Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5298c84c-847b-38b4-a433-7b5b2c72f168.roa
File:                     5298c84c-847b-38b4-a433-7b5b2c72f168.roa (raw, json)
Hash identifier:          XcFOVsZQp4+CNjMXxlKAGJq2vOn8/Zr/RsbNximHezU=
Subject key identifier:   28:33:CF:48:6B:2B:3D:10:D1:FA:4E:1D:6F:FB:E0:BC:39:6C:CA:7F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAFE9968726EB3294FCBB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5298c84c-847b-38b4-a433-7b5b2c72f168.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33287
IP address blocks:        2001:559:484::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:af:e9:96:87:26:eb:32:94:fc:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=0a1e7c1c-e515-4611-bd2b-d6a5f8d7fe6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:94:ce:13:c9:fd:ad:71:37:42:c3:35:78:43:
                    2f:c0:9d:86:6d:35:63:fe:96:25:fd:f4:d8:a4:21:
                    b8:d9:56:9d:32:82:90:03:83:ae:db:cb:06:67:93:
                    e8:da:cf:70:eb:d6:30:8f:2d:d9:30:ce:8d:19:28:
                    4d:e7:92:37:c3:5d:11:90:42:f1:87:8f:3d:a3:15:
                    99:e4:18:03:9e:bb:c4:c5:df:34:4c:59:43:3c:e1:
                    b4:07:7b:fe:98:a3:22:07:0b:b9:06:ba:00:b7:8f:
                    cc:e2:24:4d:b8:35:1e:76:1f:10:41:e7:da:29:a3:
                    06:62:d5:8f:0b:7c:fd:24:58:bd:cd:6e:c7:7a:85:
                    51:5a:7d:0e:ff:4b:a2:c8:b4:71:66:8d:78:7f:0c:
                    1d:df:7c:19:72:0f:e7:93:11:0e:f0:7d:9c:da:38:
                    00:14:35:72:c9:61:20:c5:09:4e:4d:44:f1:26:1d:
                    2f:05:64:46:53:64:f0:fd:9e:0b:f6:62:9c:9f:68:
                    cf:4c:60:f0:21:69:10:7d:09:7e:94:f5:f5:b8:d6:
                    21:ff:6b:5d:b2:fd:08:b5:b0:71:1f:fc:f4:10:ad:
                    8c:80:a3:01:c4:1a:60:ee:1e:fd:7f:86:6b:27:d1:
                    7e:33:fb:3b:77:1f:57:40:1d:34:e9:87:34:95:97:
                    32:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:33:CF:48:6B:2B:3D:10:D1:FA:4E:1D:6F:FB:E0:BC:39:6C:CA:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5298c84c-847b-38b4-a433-7b5b2c72f168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:484::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:45:03:dc:f3:e4:db:6b:7f:60:52:52:da:43:11:8d:21:91:
         f8:b7:df:07:73:95:a0:84:f8:a9:2e:d8:e0:60:f5:f1:6b:e3:
         75:7f:8b:20:28:2f:93:03:f7:05:9d:f4:93:3b:ce:27:d0:d3:
         00:76:b5:c6:33:d1:2c:f3:6d:e1:6c:28:51:4f:d0:01:c1:e5:
         ea:86:ea:87:99:0d:1f:ec:a0:1e:15:86:ad:af:32:84:46:2f:
         a1:53:49:79:db:60:31:d6:34:b7:0f:f3:c7:6b:d5:72:5e:45:
         6e:b4:d3:db:74:3e:24:f3:33:ed:9c:a3:f2:b7:5c:92:4e:c5:
         47:6a:12:91:98:4e:b6:69:d1:a9:82:fd:10:47:86:a3:2b:7d:
         f2:c6:d1:c7:b6:a0:9b:41:15:00:92:49:a7:69:41:8b:36:ba:
         09:97:e9:4e:bd:ec:46:af:30:d7:5a:83:91:69:c6:f8:12:1f:
         6f:13:db:96:55:f6:51:b1:2c:72:3d:e9:44:db:ea:d6:76:b6:
         87:92:c9:0f:13:0a:09:77:86:dc:8d:65:88:9d:eb:8a:71:3c:
         2b:b2:78:04:58:08:60:c5:3b:06:86:4f:e2:ad:24:89:6e:a2:
         58:7c:38:ef:0e:88:1b:7b:58:91:19:59:92:d9:f5:61:24:4a:
         9e:c5:09:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:51:05 2024 by rpki-client on console-ams.rpki-client.org