Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72030dbf-df4e-36df-9759-56e8b61a03c2.roa
File:                     72030dbf-df4e-36df-9759-56e8b61a03c2.roa (raw, json)
Hash identifier:          yl8RmiKvgkgYe0wL/Zg6vBD+2+WnLicbQFMV9AxIT+U=
Subject key identifier:   BF:C0:20:D1:60:A3:89:D9:36:3B:CC:CD:84:35:EC:92:BA:C8:7E:79
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAE0DC83654E182ACB20D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72030dbf-df4e-36df-9759-56e8b61a03c2.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     20214
IP address blocks:        2001:559:87f1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:0d:c8:36:54:e1:82:ac:b2:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=351441b4-4d4c-40cf-8a48-3afc9b2b10dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7f:5f:ff:5f:d0:1e:47:b3:f8:90:b7:7b:02:
                    f2:24:86:a2:96:37:80:59:3b:f5:c8:98:6b:23:be:
                    4e:fb:79:7e:96:22:65:1f:ef:f9:fa:69:9e:81:05:
                    c6:61:53:88:27:b6:b5:82:63:b5:d3:5c:43:18:2d:
                    ee:da:98:c1:36:a3:6b:bf:6a:fb:77:3f:34:7f:cf:
                    83:f5:d8:4c:cf:67:94:d1:ca:e3:65:5d:b1:17:01:
                    56:e8:44:a6:9e:f9:30:79:be:99:3c:c6:a8:0b:81:
                    d2:17:cc:b0:65:b3:74:3b:86:2f:97:93:1e:25:6e:
                    01:4f:f9:03:06:2a:51:f5:4e:d9:ef:10:78:1f:76:
                    c1:68:9f:c1:b7:a4:21:dc:cb:d6:59:43:59:e1:8c:
                    98:eb:4e:ba:87:bd:18:0b:9f:6a:58:47:4d:42:d1:
                    11:e8:5f:e3:24:3f:41:34:df:ba:b3:5b:59:8d:c8:
                    42:82:ab:9c:d6:42:40:4f:2e:6f:96:7d:59:72:0b:
                    4d:a6:ac:1e:1b:e8:67:13:2b:ce:2e:93:8d:49:ca:
                    1f:26:b7:33:eb:54:a2:3b:9f:15:6e:57:e2:bc:8c:
                    83:e2:ae:14:aa:9a:11:0c:6d:16:73:b7:03:b0:e8:
                    03:65:de:3c:f4:6c:02:39:35:6d:9a:62:e3:ac:34:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C0:20:D1:60:A3:89:D9:36:3B:CC:CD:84:35:EC:92:BA:C8:7E:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72030dbf-df4e-36df-9759-56e8b61a03c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:87f1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:87:ef:e1:e3:0a:17:f9:8c:9d:7e:1b:dd:39:f5:b7:a7:94:
         f6:ca:cb:90:f5:5f:15:2b:54:15:12:93:6c:6c:fd:71:d6:4a:
         b6:66:73:59:78:9f:a5:f7:c9:19:4d:e8:69:23:09:66:cd:6a:
         f1:9d:15:f2:cc:8c:8c:87:37:a5:45:58:0b:3a:9e:b0:b3:49:
         e6:19:7c:ad:01:c8:b1:e8:07:cd:aa:ba:7c:f4:22:90:3f:37:
         86:48:0f:11:4e:f8:43:d7:ce:99:4d:a2:44:62:80:f6:90:a1:
         77:01:6d:93:fb:24:dc:36:d6:50:f5:8e:15:e7:4b:3e:9f:d6:
         4a:4e:ad:9c:bf:0b:3b:02:d7:01:08:68:e1:a7:18:30:0c:23:
         ca:a9:d6:01:e0:36:b4:03:fb:fc:7e:a6:ea:41:b8:e5:55:4a:
         41:62:1a:7a:cb:27:cd:00:a5:d1:79:70:8a:3c:62:c0:20:a2:
         0c:54:09:97:03:38:be:55:74:45:05:ab:4e:5c:6c:a4:8f:5b:
         fe:7e:aa:22:f4:a5:b1:bf:d5:74:7a:c2:70:5f:61:ed:54:c7:
         be:d0:be:e0:d3:d1:d5:39:98:8f:91:a7:5c:fa:5f:0b:60:a5:
         e7:9e:99:47:24:dc:e1:cd:f9:ac:84:a5:2e:9e:1f:47:31:36:
         e4:c9:59:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:40:54 2024 by rpki-client on console-fra.rpki-client.org