Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a08287c-8ae3-3a20-b087-8f58a78a164f.roa
File:                     6a08287c-8ae3-3a20-b087-8f58a78a164f.roa (raw, json)
Hash identifier:          WgOtD/DZd20cjJ16OsPSdE3K8URQCOP0pUzYV5VqVjc=
Subject key identifier:   07:D4:90:40:3E:F5:4D:47:19:5B:C7:CD:F4:56:DE:EE:D0:8E:CF:6B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFBDB6BBD3168E8C526FF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a08287c-8ae3-3a20-b087-8f58a78a164f.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        2001:559:8014::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fb:db:6b:bd:31:68:e8:c5:26:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=c7e633b0-e5aa-4007-8132-5bec9cbe3d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:d2:3d:72:40:5b:5d:10:f2:34:e3:b5:a3:
                    98:49:d0:53:80:1e:c5:e9:97:b5:a6:d7:08:87:39:
                    8d:d2:ce:f5:1e:7c:b2:c6:b3:75:74:59:c7:ad:a0:
                    4e:27:a8:c5:6e:7b:96:bc:54:8f:35:8c:97:7c:e2:
                    dc:35:30:23:36:3d:50:f8:bc:1a:3f:a7:61:b9:78:
                    0a:45:eb:7f:d0:16:2c:e4:18:91:15:1b:58:21:db:
                    1e:94:52:2b:6a:6e:1e:54:83:43:79:29:05:af:1b:
                    70:80:34:71:12:6a:34:e1:30:b8:b7:74:b1:5b:49:
                    1d:15:46:66:3f:f8:51:95:92:83:41:4a:26:0f:4f:
                    5f:65:15:06:16:c4:c3:41:2f:a1:6b:54:e9:2d:a0:
                    b7:1a:79:b9:35:36:d6:ea:34:81:46:42:c0:a5:e2:
                    71:d7:f0:88:9e:3a:22:7e:e9:ad:a4:01:a1:c3:df:
                    83:e4:15:1e:8a:c5:0d:74:f9:a0:eb:f3:7a:02:8e:
                    c8:58:b0:66:48:dd:d7:e5:8f:18:00:d7:5a:0c:7a:
                    ed:76:c9:c9:a6:f2:7c:e4:9a:ae:a7:7c:87:8c:1b:
                    63:28:c9:d8:32:f4:b2:52:51:62:de:53:54:c1:5f:
                    09:5f:7d:78:bd:33:8d:5e:90:50:15:c5:03:50:85:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D4:90:40:3E:F5:4D:47:19:5B:C7:CD:F4:56:DE:EE:D0:8E:CF:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6a08287c-8ae3-3a20-b087-8f58a78a164f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:8014::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b7:63:d3:7c:27:be:3b:0a:f3:02:51:f1:02:27:42:b9:9b:
         2a:e2:fb:3d:1e:ca:ef:4e:62:15:b4:4d:bc:b6:c8:48:05:37:
         17:3c:ec:3a:e7:85:a2:8f:d9:be:07:f6:a5:40:53:c1:0d:1f:
         9c:64:cd:9b:a5:54:7e:ae:09:81:a5:a4:b0:09:b9:53:ea:cc:
         d7:e9:20:4b:78:20:51:6f:76:e6:35:d7:72:1e:a9:65:d2:4a:
         4d:5b:5d:3e:96:a1:d6:1b:53:4a:d4:20:83:fd:f1:96:6c:d6:
         5d:a1:82:04:43:ba:03:83:d2:c9:aa:6b:ca:64:76:e7:ba:7e:
         a8:72:81:29:5a:7a:50:4e:54:31:4a:19:3c:c2:26:38:fa:b4:
         ee:d2:20:9c:fd:f7:f9:f6:9c:3c:da:86:2c:c9:a4:35:37:a3:
         9e:e6:75:3d:b8:3b:58:09:6f:11:ab:8d:03:0a:06:25:7d:56:
         06:d3:78:e1:e1:ae:4b:08:bb:5d:9a:2d:ed:1d:49:84:c7:58:
         e3:8e:15:ba:54:86:4b:f4:41:a2:40:85:61:66:83:5e:b1:d3:
         ce:0f:0a:42:45:2f:46:3e:0c:de:c2:e0:6b:ed:79:dd:b5:c8:
         d9:e6:fe:b6:82:96:a0:57:92:a3:98:23:6c:77:b0:fa:a1:fe:
         e4:63:05:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:14:53 2024 by rpki-client on console-fra.rpki-client.org