Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53aeb3e5-bbe6-34d8-b3f2-9f36d5757b58.roa
File:                     53aeb3e5-bbe6-34d8-b3f2-9f36d5757b58.roa (raw, json)
Hash identifier:          z6+IA19vwlf60uanAjJC3wbU9RtVRUur1WznVrsSaWs=
Subject key identifier:   32:14:B1:C3:8A:64:43:13:C9:8A:6D:84:F1:D6:D3:D5:C3:6C:41:ED
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847C5251821627257B2529D1180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53aeb3e5-bbe6-34d8-b3f2-9f36d5757b58.roa
Signing time:             Mon 04 Nov 2024 18:08:56 +0000
ROA not before:           Mon 04 Nov 2024 18:08:56 +0000
ROA not after:            Sun 02 Feb 2025 18:08:56 +0000
asID:                     36040
IP address blocks:        2001:559:0:ae::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c5:25:18:21:62:72:57:b2:52:9d:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  4 18:08:56 2024 GMT
            Not After : Feb  2 18:08:56 2025 GMT
        Subject: CN=08e6f6cd-7d92-46ab-a662-ee6b40600843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:02:d4:e8:79:4a:8c:1d:7f:87:c7:11:93:
                    7c:9b:ad:01:ca:91:89:58:19:f5:88:c7:da:7d:0e:
                    74:a7:7b:8e:7f:88:70:63:c8:e7:6f:ff:cb:77:fd:
                    c5:8f:7a:66:83:bd:75:93:a8:45:b3:e9:51:a8:92:
                    8a:56:e6:d5:48:2f:79:71:b4:bc:79:b4:85:cf:d9:
                    36:ab:90:0e:a3:1f:f7:ce:65:5c:98:fb:12:e7:83:
                    dd:77:8a:70:da:cd:f8:e9:43:b7:05:76:93:47:be:
                    68:56:96:a8:26:e8:7b:bb:b7:a2:30:b8:5f:7d:21:
                    83:24:af:6a:73:ab:35:29:a9:b2:24:09:56:15:1f:
                    35:ec:3e:69:87:a8:cd:80:29:7b:3b:3c:be:1a:88:
                    26:45:dc:80:f2:ca:d1:64:29:b0:20:db:c4:20:29:
                    75:6f:38:b0:61:1c:16:13:8c:f4:71:a5:cf:f2:d9:
                    46:cb:86:ab:a8:16:43:60:33:39:b0:2f:07:ff:7a:
                    24:72:e4:b3:6f:48:6b:b3:4e:54:5b:0d:f7:21:45:
                    c2:21:bc:a5:d3:e9:8b:4c:62:61:d5:cb:1d:02:8b:
                    d9:65:32:e3:01:3a:a3:26:2c:71:a7:74:df:17:e5:
                    5d:49:13:6c:64:12:39:9c:45:4b:c1:5c:1a:06:cd:
                    f2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:14:B1:C3:8A:64:43:13:C9:8A:6D:84:F1:D6:D3:D5:C3:6C:41:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53aeb3e5-bbe6-34d8-b3f2-9f36d5757b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:0:ae::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:7e:5d:f9:a6:6c:9c:42:69:f7:82:8f:7f:05:e7:d9:3c:25:
         6a:97:23:c6:4b:6c:bc:89:8b:e2:a7:95:49:cf:52:cf:84:40:
         f0:52:3c:b1:3f:0a:2f:06:c8:b8:bb:3c:be:f1:60:46:71:fd:
         7e:76:5e:68:17:83:63:5e:e6:74:1a:10:eb:60:a7:79:14:62:
         47:bb:9d:0c:35:c3:e0:ca:fe:26:5d:2a:8c:b0:9d:9e:1c:4f:
         26:15:f6:86:05:d2:b2:99:86:c1:55:33:7d:ab:87:50:c1:25:
         af:28:b1:c7:68:bf:5e:35:cf:e5:b4:fe:71:a1:bc:97:f2:21:
         79:04:48:96:02:87:be:0b:1a:0d:9c:a6:ed:7f:98:63:04:17:
         cb:63:9c:6e:26:1e:4e:af:19:d1:55:9a:ee:03:34:b1:f4:0a:
         fd:6c:6f:2e:29:37:da:c9:ae:87:09:87:d6:ec:1a:a7:2c:1f:
         9f:b7:43:32:38:a8:57:59:c3:a6:d1:59:31:88:88:21:38:23:
         3b:95:26:66:33:8a:12:10:3a:38:63:06:35:11:7e:66:ce:70:
         0f:3c:c8:2a:cd:5a:2f:f2:84:3b:f2:12:52:96:2c:ec:af:89:
         6a:08:a4:e1:dc:83:85:0a:96:3b:fa:c6:b8:e6:e3:3a:0e:d5:
         b7:15:15:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:08 2024 by rpki-client on console-fra.rpki-client.org