Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65cd2dad-f4ed-31a0-bc83-f58353d94885.roa
File:                     65cd2dad-f4ed-31a0-bc83-f58353d94885.roa (raw, json)
Hash identifier:          g7o622ciiabloP5o+rR2Yd35k006dV4EJq83qn3SDPY=
Subject key identifier:   70:8B:F5:C3:19:E0:7D:BE:B2:B7:1B:39:90:A9:2D:03:47:BE:AE:BC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB41C4A26CC89BB332CDC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65cd2dad-f4ed-31a0-bc83-f58353d94885.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     7016
IP address blocks:        2001:559:247::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:41:c4:a2:6c:c8:9b:b3:32:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=d8e73175-fdc1-4346-977e-e563288068d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:cd:4d:09:9a:5b:89:b4:42:a2:ad:ff:7a:
                    f8:57:86:45:f7:03:a9:c4:c8:95:b3:a1:70:97:b0:
                    c7:c3:e0:fb:0f:0e:ad:9e:34:d8:4a:2d:e9:37:36:
                    13:85:89:f9:0e:47:52:a3:e9:91:00:09:ae:ae:8f:
                    f4:a3:b4:25:5a:54:b2:57:ec:6f:ff:8e:43:6f:d0:
                    93:4b:b6:ea:8f:cf:ae:35:e7:94:d0:a0:bd:a7:b8:
                    d3:d5:01:77:f9:06:7f:0c:d4:eb:d1:cc:a0:cd:4d:
                    2c:60:89:bb:21:02:c6:2a:b6:10:75:b3:a1:b5:ae:
                    f8:3d:ad:96:ec:4f:2a:33:aa:10:f1:f9:43:87:76:
                    35:49:1b:37:1e:e8:44:24:40:20:18:28:b0:50:54:
                    5f:2a:a6:f9:35:7c:28:1c:81:37:81:ea:f1:59:04:
                    db:c8:b7:e7:bd:1d:4d:09:fb:3f:6d:41:cc:97:b7:
                    45:a5:dd:40:58:f2:11:21:1e:64:56:86:28:18:10:
                    fb:66:af:90:5b:cd:18:66:14:36:97:7d:71:96:1f:
                    9e:5e:85:a7:bc:49:6e:f8:80:d3:c2:97:49:19:91:
                    7c:ff:91:cb:1f:fc:32:96:39:be:c1:b6:53:a9:91:
                    fe:fa:18:9b:30:1b:93:aa:80:e1:b1:3b:00:6c:9a:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8B:F5:C3:19:E0:7D:BE:B2:B7:1B:39:90:A9:2D:03:47:BE:AE:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/65cd2dad-f4ed-31a0-bc83-f58353d94885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:247::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:95:e2:36:48:02:20:14:18:21:d1:eb:3d:3c:45:b2:7b:14:
         e5:94:5c:2a:5c:d1:3d:da:d6:aa:cc:a8:b3:e4:a4:d7:97:ae:
         de:11:08:95:2b:ea:ca:a6:81:05:64:f3:2f:f8:3d:b4:45:88:
         f0:cd:63:08:8b:2b:c5:34:9d:df:f9:af:2f:03:3e:95:c1:aa:
         aa:80:7d:0a:fe:8a:9e:20:2c:8d:87:10:5c:42:14:4d:f9:99:
         1c:f3:ad:13:f4:3c:12:a4:ac:c5:6f:6e:0e:cc:a3:b6:56:c0:
         0a:b5:63:fa:56:00:9d:90:08:f8:75:01:cd:6e:a5:33:e7:f5:
         68:f9:53:04:98:fa:28:68:5a:a1:97:d9:f8:81:7a:a2:36:9a:
         d4:b3:be:36:c8:dd:80:2c:77:23:6d:7d:22:6f:df:eb:f1:fa:
         62:f7:f0:ed:8d:31:6d:7e:53:0b:fc:48:63:74:7d:56:f9:40:
         99:e4:dd:bd:02:ee:52:e6:74:8f:de:df:62:75:b5:51:d1:36:
         82:b0:12:2c:3b:23:09:b9:1b:eb:80:e6:bd:b3:55:7a:c6:03:
         34:6b:3f:8f:69:89:bc:3e:14:d9:9f:88:b2:7b:52:e7:67:bc:
         44:cc:af:ab:be:66:5b:38:8c:6d:fe:a7:b1:1a:d2:71:7c:93:
         84:ce:ff:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:49:59 2024 by rpki-client on console-fra.rpki-client.org