:44:3f:a1:
                    ea:b1:f8:bb:cd:f2:19:e1:5a:23:3b:44:c1:a6:91:
                    67:f4:a9:8f:40:4d:be:cc:5b:9f:13:21:73:5c:93:
                    41:c3:3b:e0:cd:23:a9:91:21:88:ac:7e:af:6e:52:
                    3e:2c:73:b5:a1:d3:e0:cd:ae:52:4d:24:46:7f:52:
                    a7:61:09:6c:d7:a4:e6:14:54:f6:ae:17:3b:e0:f7:
                    39:e0:f8:72:ac:d2:71:f1:6f:da:9f:bf:13:d7:b2:
                    0f:a3:81:52:80:96:96:1f:09:9f:ce:5a:eb:4c:33:
                    58:83:29:34:7d:ca:2a:e1:91:87:2a:b6:64:4a:ae:
                    7c:a7:d9:6f:0f:7e:c3:74:a1:24:9d:33:62:af:38:
                    93:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F9:F2:6C:41:2D:8A:E6:FB:F3:B8:D5:9A:21:84:B3:5E:E3:F5:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f96c088-32f6-3ece-a96b-2c6b693e7213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c1f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:eb:a9:61:1b:23:88:9f:67:b0:8d:d7:82:87:55:dc:3e:6e:
         89:42:35:34:c4:8e:69:b3:4e:12:80:f0:04:a7:89:3e:0e:9c:
         0a:56:58:3d:4d:ff:dc:45:8c:8c:79:6b:fe:86:eb:cf:e3:58:
         3f:5a:a4:69:36:4c:82:8a:ab:de:a3:9f:74:f4:e7:f8:1b:25:
         07:0e:2b:50:72:b8:24:ba:e3:33:41:6d:80:7c:21:ca:85:bd:
         64:7e:3e:fd:5f:c5:7e:fa:ba:4c:34:63:9d:b8:e0:74:b0:9c:
         ee:a8:f0:8d:0d:18:78:b0:ae:6c:6d:35:aa:bf:ef:84:3f:04:
         fc:d3:e0:16:91:1e:53:67:4f:b6:e8:eb:d3:a1:81:97:77:73:
         b1:bd:02:15:29:d6:10:3f:61:ba:b0:58:05:3b:46:60:40:75:
         ac:a1:bd:dd:0d:c0:6f:f0:fd:eb:c7:59:39:6f:50:88:85:ae:
         ce:6d:b7:62:d2:bf:64:38:6b:a3:11:08:ce:75:3e:8a:8b:9b:
         90:5d:cb:c0:b9:bb:e5:86:33:5e:70:35:79:77:4d:e9:3c:78:
         f0:ad:fe:8d:7e:97:09:1d:85:fc:d2:6d:15:95:03:73:37:2c:
         ba:d6:7d:0f:71:5c:89:c9:96:03:d3:86:9c:6c:30:d8:76:76:
         9f:be:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:58:12 2024 by rpki-client on console-ams.rpki-client.org