Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e84d479-d949-3e6a-b58b-62be168cacd4.roa
File:                     6e84d479-d949-3e6a-b58b-62be168cacd4.roa (raw, json)
Hash identifier:          px7zPhVYTt1DDOvEnzR7yYz+K17ogoOzcnWYW/jgsRA=
Subject key identifier:   FA:7D:39:3A:DE:E6:81:FC:22:6D:66:A6:44:5A:F9:26:54:67:D7:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF813794E17AB0BD1C0BBE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e84d479-d949-3e6a-b58b-62be168cacd4.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33657
IP address blocks:        2001:559:c32a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:13:79:4e:17:ab:0b:d1:c0:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=e8d47533-5fc0-4ad6-a3d4-c09ea5c0b62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b1:96:72:db:0f:8b:75:d9:96:f0:44:4f:46:
                    46:24:d6:98:77:42:a9:5b:d1:6c:97:fd:e3:d4:10:
                    1a:ce:8a:80:5e:bd:de:13:20:ca:b4:cc:b4:82:4a:
                    b8:a7:5d:40:ea:fd:1c:14:56:93:bb:3c:60:7a:80:
                    94:06:f1:d5:b9:3c:19:d4:33:8a:e6:dd:ed:4f:ed:
                    49:73:55:dd:dd:d8:15:00:6b:f8:ae:53:63:00:fe:
                    61:ad:6a:6f:a0:12:9d:a4:76:e0:a9:48:99:3a:a9:
                    8b:a1:8d:27:8e:73:42:c3:ee:1f:59:e1:0e:14:93:
                    fa:d8:14:4f:cb:6f:65:59:a1:b4:d8:43:2b:da:76:
                    b9:ec:46:8e:40:28:fe:82:f5:ce:dc:2b:ec:7c:9a:
                    da:fe:d2:4d:d0:b7:8a:16:54:f1:cb:d2:96:5e:c9:
                    39:a4:75:b6:9e:bb:1e:bb:e8:57:61:a3:73:b8:fd:
                    7c:db:41:ed:a4:79:5f:28:99:34:4c:b4:55:5c:f6:
                    e9:12:ce:a0:b1:52:2a:36:bf:d3:bf:14:5a:b2:39:
                    05:61:c8:9a:85:7a:62:57:57:48:a5:09:bf:96:75:
                    39:cc:a9:6b:db:11:95:bc:f0:2a:d1:2a:6f:f0:70:
                    68:07:4c:73:c3:f3:f7:1a:0f:19:86:21:fd:60:23:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7D:39:3A:DE:E6:81:FC:22:6D:66:A6:44:5A:F9:26:54:67:D7:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e84d479-d949-3e6a-b58b-62be168cacd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c32a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:32:d2:c1:0a:62:8f:ab:56:5c:47:87:78:7b:04:94:4d:d4:
         4b:73:e0:ab:c6:0e:11:44:e0:be:f5:e5:d0:ee:b6:59:50:fe:
         5b:3e:8b:da:c5:42:1d:ec:fe:c1:90:67:24:9a:1a:5b:18:ae:
         1c:82:09:e6:da:41:19:eb:8e:7b:ac:dc:df:cd:f0:20:be:e6:
         0d:84:d6:2a:18:66:18:76:3b:3d:bd:42:f1:51:87:32:1b:67:
         1f:17:a6:8a:a6:ff:ba:0c:5f:1a:b4:70:3b:0d:c1:52:2f:f0:
         28:65:0f:cd:93:78:9b:90:80:6b:71:51:2f:cc:d2:69:1f:45:
         b6:d3:18:29:1b:5d:1c:db:3c:a4:99:40:22:86:fc:10:27:df:
         18:90:ef:ea:e8:a0:b1:7a:ed:0f:8e:12:b5:42:fd:8e:fb:7f:
         4d:e4:37:c3:d6:c6:da:e2:1d:f4:48:0f:89:01:7b:37:ee:c1:
         14:76:04:24:90:e7:ff:20:0e:6a:c9:37:f3:91:a5:e8:49:e7:
         0e:3d:3e:43:4f:f4:12:67:14:14:2e:0f:22:b8:fa:aa:ac:c8:
         f4:fd:2a:dd:43:22:ec:60:8a:6d:e8:d4:d0:69:75:17:ab:e6:
         dd:6c:84:f4:10:2d:d0:2b:02:65:c8:30:1a:59:f4:0c:a9:f3:
         3c:3c:22:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:02:40 2024 by rpki-client on console-ams.rpki-client.org