Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55a0944e-d4fc-3b2e-ad4b-590f376c6f5f.roa
File:                     55a0944e-d4fc-3b2e-ad4b-590f376c6f5f.roa (raw, json)
Hash identifier:          U/Fj7IzARgvL+LpDpgSU6taFVhcu3tvPhy04Uo+SI1M=
Subject key identifier:   7C:A4:6A:C6:38:4F:3B:37:3F:B9:22:6A:A8:60:7C:8B:B9:4A:2A:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858452275A2939BC7271D33EA6580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55a0944e-d4fc-3b2e-ad4b-590f376c6f5f.roa
Signing time:             Fri 08 Mar 2024 02:00:26 +0000
ROA not before:           Fri 08 Mar 2024 02:00:26 +0000
ROA not after:            Thu 06 Jun 2024 01:00:26 +0000
asID:                     33668
IP address blocks:        2001:559:85fb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:75:a2:93:9b:c7:27:1d:33:ea:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  8 02:00:26 2024 GMT
            Not After : Jun  6 01:00:26 2024 GMT
        Subject: CN=4385222f-aecf-41a1-8377-9fe894071eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d1:3b:47:3e:67:5d:84:90:49:7e:83:fa:21:
                    c0:46:0f:db:86:0a:37:2d:59:c6:cb:07:92:21:e8:
                    23:98:cd:54:7f:a2:87:0f:0f:df:47:6c:84:90:d4:
                    1d:1a:cd:b7:76:a4:9c:ff:1b:61:8c:ff:5d:fd:a0:
                    95:2f:3e:70:40:a2:94:8d:d5:7d:a1:ca:f8:a6:a8:
                    6e:13:ba:cb:7d:2f:2d:d0:21:1c:b1:a7:12:5f:41:
                    9a:e1:f5:56:c4:d8:fb:86:90:da:83:dc:7d:59:ca:
                    ce:4b:61:50:f5:15:f6:9e:96:06:3f:29:19:7f:2d:
                    38:1d:b3:7b:01:fc:6b:de:f8:20:3b:85:ed:80:86:
                    e8:1c:c3:89:9f:d2:5e:ef:59:b8:d4:a9:22:ef:c6:
                    bd:32:b4:66:6d:cc:94:93:f9:5d:63:0c:39:76:de:
                    6d:4a:b5:d4:37:ce:bc:5b:cd:fd:90:fa:27:6d:ac:
                    3d:03:db:54:07:5a:bb:e5:ce:6e:3e:17:a3:09:4d:
                    86:84:99:ca:05:b5:20:57:79:82:67:54:7d:69:56:
                    7a:a1:97:77:c6:0a:58:ae:a8:a7:73:8a:03:e7:72:
                    77:88:07:59:58:c2:79:d1:d5:56:f9:62:4c:70:f0:
                    21:c2:08:de:ba:b2:28:a6:3d:24:3f:4f:60:d7:e2:
                    db:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A4:6A:C6:38:4F:3B:37:3F:B9:22:6A:A8:60:7C:8B:B9:4A:2A:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/55a0944e-d4fc-3b2e-ad4b-590f376c6f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:85fb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:33:d3:36:80:8a:5b:71:92:32:5d:97:10:2a:d0:1b:c9:4c:
         28:45:2a:63:27:03:1a:42:cf:f1:43:3e:8d:d2:80:f5:a4:24:
         62:ba:e2:f3:44:1e:66:b1:ee:74:48:35:8f:6d:fa:01:c9:ce:
         39:26:43:91:cf:e9:e4:1b:7a:ea:04:7b:a2:42:ab:19:ce:5e:
         31:a9:7b:b2:d6:a2:df:b0:f2:d4:3c:4c:12:43:10:72:37:45:
         3b:72:9d:ad:bd:65:9f:a5:58:57:8a:74:4b:01:57:af:1f:09:
         cb:66:ed:ae:e6:88:8d:34:ca:c1:cc:f7:bb:c5:84:ef:db:59:
         01:91:5d:f3:f5:7f:1c:6d:91:c3:70:08:d8:14:1f:23:28:55:
         34:6c:da:41:b3:16:fe:ce:05:ae:b0:ee:19:ff:8c:07:30:d3:
         81:e7:b0:58:38:b2:4b:c2:c7:61:bd:21:e6:5e:2d:24:bb:c5:
         19:91:82:87:45:26:32:e7:73:6c:5c:54:18:d6:b2:43:77:75:
         e1:3a:a4:86:8f:42:8a:c9:aa:00:85:4e:e5:ba:cb:31:1c:97:
         42:34:35:95:c6:0d:23:06:27:49:88:1a:bd:36:f7:e1:a8:65:
         4c:f0:53:91:6b:9d:94:bc:de:7a:2c:45:a2:27:d1:20:2a:65:
         87:6a:ae:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:48:58 2024 by rpki-client on console-fra.rpki-client.org