Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52a7b8da-583f-3bc4-9a00-b5d957f04a71.roa
File:                     52a7b8da-583f-3bc4-9a00-b5d957f04a71.roa (raw, json)
Hash identifier:          KoI6EJh3II1ELk42sYBsMGHF+pGQndoE9FO4EGhTtqQ=
Subject key identifier:   0D:F2:A0:77:5B:22:1C:54:FB:72:60:C1:7A:28:C9:98:11:BF:C1:A6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAEC200C9E4EC8AB45A6F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52a7b8da-583f-3bc4-9a00-b5d957f04a71.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33652
IP address blocks:        2001:559:c27a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:c2:00:c9:e4:ec:8a:b4:5a:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=73a4d2c4-6830-43ce-8523-51cec59356ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:16:07:d6:ba:2c:9a:47:20:67:02:50:f8:
                    31:39:ba:22:0a:89:3b:b5:7a:90:93:98:a0:43:32:
                    c4:53:d8:19:7c:e3:93:97:ee:13:14:f3:bc:33:ea:
                    04:31:5b:07:0f:05:db:a2:9b:a0:a5:e0:ac:76:ee:
                    02:c7:b4:fc:41:ca:0d:d9:54:f5:30:1f:36:b8:e1:
                    9d:7a:db:17:c2:16:b5:96:9a:31:7f:7c:ce:81:48:
                    5a:a2:41:21:5c:2f:40:d9:bb:43:88:2d:12:44:8b:
                    fa:bf:48:ec:cc:fc:34:0d:16:84:c4:8f:bf:d0:d1:
                    42:2c:62:6f:d1:cf:88:f7:ec:a3:e3:bb:fe:53:65:
                    89:a3:2b:05:81:ec:98:c1:c3:6e:51:77:cf:a9:ef:
                    1d:5e:2f:49:0b:86:cf:30:5a:3e:74:8a:83:e4:13:
                    a8:01:87:ec:82:39:23:90:17:fe:55:33:81:b0:e1:
                    6f:d0:90:4c:11:2f:c9:1a:52:68:e4:d1:8b:bc:fe:
                    41:1b:d4:3a:23:6f:78:93:6d:b5:d5:28:3a:ed:f2:
                    c5:2c:1e:86:96:39:2f:e1:fd:e7:89:46:f6:a8:9b:
                    2d:8a:b2:99:54:e5:01:7b:4e:c7:ab:74:f8:eb:ec:
                    71:84:1d:71:6b:8f:67:0d:67:0b:94:f5:2c:87:e4:
                    31:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F2:A0:77:5B:22:1C:54:FB:72:60:C1:7A:28:C9:98:11:BF:C1:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/52a7b8da-583f-3bc4-9a00-b5d957f04a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c27a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:19:ff:be:aa:0f:f0:1e:0d:63:be:b5:a7:bc:88:49:52:be:
         b3:f4:0e:d9:75:1b:f8:52:02:c9:68:33:6f:e8:49:81:b0:a4:
         18:be:a9:91:c2:b5:8a:2b:dd:2c:cb:a3:be:a6:d5:9e:6c:15:
         db:76:9a:4b:21:c2:b3:a2:60:06:01:c1:91:b8:f3:ae:5f:72:
         56:c5:b4:4f:18:8f:ed:d6:21:5d:85:df:3b:dd:f8:84:15:b4:
         a5:8a:e9:19:30:11:57:e6:07:0c:37:8f:42:9a:1b:15:c0:e2:
         3a:f2:24:9c:e5:34:74:50:f7:2e:50:c4:f0:fe:1e:d2:4b:18:
         6d:63:ac:b8:6b:2a:7a:0b:ed:df:55:9b:00:57:ee:fb:ed:68:
         6d:ac:b8:bd:61:78:e7:0b:d0:57:61:9d:24:63:ba:3c:1d:99:
         d6:01:17:41:4d:3c:ea:33:45:ac:fe:af:26:f2:00:66:81:84:
         31:a7:01:df:ee:20:dd:7d:2c:c8:75:3e:65:bc:8c:62:fc:6d:
         14:fe:cb:61:41:0b:8f:66:d0:29:20:d3:c8:02:6c:fd:7f:78:
         01:26:81:cb:ea:45:1b:54:be:eb:07:f6:5a:99:e2:76:6e:96:
         68:4c:86:c9:54:45:22:62:79:bf:48:f6:31:42:dc:53:ce:06:
         e6:b1:bf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:51:06 2024 by rpki-client on console-ams.rpki-client.org