Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d424d54-2f2a-35e4-9588-7ad4728daf54.roa
File:                     5d424d54-2f2a-35e4-9588-7ad4728daf54.roa (raw, json)
Hash identifier:          VSTnROOX9rV8WTE5ALNQIJ/6cAdFF8CZlhzWP2pPtJs=
Subject key identifier:   43:AB:66:57:7D:19:54:88:47:56:FF:6D:4F:95:FA:A0:A7:51:24:BF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABD3316ACD2E55F1BB42C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d424d54-2f2a-35e4-9588-7ad4728daf54.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7015
IP address blocks:        2001:559:8306::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:d3:31:6a:cd:2e:55:f1:bb:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=0038bb24-22a0-4c51-a6aa-7d80177b1b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:6c:f4:c6:53:de:4f:45:4d:dc:49:bc:d6:
                    9f:7b:bc:54:73:03:02:22:db:f4:0f:62:a6:20:a0:
                    e5:47:9e:50:e8:9e:ed:b1:c2:ed:69:d8:96:f6:8d:
                    83:02:46:cc:c4:2c:cb:44:c8:b6:69:85:28:b7:49:
                    d3:7a:b9:27:07:9f:f7:fd:80:84:ae:ad:a6:09:59:
                    c0:0b:e2:ef:ee:85:62:27:64:42:20:b8:b2:3e:06:
                    3c:92:55:a1:77:68:0c:9f:c1:c2:4c:51:29:c0:70:
                    e8:bb:a5:ce:c5:e8:b6:04:3f:70:a3:9e:5a:2e:bc:
                    dc:6e:a5:19:86:58:e5:56:c5:3b:ac:4c:f3:eb:b6:
                    9b:1e:05:56:4b:44:3e:7d:a2:27:0c:7d:df:dd:78:
                    af:e1:95:6b:01:6a:ee:3e:22:4e:9d:b0:1f:0b:21:
                    5e:7d:48:dd:55:22:99:b0:38:03:a8:b6:55:08:05:
                    98:15:31:24:3e:83:1d:fa:bc:d1:32:50:53:f8:aa:
                    e3:89:02:32:c8:be:21:cf:40:e2:97:d9:d2:1a:09:
                    7f:16:1b:c2:c5:d7:7f:09:8b:23:f6:df:f7:17:89:
                    2c:d3:a0:80:2e:ba:af:3d:61:18:1c:7f:30:2a:7d:
                    f0:72:34:15:cb:97:3d:02:d6:e2:83:1a:00:e8:43:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AB:66:57:7D:19:54:88:47:56:FF:6D:4F:95:FA:A0:A7:51:24:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d424d54-2f2a-35e4-9588-7ad4728daf54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8306::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:d7:56:0d:b7:51:32:e8:80:89:a8:f5:ff:1b:12:b2:b6:19:
         8b:fd:49:ba:59:c7:68:26:0e:e0:99:1a:76:82:c4:00:b4:f4:
         ec:bc:58:0c:23:76:03:63:69:5b:6f:be:5f:f3:1f:e1:44:b9:
         5e:3d:17:49:47:dc:5d:4d:b0:75:0f:3c:45:15:b3:2c:63:7a:
         16:e6:e1:ae:10:d6:6f:f6:f5:da:87:8a:14:cb:9f:62:35:a8:
         2a:ed:03:77:e9:ea:26:58:da:f6:b2:c3:78:7c:2e:17:00:56:
         2a:62:3e:38:7e:67:6f:42:0a:db:b0:49:26:7c:45:4e:de:49:
         e8:5a:e5:00:66:9e:6c:8d:ef:d0:07:9a:8c:a4:3f:6a:20:8b:
         f0:4a:01:64:33:d2:2e:56:e5:d4:ac:17:30:c6:99:2b:2b:5c:
         b9:e7:fc:c5:c4:8b:4d:b8:eb:64:d6:38:57:9e:18:0f:62:87:
         21:57:45:d8:f7:b7:f9:e4:33:d3:b2:fe:99:0d:a9:cf:83:d8:
         f0:a0:b8:02:f7:b1:2f:7f:41:e5:8a:cc:3f:80:ef:73:94:aa:
         cd:ef:34:35:ab:36:85:12:0c:fb:2f:a7:63:33:8a:5f:21:5a:
         f2:34:14:57:2d:eb:6e:3c:c1:fc:c6:f8:99:ee:66:92:bc:d5:
         fa:8e:5f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:51:44 2024 by rpki-client on console-ams.rpki-client.org